Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: qKbLvBwoS5SEvSkrBZTkHSAJ1sqbXJP/onmdQwvhRj4=
Subject key identifier: 07:2D:58:5B:DF:84:BE:7C:56:16:84:18:D0:F7:A7:20:A8:B3:DF:38
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 01A173CB8842DFBF9328B6B119076D397890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 1494
Signing time: Sun 25 Oct 2026 16:01:20 +0000
Manifest this update: Sun 25 Oct 2026 16:01:20 +0000
Manifest next update: Mon 26 Oct 2026 16:01:20 +0000
Files and hashes: 1: KQji-kvGwokbQJLmZVW7oo2hsck.roa (hash: C1Er9TyXkYi4WTR5vknL0YRmJFZIjldNM2EpkmszpDw=)
2: X91v8T4v3SGFy7I37g4wXveNq7Q.roa (hash: WWeSP8Bv7bkntWr8c/ZwSbMkcIcKgP3z0XXfZzT3UxQ=)
3: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: ZQNzU5XCc7KKKfSlHKu6ww1NJ17swIArgDEySMU5cLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:cb:88:42:df:bf:93:28:b6:b1:19:07:6d:39:78:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Oct 25 16:01:20 2026 GMT
Not After : Oct 26 16:01:20 2026 GMT
Subject: CN=072d585bdf84be7c56168418d0f7a720a8b3df38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3d:af:63:d6:f3:c9:10:24:34:71:de:9c:19:
2f:39:3f:33:9e:da:91:09:4c:59:a7:6d:37:9f:c4:
f6:6d:36:9e:6e:bd:a3:ae:dc:ae:1d:66:96:46:7e:
b8:b7:59:68:7a:39:0c:a3:a9:15:c2:6b:46:70:fc:
c9:84:65:e5:b4:f7:f2:1c:a5:a5:3d:17:1b:6a:73:
ee:f2:2a:1b:cd:0e:8d:1c:68:fe:8a:d7:69:aa:7f:
fa:68:71:ae:fe:5c:cb:b8:81:e1:f9:85:38:76:59:
4a:cb:8b:55:a6:f3:9a:af:22:a9:1d:73:f1:e2:a0:
8d:3f:e9:ab:7b:f4:90:f2:c2:c3:7f:70:66:fe:72:
75:b6:04:7d:f0:c5:1d:cf:58:97:e8:7c:aa:45:b8:
42:29:b7:cc:6a:cc:08:fc:b0:d3:2e:9d:bf:05:47:
0f:d6:a2:cd:8c:ca:1a:13:fa:ff:25:be:5c:33:4c:
9d:4b:41:b3:a9:cf:f0:78:a3:cb:b4:0e:0e:5c:ce:
98:e0:45:56:57:71:cf:0c:f1:4a:35:b2:29:41:76:
0c:f6:48:84:19:8a:4c:8d:cd:5a:52:4e:b0:dd:2e:
05:7a:47:40:fd:2d:c8:1e:54:9b:c4:2e:05:3a:07:
84:d5:e6:5a:36:11:71:73:56:94:12:17:21:eb:df:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2D:58:5B:DF:84:BE:7C:56:16:84:18:D0:F7:A7:20:A8:B3:DF:38
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:49:d5:10:94:89:a4:61:5d:7b:97:a6:cc:ba:52:90:2f:f5:
ef:3c:dc:58:df:4e:0d:80:86:3f:58:85:2c:d5:b9:42:65:2b:
c7:3d:d7:e8:f2:b2:95:81:d5:d0:fe:b3:b4:6d:40:29:92:2f:
dd:fe:77:d4:6c:8c:4b:ff:58:f7:2d:f4:88:3d:5f:fe:00:b2:
fc:80:13:8e:a5:dd:c6:48:04:57:14:32:d9:2d:43:a4:a2:d8:
f0:f5:2e:20:95:08:29:29:db:f0:5b:10:d6:8a:a7:6f:76:70:
c2:6e:63:d5:a5:cb:fb:b9:03:4a:ac:54:55:5d:c1:3c:55:7c:
74:36:3f:a5:65:92:6e:32:a5:fa:43:76:a3:41:86:83:99:13:
77:9e:ea:da:bd:8d:a2:27:5b:7f:4c:55:8a:2e:ac:f0:49:61:
a6:ee:05:15:d7:c4:0e:44:9e:27:f4:3f:f9:27:e4:9f:23:a4:
ff:2e:d1:52:3e:24:07:54:b0:71:c4:b8:1e:17:21:90:2a:1f:
8b:a3:6b:d2:a5:e4:c6:22:ea:49:b6:d2:9b:2c:dd:61:21:6d:
1e:f8:8d:00:fc:a6:89:3d:60:74:8a:f0:62:fd:85:60:ae:10:
a4:a0:26:c1:c4:bf:7c:a2:e6:c5:a4:94:43:28:ba:e0:65:66:
73:a8:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:38:57 2026 by rpki-client