Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json)
Hash identifier: fkTaOzQYHolnT0XCvRfP4PFleFFP9HATs4dPMP/I/gQ=
Subject key identifier: 4D:3B:AC:CB:EB:DD:59:6A:5C:73:A6:18:6D:90:E3:8E:03:90:48:D4
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 01A118CF92BF7B4B152CB16958683BD31379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
Manifest number: 19C3
Signing time: Thu 08 Oct 2026 00:00:18 +0000
Manifest this update: Thu 08 Oct 2026 00:00:18 +0000
Manifest next update: Fri 09 Oct 2026 00:00:18 +0000
Files and hashes: 1: 2zvlLx0eZAbOYhxgIyqrlDoVC1g.roa (hash: KQYOWqTXbXwvtekOLsVc2rxud/hR8A87QDGRubzzTXw=)
2: 4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa (hash: Cbb+P8Z0r4y6AjDJgLqHTENuD/Go8wmcnnMVwTktU/4=)
3: D757pdeWdoida8GHOUdKTXVzQLA.roa (hash: 9oAemx2TPMquAep4lORrFPAoBV6BakfDEYxe+lt7IJE=)
4: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: 64Yz0HS20S5ssPJ9Zv0U4xMzdejAEcLmOQnmIFAJ6Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:cf:92:bf:7b:4b:15:2c:b1:69:58:68:3b:d3:13:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Oct 8 00:00:18 2026 GMT
Not After : Oct 9 00:00:18 2026 GMT
Subject: CN=4d3baccbebdd596a5c73a6186d90e38e039048d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:c4:2b:d8:c1:d4:79:1f:ad:68:21:88:91:
5e:f9:d4:9c:af:c9:43:c6:9e:15:f7:2a:5a:ba:49:
36:b6:77:1c:57:31:fb:49:e4:3a:db:b5:2f:93:9c:
1e:eb:ef:58:c2:88:ad:44:05:dc:80:a5:6b:34:33:
f6:82:38:77:42:73:69:89:7b:dd:ef:b1:d4:64:e5:
2f:82:3c:10:8b:19:35:88:07:39:4f:13:6d:c2:f5:
bc:2e:b3:c4:a1:bb:58:2a:42:b9:fa:01:48:80:fc:
0b:82:0a:51:e5:b2:7b:02:aa:29:90:88:6e:2f:44:
23:d4:b2:2e:ca:f0:b4:84:03:2e:6d:e3:33:a1:20:
8f:82:79:09:6b:d6:7e:45:03:41:d7:3a:47:f1:e6:
25:dd:e9:c0:f5:06:7d:47:0a:1f:4a:23:c7:b1:3d:
d8:28:fe:71:39:df:4a:5e:c6:8d:92:5b:f2:d1:1e:
06:85:4d:a9:6a:c4:f2:64:b4:5d:73:ff:47:5b:fc:
00:c7:8c:4a:08:51:5b:d9:8d:09:b2:7e:1d:11:b5:
0d:a5:91:53:92:b2:70:96:5e:a9:b1:7f:9e:d3:1b:
ae:15:78:36:ea:f3:77:ac:c9:4b:90:54:50:f7:84:
f2:9c:3d:8a:d8:80:43:3a:1f:ec:78:b7:d1:d1:60:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3B:AC:CB:EB:DD:59:6A:5C:73:A6:18:6D:90:E3:8E:03:90:48:D4
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c9:be:88:1c:93:91:1d:7c:be:ae:ec:74:c2:eb:3a:49:67:
de:a2:47:18:65:d6:c1:7a:a7:28:ba:3f:f8:23:4b:f9:00:e6:
c8:b2:89:61:98:b7:00:29:ed:6d:01:de:45:67:c9:c1:0d:15:
53:f4:17:e7:4e:c8:29:9c:78:ff:af:0b:3a:4c:ca:09:50:de:
f3:2e:3c:f7:ce:0a:a2:f8:48:92:f8:0b:85:1a:71:e3:5d:1c:
a9:d2:e6:68:fb:06:85:bd:77:45:93:c9:82:e4:55:c7:ff:56:
25:7f:01:7f:a5:74:8b:a5:03:72:ff:a1:99:cf:7c:00:94:cd:
fd:fe:01:cf:51:f0:0e:40:b7:ab:92:34:9e:b2:2e:39:0f:44:
39:00:8a:a9:c7:18:08:b9:04:47:6b:03:ca:99:e8:18:03:73:
a2:6a:06:92:ac:fa:af:d3:e9:26:82:2a:1c:54:15:fa:e3:2e:
ed:63:0e:87:dd:7f:a1:6b:0e:22:aa:16:9a:e3:0d:64:ae:00:
1a:31:48:e3:79:eb:ed:0a:c9:d6:31:8d:51:68:0d:6b:25:77:
5a:36:cb:c6:5f:ad:db:ad:ed:e6:a6:af:8d:bf:a7:50:05:68:
91:0c:3d:a2:45:c7:66:b7:5b:da:70:62:fc:79:b2:c1:0f:a7:
de:f9:9c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:51:03 2026 by rpki-client