Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
File: O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json)
Hash identifier: +Q/8oVcwXK+n7a6S9hQTUY2fSHdURkp+c91IFMTXQzI=
Subject key identifier: 17:48:44:A4:F6:C6:93:33:1F:C0:80:11:EA:98:D0:27:08:A1:9D:B9
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial: 01A020C3223F01DC42EBD59999508FA56314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
Manifest number: 1478
Signing time: Thu 20 Aug 2026 20:00:54 +0000
Manifest this update: Thu 20 Aug 2026 20:00:54 +0000
Manifest next update: Fri 21 Aug 2026 20:00:54 +0000
Files and hashes: 1: 6J5zq7acHeCorGt2Kz1SRI8TBxw.roa (hash: QUb/O/uGMs7lP+6gaahFi67OYlrRZUT6YWqd/feI1TU=)
2: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: DLKcEIy5n2ViGOJa9Sqwu/jigVt8uGdM2zpFXdqWrYg=)
3: SAEHlpuu2VHfT1gYOBIDmp8YrI0.roa (hash: f+Ly+ugjS2e2LTdlARUIcZJrF9Q/kNyEBJzeeNxkntA=)
4: l8nJcuD4rGZxCdIYInml3vohntk.roa (hash: eU3RnT3IPn87hTAFydZwwQYkYydG1vHyM8wmqGF1vjs=)
5: n7VSYaUgna6BrvfvQJiTcoRPzQk.roa (hash: M0u1q9q0trXFDUH6vNkVVYgYyDRJLjrO4qxwE6RvEOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:c3:22:3f:01:dc:42:eb:d5:99:99:50:8f:a5:63:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Validity
Not Before: Aug 20 20:00:54 2026 GMT
Not After : Aug 21 20:00:54 2026 GMT
Subject: CN=174844a4f6c693331fc08011ea98d02708a19db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:33:57:58:36:c5:63:27:fa:35:26:1e:2b:
a6:c2:57:bb:d2:98:1b:06:01:2d:3a:d3:f6:9d:38:
0c:8d:61:a7:fb:bb:4a:eb:e8:93:be:31:3b:a4:9a:
dd:f6:6c:a1:0e:1f:3e:fc:87:11:46:22:1c:6b:7e:
a6:8d:53:69:e6:72:ac:bd:c9:43:3d:12:38:9c:2d:
f0:4a:9d:9a:af:1a:ad:07:36:38:17:09:ad:45:88:
bc:66:39:b6:15:96:67:63:76:04:27:92:be:24:22:
db:79:ac:89:7b:7f:0c:55:1d:d1:a1:b5:40:1c:f7:
0d:25:08:d8:51:48:58:cb:31:fe:f3:f8:ba:4e:48:
3e:45:f8:05:97:c5:3c:d4:24:f1:39:f3:9f:fc:16:
ea:e0:5c:b9:50:be:f3:19:4d:e2:de:62:d6:86:5b:
9d:1a:de:c1:39:9f:27:46:6e:4b:4a:a8:a8:b4:7c:
cd:ed:0a:52:e9:aa:3f:d8:90:35:f1:aa:cb:44:84:
8f:0e:14:cf:62:db:d5:be:17:56:f0:16:97:64:0a:
07:79:5c:f8:04:13:16:69:68:9f:32:ea:46:c8:56:
3e:e7:6f:be:d6:ee:60:13:28:1a:20:cc:2f:80:cf:
b2:30:a4:b6:2d:1d:a2:5e:0e:71:b0:ee:dd:b5:5b:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:48:44:A4:F6:C6:93:33:1F:C0:80:11:EA:98:D0:27:08:A1:9D:B9
X509v3 Authority Key Identifier:
keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fe:47:14:76:a0:0e:e6:c8:a3:4a:00:b9:d6:2e:20:2d:d9:
0f:3c:89:97:dc:18:53:0c:16:28:a5:eb:72:89:73:72:b7:6f:
91:1d:ef:f5:db:50:ff:2e:a8:c6:6b:8c:88:e5:a9:6f:9d:3e:
17:59:66:e8:00:67:24:6b:ac:b0:fa:d9:a8:fd:bf:61:76:37:
37:a6:2a:44:cb:a8:97:26:ed:dc:72:56:96:20:47:42:25:5d:
da:2c:93:26:ba:cc:ed:1c:34:0b:bc:bb:45:f3:45:d3:2a:68:
14:d6:bd:24:6f:e7:20:fd:36:4a:85:69:d0:52:61:2c:52:06:
48:ca:c0:ca:b2:1e:d5:2a:7d:80:c2:62:fa:fa:fa:00:37:37:
69:68:d1:b7:11:13:af:45:07:e5:8c:3a:1d:81:8a:d7:dd:20:
77:24:21:0d:e6:04:6c:9d:7e:dd:ae:66:fc:e6:39:aa:b7:56:
b5:d5:49:27:4f:8f:bc:11:ce:e5:20:73:a3:2a:a8:35:e8:97:
82:1f:24:d6:1c:62:e9:49:2d:55:f4:30:a3:30:0c:b0:3c:86:
94:ea:f7:7a:81:b6:38:f7:7c:de:c1:44:22:ff:f6:49:71:3a:
3d:85:79:1b:a4:3f:5c:75:d0:b0:6a:9c:e7:86:ad:d0:39:42:
e1:7e:51:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:41 2026 by rpki-client