Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
File: O54AjSoXhEnxK2widbR_DP2Ug4U.mft (raw, json)
Hash identifier: eSo2Zw7Els/xOsUkNl3iiMW0BVDUBVMJ5kWTSCDotFo=
Subject key identifier: 5C:6F:E9:E6:2E:CC:AB:BC:F6:BF:E2:36:02:9F:74:FB:D0:A3:07:F9
Authority key identifier: 3B:9E:00:8D:2A:17:84:49:F1:2B:6C:22:75:B4:7F:0C:FD:94:83:85
Certificate issuer: /CN=3b9e008d2a178449f12b6c2275b47f0cfd948385
Certificate serial: 019FF8A3C34224472C48C378DB34F68B5906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
Manifest number: 76
Signing time: Thu 13 Aug 2026 01:01:49 +0000
Manifest this update: Thu 13 Aug 2026 01:01:49 +0000
Manifest next update: Fri 14 Aug 2026 01:01:49 +0000
Files and hashes: 1: O54AjSoXhEnxK2widbR_DP2Ug4U.crl (hash: klGevcZtBX5YGYz7M+2EOBi+Ay8oL+8GLZnk5q4416M=)
2: nOAz1MxeL2Yg_diTkYktSjclA6o.roa (hash: 6mcYdwnRDHXSQccR8+DP1sM9YZzuVk/TWlcrFx1aUlQ=)
3: yGKmCQjSxTAezYkUefPEIpl-2A4.asa (hash: QCwVUrLjfeyHUk6twv0KxQ0njTcdU9mmBG1CLHKGs6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:a3:c3:42:24:47:2c:48:c3:78:db:34:f6:8b:59:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9e008d2a178449f12b6c2275b47f0cfd948385
Validity
Not Before: Aug 13 01:01:49 2026 GMT
Not After : Aug 14 01:01:49 2026 GMT
Subject: CN=5c6fe9e62eccabbcf6bfe236029f74fbd0a307f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:0e:8e:1c:d1:a0:23:91:6b:9b:bc:47:b8:
5e:95:31:32:34:64:e0:92:cf:b9:76:dd:f6:c5:42:
28:fe:0e:0d:a0:93:90:da:f4:09:ce:ec:39:a7:90:
48:68:56:18:c7:31:0f:45:82:7a:65:d4:01:61:54:
a0:21:9c:21:a8:e7:9e:3a:89:25:9a:c7:83:8c:c6:
b9:bc:62:ab:fd:e5:78:89:de:18:23:4b:fc:34:07:
fe:18:94:3e:6d:00:7a:76:dc:00:d3:06:03:9f:a0:
1d:ff:da:69:cd:1b:c5:8a:ac:c8:12:41:74:0b:68:
4e:03:b5:38:e3:fb:c9:2e:79:3c:88:8a:fe:b6:65:
2f:50:70:7f:11:59:22:66:e9:ec:67:1b:9a:08:30:
be:aa:c4:1a:7f:a6:90:9c:a0:07:ae:9c:e3:d9:c2:
f9:58:79:98:3f:43:5d:8c:c8:ff:02:44:8c:b8:8a:
77:82:12:3b:4b:9f:fe:a5:ea:63:a0:39:e9:23:75:
54:95:25:3b:be:ba:b1:33:55:60:14:0f:6e:88:1a:
a1:ef:1b:95:49:17:b2:ed:c4:91:9a:26:b9:31:b8:
3f:bd:91:15:b1:59:40:e8:62:0e:2c:1c:88:dc:4b:
6a:8f:dc:71:00:35:13:16:4e:70:e1:f8:09:85:4e:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6F:E9:E6:2E:CC:AB:BC:F6:BF:E2:36:02:9F:74:FB:D0:A3:07:F9
X509v3 Authority Key Identifier:
keyid:3B:9E:00:8D:2A:17:84:49:F1:2B:6C:22:75:B4:7F:0C:FD:94:83:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:06:65:ac:13:6e:d8:2d:53:bc:c2:0f:14:07:bc:65:24:d6:
59:3e:ef:b3:55:65:cc:3f:2a:ab:da:d5:8f:3f:5e:fa:7d:71:
9d:f3:b6:34:49:9b:ea:db:35:f0:79:ee:b8:10:8a:43:90:31:
d1:29:9d:92:4a:5b:4c:e1:6e:fe:e4:e7:2c:36:b4:da:4e:e9:
0f:50:72:62:fc:e0:7b:d4:6d:17:98:3b:33:28:70:aa:67:8d:
66:c8:52:d9:e1:5e:cd:0c:db:74:87:a2:3b:bf:d7:8f:7a:2e:
12:09:c9:b6:a0:59:a3:67:7f:2c:fd:f4:3a:e9:d8:9c:88:bb:
4d:e0:2e:f1:f0:d0:a5:f6:2f:4b:6d:6a:7c:3a:fa:80:34:ee:
26:70:b7:7e:3a:dc:08:3d:39:25:5a:b6:e9:c4:62:00:e0:45:
65:2b:2f:b3:c6:78:93:a4:45:b8:ea:fc:74:6c:90:fe:d4:4e:
2f:2a:88:16:ad:06:d2:fb:0c:3a:a6:d3:21:9c:1e:6e:5c:45:
ec:63:7d:03:8b:7d:0b:25:bc:68:8c:6b:5b:27:bc:99:0d:4b:
32:47:1d:a9:03:05:c5:06:c0:d3:fb:8a:c0:db:a4:17:26:f2:
a2:08:8b:ba:54:52:80:a1:7e:27:c0:85:4e:f5:a1:07:69:99:
34:e3:47:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:26 2026 by rpki-client