Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: olrNPbeyIHnMjaYlynCfBTv5vS6Xl+y2R5TfaX4YA84=
Subject key identifier: 9F:D9:D3:D0:F7:5A:05:F3:9F:73:DC:7C:8E:D4:90:98:1B:9E:A3:62
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 01A182D13E15E650678B9CC0EFD7DDC874FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 15C8
Signing time: Wed 28 Oct 2026 14:01:53 +0000
Manifest this update: Wed 28 Oct 2026 14:01:53 +0000
Manifest next update: Thu 29 Oct 2026 14:01:53 +0000
Files and hashes: 1: TzZ8DBm3Hp04BY0B397tAwAsJ1A.roa (hash: 8hOHuxX3j27ZIrYwIouhG6F7KAUYojmRWpf6OzaimAU=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: nCa6KUDK/3hW/swd5x2Wj9ZRzw/cnVN6sHIiNxjQJsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d1:3e:15:e6:50:67:8b:9c:c0:ef:d7:dd:c8:74:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Oct 28 14:01:53 2026 GMT
Not After : Oct 29 14:01:53 2026 GMT
Subject: CN=9fd9d3d0f75a05f39f73dc7c8ed490981b9ea362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:e6:cc:8e:7d:47:a1:f3:27:4a:a0:7a:1d:
fd:04:79:a7:b6:e3:0f:e1:d2:37:6a:5e:83:3c:a1:
e6:3b:9c:01:69:1c:73:84:c4:cc:81:5a:cc:5f:c8:
32:6c:ba:63:bf:36:17:13:ef:cd:b3:cc:0f:03:e3:
7d:e6:0f:3a:35:e8:d6:f6:71:1f:03:4c:1d:c7:7b:
92:14:f7:bd:a1:31:c9:26:24:30:0b:ab:80:ec:e6:
f3:03:68:e9:bd:d4:62:24:25:fa:9d:93:c9:0b:e0:
7f:3e:a7:9f:37:dc:89:44:17:f8:f9:60:25:5a:a0:
1c:1f:9a:2b:50:38:7f:35:86:bc:5d:94:47:bd:c5:
2d:2f:55:34:10:7f:7a:49:23:e3:7f:7d:89:ac:6e:
a6:fe:bf:8e:9c:bd:4f:56:bd:d4:50:6a:43:0a:66:
80:88:e0:14:2a:86:a8:48:09:f0:65:03:c1:4c:de:
94:75:12:9c:be:31:44:e3:a5:b8:92:8c:e9:4a:0c:
5d:f9:c3:e4:83:1f:ab:c3:94:95:c9:99:d9:ce:35:
c6:7c:8c:d2:76:58:32:cd:b2:19:ab:6f:d9:4a:f4:
03:7e:38:6c:ff:20:77:e4:d9:7e:76:d0:1a:9c:09:
5a:36:e6:30:11:8d:be:fb:79:57:1d:e9:51:c4:05:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D9:D3:D0:F7:5A:05:F3:9F:73:DC:7C:8E:D4:90:98:1B:9E:A3:62
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b4:ce:63:d8:7d:ac:d1:58:8c:db:51:6e:d9:48:f4:fe:4b:
89:9b:2e:42:83:93:6a:f4:3d:0f:fe:55:fa:0f:26:5a:0a:fd:
d3:1c:56:cf:5e:17:88:43:4f:b0:68:cd:b8:22:8d:d1:f3:a1:
49:8a:d6:42:dd:51:4e:41:c7:51:04:79:34:e0:e8:b1:87:43:
6b:1b:ec:3e:2b:84:2b:ad:ea:15:7b:25:ec:e5:db:f2:94:4e:
22:01:49:04:f5:f8:c6:5a:0c:dc:95:3e:8a:1a:bd:af:bc:52:
86:3b:6f:45:e4:d1:3b:d5:a9:ec:45:23:76:d0:f3:79:87:e7:
a0:99:07:81:54:cb:bc:45:cf:d2:9c:b8:08:3f:94:ec:22:4c:
4a:09:bf:73:3f:59:4b:ca:fb:49:70:76:3c:41:39:a6:e8:ce:
1b:d2:99:d0:75:13:89:ca:fa:23:ae:44:ab:70:8f:2d:c5:60:
4a:d7:45:a7:49:bf:00:82:26:5d:5b:3c:a5:ae:02:6f:64:ef:
5c:0d:75:76:f8:a9:29:f4:e3:75:a8:a1:bf:97:fc:37:91:74:
a5:96:41:47:31:46:09:14:b1:0e:1e:85:b0:a8:ff:df:57:dd:
eb:c8:1c:eb:a8:26:e3:8d:0f:63:c3:01:08:a9:59:5f:e8:31:
28:d5:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:17:04 2026 by rpki-client