Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: VXFeBGeEHBlbyo4OUIqLNsQHpGZvJuuEVGlhgD1AYoE=
Subject key identifier: 5D:69:8E:4F:2A:CE:77:AB:56:9C:02:A2:91:EE:4D:C4:32:DC:E5:90
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 01A06CF0009074697AEB086AAAFE22187867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 10DE
Signing time: Fri 04 Sep 2026 15:01:03 +0000
Manifest this update: Fri 04 Sep 2026 15:01:03 +0000
Manifest next update: Sat 05 Sep 2026 15:01:03 +0000
Files and hashes: 1: 5EPEfFcq0_CQJyJv8NvlTXW122s.roa (hash: shP8Ed/HPJC3iktLjU3AhfJDqjBPIc4NQ5VyPIH2+gA=)
2: HoguhPYctq53_NeJpwMiGGaEYHE.roa (hash: 2Rg4I4psfcDKa015Nd8h+FBbuNVy5CBZXEFltS4HBbg=)
3: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: 2b50MMwNeCcB+0J7BPJwA50vsROFhjRkdNZWqxuyqxY=)
4: jqg60u3udEXldRsO6lvjcjKURzE.roa (hash: kW26aKoDuoF4wJ1FRfJ1sSmndtvHSr/VmE5hX9cRIqU=)
5: xkVE7KUdk3_Gxthu42EOBxgV05Q.roa (hash: OLCiaU+AVFxgMEa5gMdkqLSxOFCgu1RCocNrX9T3asM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f0:00:90:74:69:7a:eb:08:6a:aa:fe:22:18:78:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Sep 4 15:01:03 2026 GMT
Not After : Sep 5 15:01:03 2026 GMT
Subject: CN=5d698e4f2ace77ab569c02a291ee4dc432dce590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:6a:4f:a4:40:57:03:64:e5:35:12:01:8e:
33:dd:10:30:37:d7:38:d3:8b:9f:09:75:33:b5:82:
fd:da:f3:54:16:d0:f8:72:be:ab:e6:4e:c7:81:16:
14:c4:7f:df:45:64:24:3e:1a:9a:29:2e:97:22:bd:
bf:71:54:e9:4c:c6:b5:53:29:12:c8:05:f9:f0:a0:
28:b9:79:d3:b1:80:f6:3a:7f:6f:ba:4b:4b:d8:5f:
9c:ed:7c:21:cb:09:90:b9:a5:7e:16:85:f0:55:2f:
4e:dc:1f:7c:12:99:9a:8b:cc:7d:7b:a9:71:c5:7d:
c0:dd:cb:11:aa:4e:37:06:49:79:9b:1b:5c:40:58:
bd:4a:72:b5:62:2d:e6:ba:d9:9e:00:4a:78:96:a2:
ff:c3:70:9b:c0:7c:6d:84:b4:d2:01:11:7b:be:50:
5c:2f:87:3d:62:c0:bd:66:7b:d6:67:53:29:72:4b:
06:f3:7d:14:42:67:07:0f:ec:78:fc:3a:1b:93:67:
83:b8:9b:81:20:9a:a4:26:53:06:51:80:96:ed:bf:
87:3d:8a:f2:1d:5d:3b:9d:9a:e5:16:c1:3a:84:72:
34:ab:18:80:a9:39:f6:71:0c:3d:91:65:b7:7d:0f:
84:b5:90:14:ac:89:99:51:bc:90:db:ef:df:2f:97:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:69:8E:4F:2A:CE:77:AB:56:9C:02:A2:91:EE:4D:C4:32:DC:E5:90
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ff:87:2e:cd:d0:5d:76:95:be:ca:fc:40:b0:b8:ea:c5:11:
d4:ba:70:25:40:0c:c9:d6:93:b2:92:63:6b:f5:54:6d:12:07:
27:23:d2:7f:06:8e:5d:45:7f:66:d9:0a:43:77:10:07:9d:44:
32:0e:38:34:e7:3d:ad:de:ba:25:b7:13:fb:d6:82:4c:4f:02:
2c:b9:a8:4f:ac:d5:52:49:26:74:09:ab:c4:dd:fc:4f:3c:32:
39:1e:2a:6f:d1:1d:a6:95:1c:01:73:ce:e1:fb:cf:fe:1b:fa:
c9:f2:41:60:3e:05:3d:5c:aa:2e:19:11:c3:f6:c9:12:35:a0:
3b:80:12:34:ae:97:11:40:4f:8f:4e:c3:8b:9b:fd:b1:1e:d0:
a5:b6:8e:64:c3:fe:dc:d5:64:ec:29:2a:5d:a7:6b:e2:71:d9:
d8:44:bc:a9:74:8d:2c:01:ae:84:9d:24:86:98:94:5c:31:3e:
51:a6:55:78:a3:d3:d4:07:c7:7d:3e:fc:19:59:9c:5f:0c:48:
db:60:61:6c:02:a0:4d:cf:03:e0:13:66:d5:41:f4:56:db:60:
5e:49:97:1d:38:6c:3a:a0:40:0d:f5:60:55:70:04:96:65:cf:
da:c7:a1:11:c8:bb:ae:7a:e1:14:1c:16:0d:ff:dc:a7:6d:aa:
66:06:56:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:31 2026 by rpki-client