Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: yvNeFrXmZPV0OJBOkxxRZvxZZAWXq06ZnmijPdjoyCY=
Subject key identifier: B9:9C:9E:BC:64:81:33:A3:49:19:17:DC:8C:3B:E9:BD:FA:D0:6B:53
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 01A18D8B47A559CA9E53BEF525949B9BE8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 1ACF
Signing time: Fri 30 Oct 2026 16:01:17 +0000
Manifest this update: Fri 30 Oct 2026 16:01:17 +0000
Manifest next update: Sat 31 Oct 2026 16:01:17 +0000
Files and hashes: 1: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (hash: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: sxbdR/moCEGc4JHj1vSlmTgIOUHCwRCMq79qDAyKUA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:8b:47:a5:59:ca:9e:53:be:f5:25:94:9b:9b:e8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Oct 30 16:01:17 2026 GMT
Not After : Oct 31 16:01:17 2026 GMT
Subject: CN=b99c9ebc648133a3491917dc8c3be9bdfad06b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:a9:11:8c:c9:63:2b:56:a2:4c:87:c4:7c:
6f:b7:28:aa:c5:63:71:46:cd:ae:2b:e6:d0:9c:a3:
1b:3a:5e:8f:71:b1:9a:5a:dd:63:87:72:1a:83:ad:
57:e3:37:30:18:27:d2:6c:39:c1:d8:13:70:b2:7f:
2c:04:ec:60:84:cd:64:3f:60:62:2a:e3:60:37:77:
50:61:9d:f2:4b:6b:b5:55:07:d1:f6:8b:9e:74:24:
e8:a5:fb:3d:98:b3:66:69:d9:6d:ac:a6:c6:68:f2:
3a:83:8f:7a:10:29:23:6e:05:8e:c7:d3:16:ad:d7:
f6:16:8e:da:62:46:98:bc:d1:22:d4:38:e6:48:27:
7c:6d:7c:90:9a:40:4b:5e:94:ff:6d:ac:5f:68:1d:
b2:97:a8:5c:a0:0d:7c:01:5a:50:6a:dd:73:3a:a0:
cd:51:25:96:a6:3c:2e:58:5b:db:a8:ea:4d:ad:27:
bc:1b:3a:c3:e9:24:e2:71:ae:a2:0b:40:bc:f3:3c:
4e:91:fd:51:a1:cc:87:76:d2:82:de:bb:db:56:20:
3d:e3:b5:6d:ca:51:cb:c0:d0:76:b0:8a:4f:36:51:
d0:f9:88:5a:c6:7d:ac:c4:5e:52:13:12:21:60:6d:
45:97:17:ea:fc:0d:bb:25:90:23:3b:b5:a3:c7:4f:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9C:9E:BC:64:81:33:A3:49:19:17:DC:8C:3B:E9:BD:FA:D0:6B:53
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b4:7f:a3:73:fc:5d:2a:71:56:c4:db:55:b3:f8:fc:c8:b0:
e6:fa:b0:2b:f2:ce:43:ad:48:74:af:54:8e:96:36:db:7e:16:
7a:3d:f9:f3:dd:c8:0c:17:82:18:3a:26:68:ca:e7:58:9c:ca:
27:27:e8:4a:f3:a5:2a:0e:5c:fd:55:16:59:99:5e:7b:7e:86:
d7:66:a9:e9:75:88:e1:e9:ef:b7:f1:55:c0:d2:3a:c0:59:07:
5a:03:57:bf:ca:f8:ff:21:d3:75:0f:93:61:e5:13:86:8d:ad:
09:5a:67:e5:0c:a8:e4:da:44:98:96:4e:b4:cf:c8:c6:9d:5b:
ee:7a:0e:19:44:5f:2b:f1:9f:b7:14:a4:a2:75:e4:db:93:72:
ac:e2:ea:99:ee:e3:8a:bf:20:73:b5:43:cd:d6:a7:2d:3f:f4:
98:c6:36:b4:24:b6:fa:fd:3e:e1:eb:24:84:95:b3:73:cb:a9:
73:19:f1:86:c7:16:2b:58:37:23:5c:b8:6f:03:30:35:7d:9b:
5b:1a:c4:2d:62:0f:b5:a2:c6:a2:1e:86:3b:17:c9:6d:83:f8:
0a:83:c1:9a:d4:81:96:0b:8d:39:3c:77:6a:65:ab:57:be:e7:
b9:26:17:00:7e:b7:03:91:69:75:db:6d:a3:ab:86:36:d2:f4:
a2:1c:3f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:03:04 2026 by rpki-client