Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: KJaq6fBBoU1XuaG54mMxOymyxH3QjK6jrP9HdtqhRhc=
Subject key identifier: 94:A2:E8:5F:AC:8C:1D:80:F3:58:8C:6B:A3:B8:48:2E:6D:2B:52:C4
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 01A08B9F2E55A9170EDA5AD4DAB7F04B45F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 1548
Signing time: Thu 10 Sep 2026 14:01:00 +0000
Manifest this update: Thu 10 Sep 2026 14:01:00 +0000
Manifest next update: Fri 11 Sep 2026 14:01:00 +0000
Files and hashes: 1: TzZ8DBm3Hp04BY0B397tAwAsJ1A.roa (hash: 8hOHuxX3j27ZIrYwIouhG6F7KAUYojmRWpf6OzaimAU=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: c3yzE+dRWhSP+iO+Gm92wijDUsghTWEMdn94wmiD0bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:2e:55:a9:17:0e:da:5a:d4:da:b7:f0:4b:45:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Sep 10 14:01:00 2026 GMT
Not After : Sep 11 14:01:00 2026 GMT
Subject: CN=94a2e85fac8c1d80f3588c6ba3b8482e6d2b52c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:57:0f:8f:e0:8e:9f:79:22:ed:f7:6b:9e:
6f:a7:af:1a:d4:a3:0a:cf:f3:3f:22:6a:bf:d2:f3:
29:8d:45:ae:1f:ea:ab:6a:72:f0:4b:28:26:88:15:
d3:a9:e7:2c:ff:af:82:5b:25:18:b2:81:0f:8a:98:
56:c0:68:e9:b6:46:b9:3d:97:66:0a:a3:24:d5:e7:
5f:a1:5d:62:0d:b2:61:40:de:4a:bc:3b:7a:d3:fd:
0a:3b:b2:6a:04:bf:20:b0:13:f6:1b:2e:c9:3e:ca:
8a:c2:96:1c:42:34:48:c2:8c:72:c5:e0:4e:fd:e6:
0b:67:a3:8c:7e:07:0e:fd:16:56:2b:30:71:b7:5f:
f9:12:54:ea:fb:80:94:bc:56:29:9d:cb:85:86:07:
73:b2:f1:95:d7:b2:00:f9:0d:61:d4:3e:35:bf:0f:
d8:9e:f9:45:60:f6:38:48:fe:f6:e1:47:39:3e:dc:
63:2e:13:72:a2:c5:99:1f:e8:41:04:87:73:a9:52:
c6:44:a9:43:04:98:e0:10:3a:30:a2:1f:d5:7b:19:
6c:ad:8e:2c:17:4e:c0:db:ef:ca:28:f4:90:22:84:
94:ad:63:63:7e:5e:62:48:af:6a:3f:2a:58:a1:68:
d0:1f:64:fd:60:48:e8:53:e1:ab:f6:30:3f:d5:03:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:E8:5F:AC:8C:1D:80:F3:58:8C:6B:A3:B8:48:2E:6D:2B:52:C4
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:02:38:66:3b:fc:a9:d7:5e:cd:1a:49:fc:92:5f:ec:32:5e:
24:79:fb:1b:23:bd:21:d6:c9:3c:15:4f:85:1f:cc:7d:19:01:
e4:70:ca:43:1b:7a:e2:95:71:d3:fd:a7:a6:16:47:df:e3:ca:
63:49:cd:b4:5d:65:45:46:43:83:be:9c:c0:62:b2:5e:3b:dc:
94:78:24:4e:61:9a:9d:e9:c0:ba:ee:5c:f0:cd:3b:39:bf:41:
9a:a7:d9:bf:7b:4f:d2:e1:e4:13:4d:42:96:14:a6:71:84:26:
d0:3c:b5:4f:48:d4:d6:97:c7:65:c7:65:c9:58:4c:10:7a:fc:
69:e2:be:3c:af:69:12:aa:01:c7:e6:7b:77:e5:37:65:d0:de:
96:22:4b:2b:db:b8:7e:b5:ef:13:0d:f1:2f:4b:a4:54:66:73:
ea:c2:bf:11:25:5d:57:3c:5c:e9:31:b2:33:e8:dc:ef:a0:60:
49:f2:6c:64:0a:d4:43:2c:be:93:0d:40:d0:17:8c:bb:67:8b:
f1:dd:d8:f1:64:8d:cc:09:ee:ef:c9:81:3c:40:2e:38:c0:8b:
86:f6:2e:a6:5f:00:97:8b:2a:a8:25:7c:1f:74:2f:65:9c:2c:
2e:64:50:b7:0c:c3:22:20:f4:21:0e:ef:ad:e9:de:02:35:e0:
04:d9:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:57:43 2026 by rpki-client