Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
File: O-lZPSkOAlAninOzE1UDKTJ71Yk.mft (raw, json)
Hash identifier: 8VqJgSsVW/6j8PsQXbFtmuRIrZJ6nv540eclUiGsPpc=
Subject key identifier: 3E:36:88:9A:D9:3E:2C:82:65:06:7E:29:EA:DB:01:29:75:F4:CA:1C
Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589
Certificate serial: 01A1686BC8425252CF66FD2639CDAC1897EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
Manifest number: 1ABC
Signing time: Fri 23 Oct 2026 11:00:56 +0000
Manifest this update: Fri 23 Oct 2026 11:00:56 +0000
Manifest next update: Sat 24 Oct 2026 11:00:56 +0000
Files and hashes: 1: O-lZPSkOAlAninOzE1UDKTJ71Yk.crl (hash: rT2ZFkgYy999K7RufgjjT5G7SySWGEKoKE/SjpbOJ1o=)
2: ihgnIXHoUMYh-WaWeIPaPydWbUk.roa (hash: iBsCj7b0mjUZuRLfwoBEpzWhtX6/cZQAGCmkWVKeq/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:6b:c8:42:52:52:cf:66:fd:26:39:cd:ac:18:97:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be9593d290e0250278a73b313550329327bd589
Validity
Not Before: Oct 23 11:00:56 2026 GMT
Not After : Oct 24 11:00:56 2026 GMT
Subject: CN=3e36889ad93e2c8265067e29eadb012975f4ca1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:1f:62:df:38:50:98:f8:56:f2:e9:1c:69:
81:31:73:a5:7d:d9:69:75:c6:fd:9f:a7:bf:bd:63:
af:1a:f4:35:34:ae:89:b4:75:6f:6d:ee:b2:9b:bd:
7e:76:31:11:17:58:19:ce:45:43:7f:81:25:f8:e7:
e1:2c:bd:9a:04:82:91:58:99:ae:53:a5:28:af:9c:
d5:67:ac:4a:da:8e:06:47:56:a2:30:00:7f:34:d0:
5d:85:50:ff:57:e3:90:85:12:db:25:30:bc:db:dd:
ab:92:ab:da:f0:e7:a8:f8:61:d4:10:03:53:c6:92:
dc:cd:28:7f:15:75:8c:fc:7e:53:0c:59:67:e1:4a:
d1:79:7a:63:f5:b7:bd:f4:17:64:66:de:a1:74:4b:
32:cc:49:dd:35:76:2a:1a:d7:ea:1c:b7:7f:fe:8a:
4a:78:94:08:0d:9c:b0:0c:19:71:e2:12:63:68:fd:
a0:99:a5:91:1e:84:93:01:53:6b:a1:27:f8:19:08:
34:f3:5f:80:87:7d:e3:37:f1:78:d0:31:87:ac:b6:
05:0c:f6:73:7a:43:4f:6b:d2:a2:1f:63:80:bb:7a:
cd:b6:03:36:8e:e1:ec:c9:74:8f:d4:99:3c:c0:7f:
dd:34:cf:7a:b4:1f:d8:cc:87:68:6e:19:13:e7:b9:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:36:88:9A:D9:3E:2C:82:65:06:7E:29:EA:DB:01:29:75:F4:CA:1C
X509v3 Authority Key Identifier:
keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f5:1c:fd:d6:f5:a1:f5:1b:15:8f:94:0c:a4:19:c5:65:97:60:
0e:5f:e5:17:6b:43:82:40:ac:94:9e:bd:a9:9f:06:49:5f:d6:
25:f3:b5:82:6f:5b:89:40:15:bb:ed:ff:c9:05:bd:81:ad:da:
b2:bc:dc:7d:ed:da:a9:91:09:05:a4:fe:a6:46:49:bc:ee:7d:
1b:0d:b5:e1:35:5c:6d:9f:91:59:61:6a:b5:9d:65:4c:fb:68:
3d:2e:a7:ae:ed:a3:20:5d:c2:15:91:aa:94:ad:5f:f9:40:84:
32:e3:14:9b:eb:a7:da:eb:dd:fb:15:1e:cc:f2:62:4b:be:5d:
4c:8a:6d:81:d6:7b:3c:56:11:dc:af:90:f5:84:1a:c5:a8:a0:
4c:83:dd:be:5c:c7:68:2e:3c:47:69:c1:53:ac:29:ea:a0:95:
aa:4a:ef:ba:6b:0b:b5:2b:5e:1c:1b:48:c7:2f:a5:e7:0b:ed:
06:bf:2a:5a:cb:76:8e:98:d1:56:8b:35:a1:1f:8c:c1:3e:86:
59:99:a6:27:ae:f3:93:9a:7b:49:95:25:7e:6b:a5:d3:5c:c4:
09:ea:d0:cc:3b:21:49:ea:67:ca:bf:be:b0:ef:16:ce:f1:73:
ae:42:78:c7:ee:18:c3:ba:dc:52:00:7b:1c:13:af:e8:1c:82:
07:d2:dc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 15:34:21 2026 by rpki-client