Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: DVUU1L/pKpM2o5vj/W88krPu65tV/VKDe0OqgxxHGuE=
Subject key identifier: 9B:13:54:BA:7D:7D:04:52:52:AB:DC:51:98:00:3A:82:D9:B6:57:06
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 01A17D3C84F439C12BE156C9DBF3A39E2C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 1AD7
Signing time: Tue 27 Oct 2026 12:01:20 +0000
Manifest this update: Tue 27 Oct 2026 12:01:20 +0000
Manifest next update: Wed 28 Oct 2026 12:01:20 +0000
Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=)
2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=)
3: IL0F6yFMaBjVjUPbOk1OfPuS4kI.roa (hash: KS3UNapFjrnwtbqG25bWZith7R8byYpg03cu4j54MCU=)
4: LVPO8JZfNdJa2U5Ik8I34YcEOUA.roa (hash: p6JxXEEX7qFpTZe35bHvc23RUvTVNt4iONQ/5P6VF/A=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: 6PJj+E0pjjy0UAOJ0nM8bbOJP9+4YAB1xEhsA33V8ak=)
6: tXrrUP_TFy0LZMX_c9DSBUiK_1g.roa (hash: IqdNMmp5ttOJAyhkpsC/dBhKLWgRCKvww/+kSgvGp08=)
7: umIRuHpxX9ebriBCvcmax-6rghI.roa (hash: C/8G0mcCjZSfHcX9z+n/wr8OBXx9A0aj/vE5hg6xmP4=)
8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:84:f4:39:c1:2b:e1:56:c9:db:f3:a3:9e:2c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Oct 27 12:01:20 2026 GMT
Not After : Oct 28 12:01:20 2026 GMT
Subject: CN=9b1354ba7d7d045252abdc5198003a82d9b65706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:0c:fd:b1:02:c7:37:62:4b:76:eb:28:07:
2a:93:0f:c2:a8:e4:83:d9:df:ae:1b:06:a1:87:37:
07:3d:cc:95:ec:77:50:c3:af:3a:25:bb:55:14:12:
3f:cc:1b:71:10:c1:b6:7b:6b:a9:c4:09:4a:26:01:
07:ee:a2:84:8c:7a:76:5c:95:b1:00:8f:52:d4:c9:
ef:aa:32:c4:e8:7b:b2:ef:97:b9:a3:c1:a6:8e:36:
c7:7e:40:01:2d:6f:a7:ff:a2:3c:dc:94:81:03:e6:
45:ef:ca:60:42:36:30:c4:3b:31:cf:5b:a3:57:dd:
1f:04:e3:8b:cc:b3:2f:72:90:3f:65:79:52:c3:eb:
61:0f:1e:6d:3e:07:51:af:60:ca:7e:19:08:29:bc:
68:8c:73:42:a8:3e:ea:aa:56:9a:13:cc:ab:df:70:
52:09:ae:99:d0:9e:2f:1f:de:9c:ed:1a:9d:36:39:
87:c5:a6:ef:64:fa:79:2a:5c:e5:d3:51:b1:f1:ac:
1f:99:9f:b6:93:49:22:ba:a6:01:9d:40:ad:61:64:
74:54:25:69:9d:a1:c7:e4:14:08:92:b9:8e:ed:ba:
c2:2e:95:26:bf:b7:e9:a2:32:b8:fa:3a:67:11:f2:
55:47:5d:dc:45:6c:ab:23:e1:a4:9e:4f:fb:58:73:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:54:BA:7D:7D:04:52:52:AB:DC:51:98:00:3A:82:D9:B6:57:06
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2b:0e:98:a8:1b:73:67:b2:d1:92:94:76:7e:e6:17:40:40:
15:49:1b:86:8f:df:13:f2:85:0b:08:e4:20:03:f0:ea:fe:db:
5c:e1:be:b4:00:a5:7c:fe:8f:11:c2:31:13:19:c9:c2:0e:de:
c6:fa:8e:f7:e3:c2:d0:3f:bf:2b:82:f5:c6:2a:03:fc:e6:75:
3a:b4:03:61:0b:73:ee:d2:10:80:77:63:e5:bd:67:5d:16:e5:
c0:7c:ad:69:48:33:53:d4:f5:8c:92:d6:8c:0f:4b:6f:fe:9e:
61:73:d0:8d:0f:7a:1d:30:09:67:ec:4c:f8:a0:33:4d:73:db:
69:fe:c1:18:3e:cf:88:46:39:66:f5:c5:89:db:c4:8f:e5:1e:
7e:28:ce:55:b9:c5:6f:6d:68:1f:1a:da:3a:d1:b5:c4:17:0b:
ed:1b:ed:e6:c3:09:aa:a8:90:1b:04:b7:e2:85:f8:82:8f:b2:
09:78:11:ce:a2:d3:f0:3f:91:71:5b:0e:e2:dc:d9:07:d2:b9:
6f:4a:77:7d:f6:38:3f:98:89:63:73:31:d1:94:b1:f6:62:f1:
8e:fa:92:2a:ab:69:df:86:8f:de:c5:b8:d4:64:d9:16:f3:ad:
3a:ca:cb:22:0a:16:cb:8f:75:5c:21:8d:c1:cc:03:c9:98:9e:
67:a2:11:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:37:26 2026 by rpki-client