Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json)
Hash identifier: VfuYVhmMf5SQ9VmcRQJLGRDm75u+ba76w6WCrG6cREk=
Subject key identifier: FA:29:0C:1C:C3:9E:F5:7F:CA:D2:83:4A:66:EB:80:CA:A3:F7:9C:AC
Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Certificate serial: 01A1581D709BD4E7C45FC8BA3ED5CB304FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
Manifest number: 0F33
Signing time: Tue 20 Oct 2026 07:01:26 +0000
Manifest this update: Tue 20 Oct 2026 07:01:26 +0000
Manifest next update: Wed 21 Oct 2026 07:01:26 +0000
Files and hashes: 1: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: j06RW9MRo6Yhp2P57if+fDwlPppyJ8TDlXJJtiMibOg=)
2: sn3WdCt5cOff3eRSoyZ6m4C8YHk.roa (hash: cE5dlzPj8uIWRQ0h42WBrGLO+X2WE9nV3RUnSZAY1yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:1d:70:9b:d4:e7:c4:5f:c8:ba:3e:d5:cb:30:4f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Validity
Not Before: Oct 20 07:01:26 2026 GMT
Not After : Oct 21 07:01:26 2026 GMT
Subject: CN=fa290c1cc39ef57fcad2834a66eb80caa3f79cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:a0:f9:0f:ed:56:26:28:81:ed:22:85:68:
03:d0:a7:b9:aa:72:87:e3:df:56:45:81:9b:42:53:
69:e4:c5:f1:59:62:70:08:f7:8f:ab:76:2e:5d:69:
1f:63:b1:be:49:5a:00:68:c2:b3:f3:b2:67:0d:3f:
5c:85:56:2a:8a:2f:94:82:38:75:1f:eb:b5:bc:f7:
80:71:cf:40:86:3a:df:59:a8:7e:1a:8e:2d:bb:a9:
be:f0:9b:39:29:b0:ca:ac:21:bd:2f:5b:52:f2:89:
6d:b2:a8:f8:05:04:ec:75:51:c3:a3:c5:be:14:63:
f2:6d:08:6c:e2:6e:8b:a7:fb:b9:d2:e4:2e:6f:04:
5e:d3:4a:b0:0e:26:cf:2a:52:87:f4:2d:36:da:12:
27:20:ce:71:ba:fd:42:e3:3a:09:1f:55:58:b7:51:
b8:c5:42:62:58:ce:33:61:b7:c5:06:fd:fc:43:11:
4c:22:a2:d6:dd:d2:c7:52:20:6f:1b:6d:42:5a:17:
bd:30:06:9b:f5:c2:78:6d:a8:8f:20:05:dc:a8:f5:
76:af:41:62:7d:f7:10:be:f6:79:73:7e:b5:c4:58:
c5:d7:b1:0f:5d:2c:1f:f7:6b:43:4b:d1:ba:78:e6:
a0:17:80:07:a2:b1:ee:46:57:08:d4:7e:1b:d2:26:
04:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:29:0C:1C:C3:9E:F5:7F:CA:D2:83:4A:66:EB:80:CA:A3:F7:9C:AC
X509v3 Authority Key Identifier:
keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:84:f1:d7:b6:30:b8:53:67:00:13:86:dd:3b:5b:ba:99:d6:
6f:dd:30:ab:cd:fb:a6:96:ee:ca:83:64:9c:97:e2:28:ec:b1:
46:2c:17:d9:ac:8e:20:6d:ab:2d:ae:42:20:36:7c:f1:1a:0a:
21:bb:54:67:7b:6d:31:02:ba:f0:79:f7:fd:1b:c6:ed:aa:94:
27:82:40:c0:8f:05:ae:11:dc:16:05:55:c1:5d:23:ea:ed:d6:
92:6a:dc:27:7f:a9:21:60:a2:be:c5:3b:da:06:de:c2:1c:7b:
45:01:58:89:a8:1c:89:ea:7f:a3:ca:76:2d:52:cf:fb:d5:7b:
f4:ed:28:6d:29:e4:4f:7d:d7:e7:a8:8e:86:6a:92:2f:4a:e4:
11:bc:19:10:31:6a:02:24:95:ee:a1:7f:ba:8d:f4:6d:1d:b4:
ce:9a:d5:b9:d8:af:77:c2:f7:d7:95:75:0e:90:1e:c6:97:1c:
48:6a:28:fe:27:d4:82:d9:4d:38:02:62:07:53:11:f5:15:df:
ea:36:20:24:87:cc:64:02:bf:c2:ea:1f:19:61:d5:61:5d:ec:
c9:ff:9d:d6:02:b3:dd:9a:43:5a:33:ca:0a:48:18:87:e7:07:
68:b9:26:66:55:81:85:10:bc:ac:8a:2b:72:42:f3:f7:97:a8:
f7:1e:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:23:02 2026 by rpki-client