Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json)
Hash identifier: jtr7D2+j80plNobrVP+gC8vN5GlX1VaXVax2r+//Yjw=
Subject key identifier: 12:22:62:5A:9A:38:1B:35:97:0E:6A:AA:23:84:52:9F:8C:2D:DE:F5
Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Certificate serial: 01A05178C526D6D9DC3B3E3104D523BDBD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
Manifest number: 0EAB
Signing time: Sun 30 Aug 2026 07:01:04 +0000
Manifest this update: Sun 30 Aug 2026 07:01:04 +0000
Manifest next update: Mon 31 Aug 2026 07:01:04 +0000
Files and hashes: 1: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: 7yzfYfS5uw2BkwnDhBJhRx6JcJPsJ4MQZp0WbJ5LN/k=)
2: sn3WdCt5cOff3eRSoyZ6m4C8YHk.roa (hash: cE5dlzPj8uIWRQ0h42WBrGLO+X2WE9nV3RUnSZAY1yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:78:c5:26:d6:d9:dc:3b:3e:31:04:d5:23:bd:bd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Validity
Not Before: Aug 30 07:01:04 2026 GMT
Not After : Aug 31 07:01:04 2026 GMT
Subject: CN=1222625a9a381b35970e6aaa2384529f8c2ddef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:5e:15:d9:2b:c6:91:28:1a:d7:3b:65:71:
f9:39:a4:2a:47:14:b4:9b:60:c1:fb:80:9e:6b:ca:
0f:18:6e:e2:6d:b3:ee:aa:24:1f:39:76:95:32:81:
5a:cc:c0:4c:fd:df:b0:9e:c2:16:de:23:6e:ab:4d:
79:2a:ae:62:d4:27:88:33:ec:c8:fc:52:7f:dd:83:
5d:09:0f:e6:8f:1f:9c:26:30:86:9e:42:e2:45:06:
4c:6b:f7:cc:66:45:b4:45:e2:4a:c4:a2:ff:92:1f:
ab:4f:d9:8a:b5:19:76:84:cc:17:c1:c0:1f:f2:fc:
93:08:17:df:a5:e4:90:ae:1c:aa:e1:5a:db:28:3e:
1f:0d:96:3b:45:8a:2b:c5:7d:dd:35:03:68:5d:e5:
40:15:b5:ba:00:6b:fc:ac:3a:61:bc:18:d9:a2:99:
e0:85:04:97:b5:fc:e8:8e:eb:bf:9a:54:cc:26:67:
74:3c:f8:ad:48:32:d6:9c:a9:53:13:60:e7:d0:fd:
77:42:cd:eb:63:a9:96:7f:0e:36:b3:cd:22:da:dc:
68:7a:f0:90:91:27:77:fc:c2:8f:e8:d4:52:78:61:
b0:c6:22:4a:6f:a0:50:37:70:e9:0d:44:69:c8:85:
1f:55:2e:50:73:d9:70:c2:76:e2:79:fc:6e:86:fc:
0e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:22:62:5A:9A:38:1B:35:97:0E:6A:AA:23:84:52:9F:8C:2D:DE:F5
X509v3 Authority Key Identifier:
keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a9:52:68:88:fe:39:9a:ed:04:3a:1d:a3:56:49:ca:9c:80:
cb:8f:83:f0:70:2d:71:44:54:1d:1f:9a:df:02:02:6e:d0:59:
68:19:0f:c3:19:1e:dc:9c:b3:d3:51:a1:9b:ea:61:34:15:90:
73:fa:1e:c1:cc:95:f0:3b:fe:e6:d7:0d:9c:36:5d:75:a0:ec:
7c:31:cd:e7:b5:00:b9:ba:12:e2:95:10:ec:ee:8f:d5:54:93:
d2:de:03:f3:32:6e:24:cf:24:98:38:83:e1:48:92:0b:76:09:
9d:a0:14:9d:0a:24:8a:f1:9f:d3:4c:00:88:07:4e:68:21:01:
b7:69:0a:a9:46:4a:e6:2d:0d:cd:42:36:df:a2:e0:d5:49:bf:
a1:46:af:93:21:84:bf:38:eb:8e:b6:12:4e:29:aa:7c:27:1f:
92:64:b6:cd:cb:80:4d:78:04:c7:97:98:e3:f6:58:8f:49:2f:
59:69:cd:56:50:2f:99:f1:69:6e:b0:2c:29:7b:4f:74:05:76:
07:29:6e:7e:5b:97:f2:81:9a:bc:ac:5f:2c:c9:ed:24:23:b7:
ab:b9:f3:d4:ea:7c:10:d2:a8:67:1c:d4:c9:4f:c8:16:c9:2d:
66:53:ee:12:80:c2:b3:a7:36:0a:94:fb:c6:7f:2c:a7:4d:ef:
76:cf:a5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 30 08:55:01 2026 by rpki-client