Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.mft
File: o-3nO95s_H12jrCVWPTsefsGiAU.mft (raw, json)
Hash identifier: TF2ArO9A2fMEljLdmeBNKXz/p1I7IVDMfphT/8PUlBM=
Subject key identifier: 86:8E:4F:25:8C:C4:1D:5E:DA:1E:A9:AF:B6:1C:C0:0B:E5:86:BD:3E
Authority key identifier: A3:ED:E7:3B:DE:6C:FC:7D:76:8E:B0:95:58:F4:EC:79:FB:06:88:05
Certificate issuer: /CN=a3ede73bde6cfc7d768eb09558f4ec79fb068805
Certificate serial: 01A1875165E9FE52DCD6FCDF0B38501E7B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-3nO95s_H12jrCVWPTsefsGiAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.mft
Manifest number: DD
Signing time: Thu 29 Oct 2026 11:00:20 +0000
Manifest this update: Thu 29 Oct 2026 11:00:20 +0000
Manifest next update: Fri 30 Oct 2026 11:00:20 +0000
Files and hashes: 1: o-3nO95s_H12jrCVWPTsefsGiAU.crl (hash: ES3apbh0zmUyhpjiO5PxYuBt6sXoZX4Gq5bgtfo7cRE=)
2: rxBMafXmJSrXR8vDOASdZ176CWs.roa (hash: UwSN/p8tMYJe6IO6Z1F6/UCLvX0zPceoWwIqurlhRz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-3nO95s_H12jrCVWPTsefsGiAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:51:65:e9:fe:52:dc:d6:fc:df:0b:38:50:1e:7b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ede73bde6cfc7d768eb09558f4ec79fb068805
Validity
Not Before: Oct 29 11:00:20 2026 GMT
Not After : Oct 30 11:00:20 2026 GMT
Subject: CN=868e4f258cc41d5eda1ea9afb61cc00be586bd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:00:ea:83:40:3b:fb:5b:1e:54:ad:2a:51:
ac:f1:08:88:3a:7d:5c:98:a2:f4:33:e5:99:ff:8e:
28:43:f4:9f:3c:b4:47:25:47:9b:50:eb:55:41:52:
1d:79:d8:80:3b:67:2b:78:61:3d:67:37:89:7a:60:
dc:78:7d:ac:d7:ec:c0:5f:aa:83:bc:1f:95:3d:78:
cc:a0:44:3c:b7:db:5d:47:e1:05:94:22:7f:ba:c9:
59:0f:29:26:4a:06:c1:40:a0:59:49:6b:b4:72:00:
2c:7d:a8:d0:fc:72:cc:3b:95:e5:b6:3f:6b:e5:ef:
bb:5d:1e:7f:b5:57:a2:50:1a:13:f2:e4:80:f4:b4:
c8:f0:0e:a3:6f:56:c4:c5:9c:47:fd:6c:0f:52:35:
11:00:f1:9e:32:38:91:14:a9:9e:67:15:9b:0a:44:
69:bb:11:8f:1e:3a:3a:f0:06:28:f6:fc:ec:d4:f1:
26:8e:d9:ef:50:a8:2c:11:38:36:99:48:b5:71:1f:
a8:ca:35:af:ad:e9:89:86:6d:f1:25:be:bc:6f:55:
b2:fc:92:3d:7c:ca:bc:5d:39:5e:4c:99:75:bd:0a:
c2:01:10:e1:33:9e:7a:1a:61:3b:a2:e2:9c:63:38:
51:58:70:f4:1a:d4:68:01:dc:45:30:5b:ef:12:fa:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8E:4F:25:8C:C4:1D:5E:DA:1E:A9:AF:B6:1C:C0:0B:E5:86:BD:3E
X509v3 Authority Key Identifier:
keyid:A3:ED:E7:3B:DE:6C:FC:7D:76:8E:B0:95:58:F4:EC:79:FB:06:88:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-3nO95s_H12jrCVWPTsefsGiAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:30:56:7d:e6:81:55:03:c1:c2:43:a8:2a:de:a0:be:d4:9a:
da:9e:83:38:d6:b8:f8:ad:df:bb:2a:9f:5e:a7:7b:0d:b1:fd:
9b:e7:28:56:76:43:94:ce:97:86:42:ab:6f:2a:7d:0a:ba:76:
b1:61:74:e1:35:a5:58:d2:72:92:49:2e:9e:ba:a9:35:89:59:
68:71:3e:47:35:36:f2:02:69:5e:6a:b3:82:43:73:e1:fc:14:
7f:be:c9:21:70:a1:c6:fa:d6:e1:ab:2f:a2:c2:bc:4e:03:44:
2c:17:59:55:03:5c:ba:ce:b9:71:72:be:97:3b:e5:07:2e:33:
66:fb:47:92:7a:c3:68:ac:16:28:67:6c:34:9a:98:80:0a:fd:
38:b7:91:13:eb:7b:41:a8:ca:08:61:ee:67:12:4e:3e:33:ef:
e8:75:20:17:22:3c:32:31:3b:d5:c6:56:27:01:42:02:7c:6c:
df:61:5c:a2:c8:7d:8b:7b:0d:a9:2a:52:38:15:b6:7e:ab:fe:
75:7e:a4:27:0e:0d:e0:20:25:ff:4d:1d:84:4f:7f:62:ff:3c:
3e:0d:bd:f1:cd:b8:99:dc:58:86:97:67:24:c7:2e:5e:d2:89:
cb:a9:a6:e2:6e:01:6d:23:18:90:75:6d:ac:c8:f2:9b:63:f8:
7d:63:56:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:56:58 2026 by rpki-client