Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: IclnUIZ9X40fHKlZMOOnK1bgih/QVzPK2HWMJSyln8Q=
Subject key identifier: CC:63:C6:98:39:D4:3A:42:41:52:3D:83:CD:6B:97:8F:53:AE:CD:7E
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 01A06EA7238BF1B2C4C009AB59E72EC11686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 1A3A
Signing time: Fri 04 Sep 2026 23:00:42 +0000
Manifest this update: Fri 04 Sep 2026 23:00:42 +0000
Manifest next update: Sat 05 Sep 2026 23:00:42 +0000
Files and hashes: 1: gNrEO1fd_UO2lkW7If9ASyI8mM0.roa (hash: oiXIC9NyYqB7VON1tGxWLy+Yto6YiZWA2pyQHSZiaiQ=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: mQxgoFCZyza7NROFSOG3ECjhRAaQ0lHPeoU/tjy++00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:23:8b:f1:b2:c4:c0:09:ab:59:e7:2e:c1:16:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Sep 4 23:00:42 2026 GMT
Not After : Sep 5 23:00:42 2026 GMT
Subject: CN=cc63c69839d43a4241523d83cd6b978f53aecd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:17:9a:f8:7d:5b:80:db:64:f1:7b:a2:88:
29:54:c6:13:59:37:13:d8:cb:5b:87:a6:c3:08:2f:
a8:1d:48:69:94:88:d3:fd:be:e6:42:e3:93:6a:88:
a0:e4:05:78:be:c8:21:14:97:1b:7f:1f:f1:fd:4b:
da:38:be:a0:d5:c3:35:28:6e:bc:c8:75:95:ef:48:
94:b6:60:4b:b9:40:43:2c:7c:0d:1f:2b:40:9a:bb:
28:b2:db:a8:c4:b9:fc:5a:fe:f7:21:ea:44:30:7a:
de:99:05:5d:e2:3d:9f:69:c6:20:eb:ce:76:e0:4b:
1d:da:9b:75:90:27:58:69:de:48:47:03:4e:b4:b9:
3d:7e:91:2a:be:39:10:d0:04:db:0b:72:34:d0:a2:
bf:7f:fc:26:8f:ae:1a:f3:14:d1:3e:63:74:03:d5:
9b:99:fa:25:f2:8d:13:9c:74:53:1e:e0:4b:3a:31:
91:98:8a:89:8f:7b:4e:3d:cd:c4:e9:38:de:02:b9:
97:17:22:c3:3c:72:7a:7c:3c:ae:5d:c4:15:90:22:
26:4e:e5:d3:5c:8c:69:07:f8:06:15:ff:cd:7a:28:
0f:87:a2:d2:71:e8:07:40:b8:41:dc:0a:b1:a7:14:
a9:2a:d1:a0:15:61:77:bd:ec:24:c5:c3:f0:4c:fa:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:63:C6:98:39:D4:3A:42:41:52:3D:83:CD:6B:97:8F:53:AE:CD:7E
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3a:d0:fd:83:c3:a8:44:1e:f0:9c:18:84:88:f7:6d:15:de:
db:92:bb:4c:1d:50:3a:3d:9d:5c:fd:09:88:6e:7f:7c:e7:38:
c8:8c:83:cc:f1:f9:7a:82:5b:1d:d5:bd:ec:50:30:86:72:31:
cd:a9:fe:29:5b:1f:48:fe:7c:9a:c7:aa:ea:95:5e:21:d5:b1:
8d:ee:74:4e:1e:07:58:ad:ea:e6:33:8c:c5:ae:5c:b7:b7:a7:
73:97:8a:f1:7f:51:1b:77:33:90:92:ff:d5:fb:90:11:96:e7:
77:6f:9e:86:e4:6a:a0:3d:76:ea:19:c7:a5:16:42:78:ef:17:
8b:5b:2e:6e:9b:7f:48:e3:7a:9e:32:96:97:09:07:4b:01:1e:
fc:f3:90:61:11:27:e7:a6:9c:f8:53:6b:09:07:a3:ba:91:e3:
fa:a9:e5:e0:97:a7:e4:18:d1:59:b6:7c:59:a0:0c:0d:ef:2a:
13:87:de:0f:15:e3:1a:37:60:34:df:8a:15:d0:50:22:41:1c:
86:4b:76:7d:59:90:6f:9e:9b:d9:6d:ec:4e:26:b9:f2:eb:4a:
f9:7b:4e:50:4f:d2:82:98:8f:71:eb:ab:61:61:f5:8a:81:9f:
67:d9:0e:3f:30:dd:3f:69:70:8e:c0:1e:7e:8b:ab:b2:63:9f:
aa:dc:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:46:28 2026 by rpki-client