Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
File: O54AjSoXhEnxK2widbR_DP2Ug4U.mft (raw, json)
Hash identifier: KBPHhhy5/O+dWOX8ynwcLyrr7C0QaJYO6Vh3wzCLZD8=
Subject key identifier: 7D:45:01:0B:AC:3E:53:65:3E:DD:EF:F1:22:7A:C3:1B:68:20:77:F3
Authority key identifier: 3B:9E:00:8D:2A:17:84:49:F1:2B:6C:22:75:B4:7F:0C:FD:94:83:85
Certificate issuer: /CN=3b9e008d2a178449f12b6c2275b47f0cfd948385
Certificate serial: 01A0E81CE9A9FC2AB3E8E94454B4266C5A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 13:03:23 +0000
Manifest this update: Mon 28 Sep 2026 13:03:23 +0000
Manifest next update: Tue 29 Sep 2026 13:03:23 +0000
Files and hashes: 1: O54AjSoXhEnxK2widbR_DP2Ug4U.crl (hash: NFFAdALZSMSNbWTQyU3pUdj+djUuAr13cSac7UJ1skg=)
2: nOAz1MxeL2Yg_diTkYktSjclA6o.roa (hash: 6mcYdwnRDHXSQccR8+DP1sM9YZzuVk/TWlcrFx1aUlQ=)
3: yGKmCQjSxTAezYkUefPEIpl-2A4.asa (hash: QCwVUrLjfeyHUk6twv0KxQ0njTcdU9mmBG1CLHKGs6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:e9:a9:fc:2a:b3:e8:e9:44:54:b4:26:6c:5a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9e008d2a178449f12b6c2275b47f0cfd948385
Validity
Not Before: Sep 28 13:03:23 2026 GMT
Not After : Sep 29 13:03:23 2026 GMT
Subject: CN=7d45010bac3e53653eddeff1227ac31b682077f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:c5:67:69:6e:d9:4c:61:8c:4d:9c:fe:98:
b7:fe:83:2f:f1:96:03:e2:d1:7b:fa:55:66:22:2b:
e9:51:f9:65:ba:d9:9f:cb:1e:56:8a:27:65:a2:2f:
0a:29:39:85:a5:c5:e3:04:c7:83:ab:4e:04:47:0e:
05:66:70:89:54:39:95:b0:c4:5b:2f:1a:27:1d:d6:
74:98:56:d3:4a:1e:e3:87:88:3b:73:2b:bd:69:2b:
e3:b6:b8:4e:85:e1:f0:62:3d:ab:34:92:bc:56:8a:
18:ca:5c:c0:90:de:c4:1f:82:a9:d3:84:1e:77:35:
e0:bc:e0:88:2a:8c:db:91:b5:77:69:70:79:32:62:
62:4f:13:c9:84:31:c0:3f:c1:c9:8f:e2:44:57:29:
cc:3e:cb:16:8a:cd:d7:6f:25:7c:71:71:e6:09:1f:
5f:b6:0a:e7:63:31:92:ee:9f:c3:da:e1:02:4f:50:
91:8f:37:60:39:1a:88:b2:0c:ec:b4:7e:13:89:60:
bb:5f:e6:d7:87:28:1a:19:1f:c7:27:f4:4d:94:c3:
b3:bb:00:85:fd:ff:1e:54:9e:db:10:ca:bb:c1:d7:
e9:db:b3:a8:5b:0e:ba:a3:8c:f3:ab:80:fd:ab:73:
0a:30:6b:87:3a:5c:d7:30:c8:ff:ce:c3:84:16:6d:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:45:01:0B:AC:3E:53:65:3E:DD:EF:F1:22:7A:C3:1B:68:20:77:F3
X509v3 Authority Key Identifier:
keyid:3B:9E:00:8D:2A:17:84:49:F1:2B:6C:22:75:B4:7F:0C:FD:94:83:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0b:6a:5e:7c:0f:5a:e3:e5:d7:6b:ac:79:a7:93:45:86:89:
1c:45:01:3f:61:47:d8:f4:20:a4:23:46:60:73:b2:c9:5a:05:
ae:38:df:34:92:d1:b7:60:0f:fd:1c:0d:c9:a3:3f:8c:b6:0a:
57:1d:30:8e:77:d7:c9:0d:33:84:46:11:5b:57:c9:08:87:84:
6d:89:fb:46:b2:f9:b6:14:f5:c5:27:82:98:b2:37:0b:28:74:
c1:12:be:11:87:ed:aa:2a:e5:e9:36:41:50:97:12:21:ea:74:
1c:6d:24:63:02:74:90:5f:d1:09:c4:42:88:d6:fb:05:35:61:
ab:28:07:d7:7a:c2:24:24:21:32:74:b6:fe:67:d3:55:e8:f8:
df:61:c0:ae:59:2c:f8:00:7c:7c:da:10:4e:11:54:83:e5:fa:
1a:de:cc:20:a3:20:1b:93:fa:4b:48:1f:50:78:e9:8c:39:33:
6c:0d:ac:a8:da:6d:60:00:9b:e5:db:08:a7:88:ae:51:b5:4d:
4b:c0:c8:dd:4e:f7:df:98:91:45:2d:cb:8f:93:5b:d3:33:4e:
9f:9b:6d:7d:7e:40:b2:44:fb:ef:5f:87:9b:fe:4c:e3:77:61:
52:7c:ca:e2:5b:08:5a:b7:cb:5b:6a:3b:7a:2a:d1:6b:01:38:
d8:1b:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:32:58 2026 by rpki-client