Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: KZQAPjU8EpXnhjcmjzp/F9gvqsa8drtu0bji4K+/TfI=
Subject key identifier: F6:83:3B:BA:4F:E6:06:65:F1:E3:9E:DE:6D:95:8A:B8:C2:EA:C6:BD
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 01A06CEFE87530538D2B865B93D5C7242D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 1A44
Signing time: Fri 04 Sep 2026 15:00:57 +0000
Manifest this update: Fri 04 Sep 2026 15:00:57 +0000
Manifest next update: Sat 05 Sep 2026 15:00:57 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: GZYIeltI89+FN2eiJUJ+PawZvsjKqtSrOZu9/zMqAyo=)
2: tEwvrvMSMdRpreRXE8vIUxCdrWU.roa (hash: LuQrZ1Bsydhnn8JYLfrtQ2fDEieRiuf7PuXKlQlzF0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:ef:e8:75:30:53:8d:2b:86:5b:93:d5:c7:24:2d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Sep 4 15:00:57 2026 GMT
Not After : Sep 5 15:00:57 2026 GMT
Subject: CN=f6833bba4fe60665f1e39ede6d958ab8c2eac6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:84:bd:0c:dc:ce:88:49:61:6d:cf:8b:72:
d3:e2:e2:10:87:f4:e0:bc:d8:d7:78:61:c7:84:ca:
52:4f:4d:70:53:46:f6:e8:93:99:cd:59:d3:f3:5e:
48:56:35:f5:bb:52:70:80:ce:0a:8e:3a:45:50:d7:
a2:e9:3c:c7:82:37:98:d0:1b:84:b1:d2:84:13:0f:
04:5f:fc:6b:e5:90:8d:0b:08:7b:82:86:25:d3:ae:
c6:99:bd:62:ef:95:6b:26:6a:63:d0:a4:07:2c:63:
25:82:1c:87:43:e0:cc:f2:b4:d2:9d:66:39:12:14:
23:00:e2:2e:76:97:95:5f:ed:bd:32:e1:b7:f2:2b:
20:a2:85:af:7c:dc:fb:29:1c:f4:a1:4f:14:cc:44:
bf:0a:4f:a7:d8:bf:93:d9:17:4a:85:4e:86:08:2b:
3d:3f:ed:4d:f4:8e:02:ab:a5:87:9c:12:41:83:c3:
d3:11:3a:4b:6b:b9:ee:84:f7:26:8e:9e:5f:1a:a8:
04:d1:e9:4f:e0:dc:ce:70:b0:0f:63:61:b1:c9:df:
81:81:7d:2e:73:51:9e:0e:6e:4a:f3:94:9b:c3:54:
3f:ce:01:a0:e5:be:7f:c6:c5:d3:f8:8c:30:b3:f3:
03:e3:d7:3e:9b:b2:ad:2d:35:15:1a:dd:0b:48:03:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:83:3B:BA:4F:E6:06:65:F1:E3:9E:DE:6D:95:8A:B8:C2:EA:C6:BD
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d0:21:37:18:f4:cb:66:a0:cd:ff:95:2b:10:5a:29:82:3a:
3b:66:bd:6f:21:7e:c3:42:8a:43:a1:ea:5e:c6:87:91:d6:41:
da:44:d5:fe:ca:d3:a1:c1:83:7c:6b:79:14:7e:76:f8:b9:9e:
5c:67:4c:6d:92:17:60:87:65:d9:9b:2b:61:66:be:d3:9a:00:
ee:33:c6:5b:f0:b2:83:04:90:f0:1f:83:02:ee:00:d5:57:1f:
a6:0c:5a:67:8a:8d:9d:af:5c:bc:e0:f0:cb:6a:9f:8d:38:77:
d4:c1:ad:41:a5:98:bf:d1:40:5b:db:47:2e:65:b8:c1:97:76:
35:10:34:27:d8:fd:31:44:81:d8:b0:ec:6d:d3:83:99:99:00:
f5:93:83:25:23:c8:f1:e0:a0:2d:a6:5e:26:d6:2b:f4:92:8e:
a4:6d:94:54:fb:a5:4d:e9:70:bb:d2:2d:35:e0:4b:80:d4:8e:
59:d0:a5:a6:71:a4:77:23:6a:f2:b7:67:66:5c:8d:d9:2f:fc:
7a:40:78:75:e1:c1:57:13:b7:f1:2b:8f:3c:43:f9:88:3b:68:
f5:ab:22:bd:5f:0b:39:d3:a5:16:68:63:9d:6e:73:0f:2f:d1:
9b:7d:c7:5a:de:ef:ca:23:e4:6c:83:9a:d0:16:76:c9:14:f8:
ce:89:50:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:35:52 2026 by rpki-client