Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
File: O_zNSgBCLIZfUJO4W7howrswxGk.mft (raw, json)
Hash identifier: i0LiRv4VCcw2yX457zvQhRi5BImm3krvJJxl80szMYE=
Subject key identifier: 30:E0:FD:97:3E:A0:E2:94:E4:C3:FB:07:26:7A:33:05:8A:36:2A:86
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial: 01A17EF38D3F78E4D48BB70AEADA41A1532F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 20:00:52 +0000
Manifest this update: Tue 27 Oct 2026 20:00:52 +0000
Manifest next update: Wed 28 Oct 2026 20:00:52 +0000
Files and hashes: 1: O_zNSgBCLIZfUJO4W7howrswxGk.crl (hash: YlDkqOWednO0eBr98NEtZ60lRwAqxlJDYGVeb4yltfQ=)
2: _In4h_FwuHoLeAhLdOO_0gDal3g.roa (hash: 5CWj3iN4WCDtTiUEN45Kg99lLjsQ7Kch3A5A4xC3N5U=)
3: fLkAXt4--q3hoUBnohxzj2MtAHQ.asa (hash: nUzSBJOLVdQVJSdyNI1NiKj8o8Pa7JnmM7atYEeGT2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:8d:3f:78:e4:d4:8b:b7:0a:ea:da:41:a1:53:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Validity
Not Before: Oct 27 20:00:52 2026 GMT
Not After : Oct 28 20:00:52 2026 GMT
Subject: CN=30e0fd973ea0e294e4c3fb07267a33058a362a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:72:3d:d4:2f:f8:a6:2d:ca:e3:4f:1d:fa:
a5:54:1e:cd:54:1c:7b:b7:e2:a7:e9:d4:80:7a:c1:
63:35:3f:6f:8a:93:aa:96:8f:9c:9f:9f:53:f9:d1:
96:72:9f:32:91:fb:2b:ce:4a:1d:20:ae:82:f9:39:
f9:6a:40:55:c4:fa:9b:62:4e:85:2e:49:2e:8c:13:
f5:e2:d3:7f:fa:26:b7:d3:0f:17:c8:97:af:93:53:
5a:56:c5:29:f8:06:58:41:76:0b:23:20:74:71:fb:
a2:79:4d:16:c1:75:78:bc:ff:65:c0:f2:19:57:a3:
39:d2:a2:18:73:3c:d6:34:dd:4d:b3:cf:14:e4:58:
62:a0:76:0e:07:76:93:4b:bd:e4:a8:92:c7:fd:4d:
54:61:3f:36:32:a9:3f:bf:63:e0:df:74:c7:51:ef:
7e:e8:20:d9:b6:77:58:08:98:ee:b7:82:dd:f2:32:
c4:0e:1f:29:a7:85:c1:49:3f:ee:5b:a0:ac:7d:60:
67:f1:b4:36:7d:1e:7c:02:c6:17:15:a0:2e:e3:14:
b3:ab:0d:cb:9e:ca:b0:a5:bd:c9:f3:1f:8f:c2:65:
5d:f7:ef:f8:e1:a1:cc:8f:28:b5:f6:1d:9e:74:b2:
ff:73:30:ae:ee:a8:fe:a3:17:48:50:57:a8:1a:aa:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E0:FD:97:3E:A0:E2:94:E4:C3:FB:07:26:7A:33:05:8A:36:2A:86
X509v3 Authority Key Identifier:
keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:dd:da:35:cd:92:9a:24:c3:9f:54:e7:1e:69:e4:3c:69:02:
b8:51:7e:c3:83:3a:0f:0f:a6:7d:bf:5e:92:9c:d9:d9:65:de:
5b:d3:09:09:a8:c0:9c:5e:cb:9c:71:34:72:67:51:75:89:31:
f4:7e:0f:c3:59:e4:34:e4:f1:67:cf:1d:12:7d:f7:2b:d1:30:
d1:af:1b:2d:1c:56:a7:da:7b:88:92:77:9a:fc:5e:74:d0:95:
cb:14:8d:bc:68:1d:ba:a8:d1:6c:a8:7a:d6:6d:22:aa:a2:4f:
55:65:09:9c:96:04:ee:a7:07:26:11:5c:2a:8c:6d:48:42:a1:
91:70:7f:23:1c:57:85:02:e5:98:10:49:a6:bd:77:77:67:46:
42:cf:e9:92:cd:9b:35:2c:da:88:c1:06:e7:f3:40:ca:c7:d2:
e4:b8:db:9f:85:96:e6:a2:21:11:ca:29:cc:35:92:3b:23:44:
9e:68:37:8e:b3:43:de:38:5f:c7:d1:94:de:b8:2c:8a:8d:56:
f8:bc:11:12:27:47:38:b7:29:4b:40:c7:49:24:48:81:f2:1a:
46:1e:71:b5:ce:07:d4:bb:a2:b3:1e:2f:13:30:64:3a:81:2c:
b3:33:5f:c9:bb:ba:bb:4c:23:f2:c6:24:f2:57:97:49:a4:71:
53:1a:0e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:43:06 2026 by rpki-client