Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: vJ/weA6o3AF75+crPOeQkmzqbquCUpG9iR8WvYtVCz0=
Subject key identifier: 46:BC:BE:CA:C8:3B:B2:8C:AA:BA:AC:41:8C:A2:EB:FF:F4:C7:18:BF
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 01A125E79944E656D13B1B24F1D2BB47E4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 09FB
Signing time: Sat 10 Oct 2026 13:01:37 +0000
Manifest this update: Sat 10 Oct 2026 13:01:37 +0000
Manifest next update: Sun 11 Oct 2026 13:01:37 +0000
Files and hashes: 1: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: UnLqfyzJJyiqCyx19mBKx+u7lPcSTNGp3EL5DEgjFIU=)
2: TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa (hash: qpNJM6IYQFJO0DDo4i0rSAgHt9c5GNaow4wODjswgv8=)
3: bB9tiwhbq6hYU3Uiwj1rg_6lHoQ.roa (hash: XwQfxbXuM3OGYVnPS+i0ZnmylsJru3PWg0dqFXCZLBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:e7:99:44:e6:56:d1:3b:1b:24:f1:d2:bb:47:e4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Oct 10 13:01:37 2026 GMT
Not After : Oct 11 13:01:37 2026 GMT
Subject: CN=46bcbecac83bb28caabaac418ca2ebfff4c718bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:75:6c:72:c9:fe:66:1c:4c:97:d0:4b:12:
24:0b:2c:78:89:00:35:96:8f:8a:e0:8e:ed:5d:58:
66:a8:29:a1:0b:26:9d:a6:ce:73:0b:f8:96:4c:6a:
eb:bb:09:5f:00:2b:e4:87:37:07:42:45:f1:c4:a4:
0e:ee:62:8c:86:b2:45:18:3f:cf:02:39:fe:68:73:
d9:d1:f1:57:c7:01:db:fc:ef:a6:bb:91:33:53:fd:
f4:7c:10:48:e9:1a:fc:b9:5c:08:0e:34:1a:9a:28:
ca:91:fa:f5:9c:b0:be:a9:af:e9:72:bb:33:84:95:
12:4e:b1:96:c8:33:91:28:cc:97:57:ad:96:87:d0:
d7:69:68:73:48:fe:fe:bf:0b:43:d5:52:69:24:0a:
e8:f5:44:80:f8:c4:f7:e1:69:2f:56:74:16:c0:68:
d7:10:07:35:27:c5:32:63:c0:5c:3b:3c:42:9d:ef:
b2:c7:10:92:de:30:40:65:35:0a:55:b5:77:e0:f8:
9d:a2:a0:d9:36:de:4e:d1:46:a2:e4:6f:5d:8b:b2:
a6:7c:cf:d4:1f:64:02:e8:e3:53:ed:69:98:99:a2:
93:6a:48:aa:7c:0f:60:32:1a:db:2c:d0:d2:6e:65:
f2:6e:e6:cd:6f:28:96:65:ae:d8:d8:80:7e:37:ab:
d7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BC:BE:CA:C8:3B:B2:8C:AA:BA:AC:41:8C:A2:EB:FF:F4:C7:18:BF
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c8:9a:f2:b7:db:88:7d:00:e0:67:7b:e1:85:57:67:49:ca:
63:4e:f4:2a:36:1f:56:48:e9:77:cf:33:15:24:3a:4f:79:94:
4f:e9:63:db:22:69:a1:a6:79:f8:c1:fa:7b:f0:2f:eb:e8:ad:
1b:bb:bc:3e:3d:49:45:67:a4:fc:e7:55:fd:b2:b7:4a:e6:4e:
ae:f8:a9:f5:4a:b3:4d:b4:52:76:4b:ad:bd:d1:ba:4f:33:01:
e0:10:33:85:f6:bd:f5:ec:33:bc:96:bd:86:2b:bc:04:c3:9c:
fc:be:80:1e:01:67:4b:52:57:cb:86:cd:a2:bf:45:3f:02:c4:
13:af:a4:bb:84:39:33:f3:d1:a1:6b:2d:24:3c:ef:f6:ae:50:
ef:5b:86:7c:0e:7b:71:95:e8:b8:20:de:d0:92:29:76:3f:df:
80:4f:24:44:64:af:2b:71:2f:6d:85:29:8b:a4:49:56:5d:ee:
f3:25:b4:dc:42:ae:45:ce:01:d3:9d:dc:29:5b:9a:9e:d3:43:
e6:43:11:2a:f6:4e:32:30:10:93:f6:85:e2:2f:52:9f:26:cc:
bd:4e:bc:f2:e1:ad:5a:82:6d:9e:81:c3:4a:4e:d7:48:3c:e9:
eb:59:bf:d3:ad:1f:7c:a2:c1:38:a0:f3:77:4d:a8:1a:77:8a:
aa:8b:48:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:15:31 2026 by rpki-client