Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: obhRMD90cmx1wjku9STOW3apNuIoE7cx5gfYr2o2cVE=
Subject key identifier: F6:8C:90:12:6D:C3:44:A6:38:D3:A7:5D:A2:26:9A:0B:51:74:39:E5
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 019FFC7FE6B04BFE3BAD332587B43F2C688D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 0961
Signing time: Thu 13 Aug 2026 19:01:08 +0000
Manifest this update: Thu 13 Aug 2026 19:01:08 +0000
Manifest next update: Fri 14 Aug 2026 19:01:08 +0000
Files and hashes: 1: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: d2L/JKVfRjgAFmL2lxvVlkJscs6Hgux1tpfBrGGbRqs=)
2: TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa (hash: qpNJM6IYQFJO0DDo4i0rSAgHt9c5GNaow4wODjswgv8=)
3: bB9tiwhbq6hYU3Uiwj1rg_6lHoQ.roa (hash: XwQfxbXuM3OGYVnPS+i0ZnmylsJru3PWg0dqFXCZLBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:7f:e6:b0:4b:fe:3b:ad:33:25:87:b4:3f:2c:68:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Aug 13 19:01:08 2026 GMT
Not After : Aug 14 19:01:08 2026 GMT
Subject: CN=f68c90126dc344a638d3a75da2269a0b517439e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:3e:0d:b1:33:20:db:32:ab:bb:e9:cf:db:
a7:f0:99:62:99:f8:dd:b2:d7:8f:87:68:d0:78:8b:
0c:34:9d:d6:82:66:81:64:34:5a:a1:bd:ae:1e:c3:
95:a5:98:b4:2f:5b:6a:b7:bf:e4:4d:2f:9f:63:1e:
f5:c0:06:b6:d3:b1:71:07:ed:97:26:ab:c6:1b:55:
33:b6:13:06:03:10:f2:4b:72:77:1f:c8:ac:38:c1:
1b:d2:db:0c:06:0c:14:72:5d:32:08:b9:62:56:43:
ee:f5:d8:fc:c5:66:07:1a:00:24:70:10:65:af:7f:
9e:83:74:e6:38:e7:43:e4:b9:75:20:5f:0a:d0:0d:
b4:71:99:2f:e9:96:ee:d5:87:d4:50:3c:1c:34:af:
74:67:3a:a2:31:d5:c1:f7:37:d3:ec:9b:18:37:70:
69:22:aa:a4:66:2d:06:86:a1:eb:e2:4a:26:ca:8d:
57:87:35:8e:d2:41:e1:db:7b:be:ec:3b:84:c7:d2:
f5:46:a9:7f:3d:1d:2e:68:11:a4:e5:ba:39:b1:d8:
c9:09:f9:f3:8e:87:4a:57:58:3c:ac:e3:bc:6e:95:
bd:d2:af:9d:a4:c0:f3:8c:d0:79:82:03:7d:b2:cf:
5c:af:41:db:e5:ec:2b:c6:75:76:6e:95:97:87:a0:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8C:90:12:6D:C3:44:A6:38:D3:A7:5D:A2:26:9A:0B:51:74:39:E5
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5e:fd:df:82:f5:bb:b1:1b:69:31:1e:42:a0:e0:4a:f0:c4:
32:ab:5b:a0:78:45:35:9d:31:ea:37:60:fb:0d:2b:b1:63:ac:
e8:04:fa:5d:18:3b:3d:fb:44:38:ee:6a:46:c1:92:34:5d:46:
35:77:ce:14:5b:02:17:09:15:80:f8:5b:24:b8:b2:ce:41:ba:
60:a3:bd:ec:51:62:bd:8d:b1:8f:05:2a:ca:ee:e3:6b:74:54:
35:68:1a:e4:a1:1b:60:7f:c5:6b:53:9b:d2:c9:be:69:de:f3:
fd:f1:bc:e7:e4:e8:be:08:a1:b0:5c:d1:b9:e0:64:cf:27:1a:
82:9d:81:3d:3b:18:03:6f:1f:67:dc:27:77:89:de:54:71:77:
d4:f7:07:1b:d5:5f:a3:73:ef:8d:cb:64:a2:2b:74:05:46:06:
4b:ff:40:32:2a:e4:cd:02:cc:6c:f2:45:8d:1b:21:6b:e9:2b:
9f:4b:9e:81:d6:53:2c:c6:2e:96:bd:2b:0d:5c:2f:a8:68:cd:
f9:be:85:62:23:71:51:de:f1:0c:40:20:1f:77:5d:f7:ce:dd:
04:fe:3d:ea:9b:3f:27:22:e0:91:8a:3b:8b:25:d6:77:d3:1c:
7d:01:82:d6:87:9b:a6:4c:81:69:c1:18:96:fb:c8:f1:00:cf:
b5:83:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:02:26 2026 by rpki-client