Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: FM4jZauXsQ7ofvpQ+HHa3t5n7YS/FSdI+2QUYXR6M2M=
Subject key identifier: 28:6A:9F:E2:71:1C:89:BB:3A:91:C6:EA:5A:D3:94:FC:29:18:6A:02
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 01A1592F79F3DC879534E22F85681B5AC670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 0CF4
Signing time: Tue 20 Oct 2026 12:00:45 +0000
Manifest this update: Tue 20 Oct 2026 12:00:45 +0000
Manifest next update: Wed 21 Oct 2026 12:00:45 +0000
Files and hashes: 1: 8CC9XG9ENZD8uSBjBaV6IrcWRcU.roa (hash: +cFHBDI2vSe8qYQNG7SSN4dtten2bWEf/OgE/4boopY=)
2: HscqlSP_T6jWomPIcWdE3IC4My4.roa (hash: /7wtYvtk4cUOoXmRq6scL7JJ5OG21YbveewB9o7fEHg=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: Qv4iyZTxx6+vTC5Lc1X2eapLMaItsY1xaHnm8uev8Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:2f:79:f3:dc:87:95:34:e2:2f:85:68:1b:5a:c6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Oct 20 12:00:45 2026 GMT
Not After : Oct 21 12:00:45 2026 GMT
Subject: CN=286a9fe2711c89bb3a91c6ea5ad394fc29186a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:40:4f:28:d8:92:c4:fc:44:2f:dc:2b:9d:
73:dc:e4:7b:29:97:e6:15:fd:b2:b1:27:92:21:ae:
55:64:9f:64:99:99:63:fc:20:28:df:32:0f:c8:5c:
85:51:60:18:4c:41:8a:1f:98:bf:60:d2:a0:83:9f:
01:cb:59:81:9d:ea:0f:36:65:c4:61:71:29:0c:88:
85:4d:88:fb:ee:96:79:d4:d1:40:20:cc:fa:3b:4d:
f8:5d:33:c9:31:fb:31:ad:a0:43:72:87:e3:1e:b4:
dc:4d:5f:b7:39:96:18:f1:89:79:a8:13:6c:ea:10:
a1:6c:d9:a4:41:df:10:21:f4:62:a8:72:0b:3f:61:
1a:6b:ad:d0:00:5f:3e:4d:8e:0f:10:38:86:e2:2e:
f2:0d:08:4d:dc:10:b6:03:16:14:25:c5:7f:50:5c:
f7:59:a7:27:fb:e7:3d:08:ad:6f:b1:0c:5e:58:59:
b2:75:3a:dd:4d:d2:c5:32:b6:04:eb:06:a1:6d:eb:
64:13:c5:db:c0:c4:3e:36:7b:af:5e:d4:57:71:59:
64:52:00:d5:28:45:af:e2:99:00:bc:65:be:da:89:
3e:69:fe:50:08:d7:29:20:f9:0e:88:4a:df:d5:57:
51:b6:0e:fe:a8:e3:cc:bc:15:65:04:02:76:b8:e7:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:9F:E2:71:1C:89:BB:3A:91:C6:EA:5A:D3:94:FC:29:18:6A:02
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:60:c3:81:19:7d:b8:50:3a:45:64:b3:22:d0:6d:99:80:7f:
ef:cd:56:b4:a7:b9:b7:22:5d:95:48:5d:25:47:60:ab:84:ca:
9e:12:cf:84:05:7f:17:39:d8:af:ea:19:95:57:11:79:68:f6:
62:f2:9c:79:75:6e:5a:87:2f:e2:fe:dc:ae:42:4f:c1:b7:19:
89:54:bc:0f:f9:32:10:ae:ce:08:e2:44:33:8e:62:f1:5b:c8:
30:8b:df:9a:f0:7b:b1:b8:90:d9:a9:14:ed:f2:14:6d:31:75:
d8:7d:f3:50:7b:31:e6:04:14:74:50:4c:d8:12:d3:7a:dc:c5:
68:b4:39:93:b9:36:39:e8:a3:f4:b5:a8:4b:d2:19:0b:d1:82:
47:a1:63:16:54:c5:ab:2a:38:eb:4b:0b:04:52:24:57:a9:f5:
f9:40:72:ee:87:41:a4:1a:e6:c1:9c:ea:60:59:f6:85:4b:d0:
93:7f:d8:3f:9e:c2:8e:1a:db:ca:c0:49:bc:61:6d:99:3b:7a:
1b:4f:17:a3:55:98:7e:3c:12:14:d7:b4:62:7b:4b:55:5e:00:
0a:a8:19:4a:db:f2:9a:1f:fb:09:44:0a:25:3e:c9:23:43:c1:
83:f5:bc:9b:78:20:41:db:4d:0c:07:d6:7c:7b:38:e6:c2:b5:
96:c9:af:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:06:08 2026 by rpki-client