Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: 7yzJyJY9R8RUAgtBu08JF+n6hD+c6umeW/7XnXE95t0=
Subject key identifier: F2:E2:D8:97:B7:C1:37:1C:87:44:31:74:78:13:DB:96:07:F7:62:CB
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 01A0C5C4EF501554C88DB622800AD367F19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0F9B
Signing time: Mon 21 Sep 2026 21:00:12 +0000
Manifest this update: Mon 21 Sep 2026 21:00:12 +0000
Manifest next update: Tue 22 Sep 2026 21:00:12 +0000
Files and hashes: 1: LkRlWvjojGp88ImWjfx2Z3qaOy4.roa (hash: kB89kqUtMQKcyA7jSVcONA2ZKYzA7LpbjPMFFP5OhVw=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: 6eb9FwXLQzyo650zLwwszkEMppUoBN7dUxdFoY0zJJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c4:ef:50:15:54:c8:8d:b6:22:80:0a:d3:67:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Sep 21 21:00:12 2026 GMT
Not After : Sep 22 21:00:12 2026 GMT
Subject: CN=f2e2d897b7c1371c874431747813db9607f762cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:b8:43:ed:79:ac:50:3d:09:31:24:e7:fe:
6c:c4:e7:07:c2:fb:92:25:e1:8e:0a:12:7e:b4:83:
a6:f5:12:ce:a4:ac:dc:6c:7d:a4:52:d7:45:92:04:
eb:5d:5d:89:4f:3d:ae:a1:67:a5:07:f4:93:f7:38:
2b:33:cd:17:a1:dc:67:5b:a2:4f:5d:b8:45:96:96:
1f:e5:5b:15:a4:80:7f:c7:eb:86:f4:27:3e:fa:ea:
b2:ed:b5:3f:36:37:e4:f9:e8:92:7a:d3:8c:5c:f3:
7e:4c:62:e4:c8:c7:92:b7:9a:06:b1:a2:ce:22:e1:
a7:e6:ba:5f:7e:bf:52:fb:c6:e0:a2:85:0b:8d:df:
7f:57:52:c3:25:cc:33:9d:01:ff:a8:d4:03:dc:4c:
f5:d6:2e:1a:09:c3:fd:05:ef:e4:4e:71:01:9d:fb:
57:a6:f1:73:30:75:d4:fb:b5:9c:e8:91:bc:89:31:
6d:c8:e6:6d:4d:ee:cb:28:dd:c8:62:20:8e:14:a3:
cd:ab:f0:26:90:13:73:46:d1:2b:ae:5b:67:7f:9f:
c3:9b:f7:9a:85:8f:d9:29:4b:4c:47:bb:f3:4b:ed:
ea:f0:32:0e:78:c9:60:c5:a5:a9:96:6a:2a:49:ab:
7c:01:75:bc:76:00:1e:bc:2b:2a:af:d0:e5:6d:8d:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E2:D8:97:B7:C1:37:1C:87:44:31:74:78:13:DB:96:07:F7:62:CB
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f4:f7:b3:e2:9b:80:53:b0:69:22:5a:59:da:53:46:ff:0c:
e7:44:46:4f:d3:0a:c0:18:68:39:3a:e6:4b:2b:df:8d:f3:6a:
a0:14:37:38:4b:a0:8d:35:3c:68:8e:af:08:df:d1:73:b8:51:
e9:96:94:90:52:dc:0b:06:1a:3b:ad:a3:de:42:99:69:d0:53:
95:b5:92:cd:44:2f:99:20:07:1a:6e:ac:b1:f7:35:a1:48:a2:
c4:a9:54:37:7c:b6:31:73:78:0c:c1:ec:f0:13:54:24:09:f8:
a3:36:9b:11:ed:7c:ba:40:81:30:25:44:98:46:ed:75:c3:32:
f0:cc:93:ae:b5:26:0e:3a:13:52:39:1c:0c:a1:82:07:22:d2:
cf:0e:a1:c0:34:7b:72:c6:dd:c0:8a:ed:eb:be:da:28:23:35:
25:5e:4a:b5:3f:23:af:de:82:b7:42:f4:78:3a:ae:2a:a9:ed:
23:cb:9e:29:88:4e:65:0b:f2:e0:d2:15:51:43:a4:0d:81:f3:
70:19:15:f5:84:32:e4:36:8b:e0:82:3d:63:14:b0:f1:26:c5:
7c:fb:8d:2d:58:83:3b:0b:be:a3:9c:fb:82:13:a6:46:8d:52:
a3:84:af:2c:0b:d5:f3:82:68:3c:6f:9c:da:78:00:c7:af:0f:
8b:0c:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:33:01 2026 by rpki-client