Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json)
Hash identifier: 7V1H3gimkiNPf2qEozoI8o0KnJwPnch+TKjzcCRHgwY=
Subject key identifier: 21:32:4B:FE:41:B5:90:2A:8F:E0:84:02:61:7F:49:9A:A3:32:57:6B
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial: 01A194D63360A5561DEEE1B4E3D75309F8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
Manifest number: 1AD2
Signing time: Sun 01 Nov 2026 02:00:28 +0000
Manifest this update: Sun 01 Nov 2026 02:00:28 +0000
Manifest next update: Mon 02 Nov 2026 02:00:28 +0000
Files and hashes: 1: EMaCwLjxvEjldttSlMrOnwekZ_Y.roa (hash: aBqqe+U1PaVNW6VJZrxz+RRQt4gTnenHJ/Ty1nZ3HHo=)
2: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: glnJQpCllK5bViAPdo4hiiB9pD0UIYV3iK4r18eL/tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:d6:33:60:a5:56:1d:ee:e1:b4:e3:d7:53:09:f8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Validity
Not Before: Nov 1 02:00:28 2026 GMT
Not After : Nov 2 02:00:28 2026 GMT
Subject: CN=21324bfe41b5902a8fe08402617f499aa332576b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:fa:1d:97:12:7e:a8:08:17:28:20:a1:2e:
86:43:0d:38:2e:4a:9b:77:7d:8d:50:5a:87:66:0b:
ae:c1:37:82:8c:60:6a:8c:63:87:2f:98:e4:d4:63:
f0:85:63:d7:1b:2c:74:7e:55:0e:4e:eb:5a:8e:15:
5f:df:b6:50:20:4c:e6:78:ac:30:2d:f1:10:9b:e1:
f4:c1:95:12:8a:1b:87:78:06:f7:cc:62:7d:60:b1:
35:95:c2:a1:0b:26:3d:ec:e1:a6:9c:39:d9:8a:95:
1a:80:60:a2:e6:f7:ec:34:17:11:d1:93:22:ff:9e:
53:cd:a3:dd:df:c8:27:7a:89:9c:fc:7d:36:a8:eb:
cd:98:67:aa:eb:77:66:b1:c7:85:43:28:2d:5a:71:
e5:f0:d4:82:65:ca:0d:43:f2:47:d3:62:cd:d2:7c:
03:14:05:4c:46:b8:38:cc:f9:71:f2:97:de:52:9e:
c3:58:38:c2:3c:1c:66:d5:21:ae:69:b0:1e:32:57:
d4:55:f1:af:d0:b8:55:4f:67:ee:a5:1c:81:44:1c:
98:be:24:58:ea:3d:26:09:a7:00:05:70:eb:86:b5:
b8:17:78:82:2d:0b:f9:3a:83:bd:1f:cd:b0:b7:05:
c2:cd:d1:c9:19:49:32:29:b6:d1:ad:b2:09:4e:23:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:32:4B:FE:41:B5:90:2A:8F:E0:84:02:61:7F:49:9A:A3:32:57:6B
X509v3 Authority Key Identifier:
keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e6:bc:5a:e3:91:67:78:b8:93:4a:24:24:6f:b3:c4:12:a1:
da:60:ea:3b:b2:89:94:b8:48:e0:be:20:c6:cb:af:3f:0b:b8:
f3:9b:f7:f8:34:81:99:4f:69:94:50:87:0d:f5:23:77:53:ab:
df:53:8f:8b:35:ee:02:b7:0e:af:74:b8:5c:0d:a9:8e:f3:9e:
df:32:37:b2:fb:6d:0c:54:4b:1a:a5:a8:5a:5f:6c:c2:c1:7e:
c5:e3:c4:93:d4:03:47:1d:cd:4c:1c:7d:fa:64:9e:19:82:61:
68:a7:c7:9c:bf:20:e2:f9:d6:ef:00:aa:45:a6:08:e4:6a:f9:
fa:70:49:aa:28:c5:4d:88:91:7b:ac:3f:01:91:ae:7b:26:80:
d8:90:8a:8b:13:b0:7b:5d:19:fa:e7:64:f8:0e:0a:55:45:3e:
de:5c:a2:09:d1:e2:d2:51:20:92:12:df:cc:15:80:cb:a5:bd:
dc:2e:85:bd:89:e7:2f:7d:42:9f:9d:ae:0a:b3:11:5b:0c:2a:
ff:a9:2e:89:87:d7:9b:9e:d3:ab:f9:1b:4d:df:51:35:6d:82:
4e:dc:e6:01:61:41:f1:18:73:53:23:0d:09:5a:e1:64:22:12:
c9:0b:d2:c8:12:44:2b:8a:4e:d9:14:0a:19:32:a2:4d:01:84:
b3:73:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:03 2026 by rpki-client