Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
File: o2n7GRvuUc3HQUppYxl_hrvzE6s.mft (raw, json)
Hash identifier: BqWIyHiyPoqiKp4pUH3d7KQCYup4ER8b6rPOhRyfof8=
Subject key identifier: 5A:1E:73:3F:C5:30:D8:02:F4:3E:58:A4:C0:95:A7:71:F7:1F:FF:2E
Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Certificate issuer: /CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Certificate serial: 01A17E85F7CD20C4A9EB400EDA360E274ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
Manifest number: 1527
Signing time: Tue 27 Oct 2026 18:01:11 +0000
Manifest this update: Tue 27 Oct 2026 18:01:11 +0000
Manifest next update: Wed 28 Oct 2026 18:01:11 +0000
Files and hashes: 1: o2n7GRvuUc3HQUppYxl_hrvzE6s.crl (hash: EqtAyoDv0dQJQ4952nQZQ/37dtBqwdMB0BIMenapKFI=)
2: u-PjOq1WjK6PsqFBvXy59id7R_I.roa (hash: Pz8fOepb3H13pqdKO3L1FSkff2yUOqZGUk6QeB6m10U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:f7:cd:20:c4:a9:eb:40:0e:da:36:0e:27:4a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Validity
Not Before: Oct 27 18:01:11 2026 GMT
Not After : Oct 28 18:01:11 2026 GMT
Subject: CN=5a1e733fc530d802f43e58a4c095a771f71fff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:39:20:59:22:67:99:44:75:4f:ee:2e:e2:
a0:7e:af:96:99:87:62:55:c3:4e:15:fd:92:6b:52:
ae:16:39:eb:c2:e7:15:69:dd:9c:53:07:8c:cc:7e:
66:6f:d5:e0:87:f4:c0:e4:50:90:8a:27:c6:95:1b:
71:34:9b:7f:7e:8f:4f:e6:b0:a6:9f:a1:fc:c4:22:
cd:6b:38:f6:11:67:ea:6e:cb:53:b3:af:13:bd:56:
2d:ea:05:be:aa:c0:68:52:e6:73:2f:b6:54:4e:7b:
c0:66:4b:7f:fe:57:55:2b:5d:2d:6c:0a:c9:97:ae:
8c:57:d9:8f:72:c2:b9:e2:da:c1:bb:26:16:b9:68:
b3:63:21:d9:45:30:d3:a9:e2:d4:f7:55:0b:ef:50:
7b:5b:a1:66:60:14:5d:8f:d6:37:a2:3c:60:76:64:
39:a7:f2:1e:a3:d6:36:ed:2a:f9:d3:43:11:67:77:
15:f9:52:71:92:3c:64:84:fe:90:18:0f:ff:dd:8e:
66:5b:e5:84:ae:bc:a4:ca:b4:7d:19:81:67:04:60:
c6:be:82:ad:7d:30:a5:84:c8:e7:cb:5c:00:7e:07:
43:92:7a:86:92:9d:9a:8e:38:b3:b8:4d:6f:3c:30:
4b:7c:a6:52:e5:bf:bc:0a:16:19:6a:c1:a8:8f:34:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1E:73:3F:C5:30:D8:02:F4:3E:58:A4:C0:95:A7:71:F7:1F:FF:2E
X509v3 Authority Key Identifier:
keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c9:47:06:0f:fc:13:03:19:86:7a:d5:44:ff:32:85:42:06:
05:da:46:d5:cc:07:7f:74:93:e0:21:16:6f:05:bb:5d:29:a9:
24:f0:e9:43:2d:ed:e5:64:54:3d:01:86:44:23:18:54:0f:91:
f4:6b:85:81:6f:f2:3f:f8:6b:5b:fc:64:74:5e:3d:09:06:22:
fa:0b:38:a5:5b:74:16:b2:e7:fa:79:43:85:4a:a2:b5:a7:40:
26:b1:42:3d:e8:b8:2c:5d:73:a1:d4:f9:0b:b5:53:3c:4b:28:
87:13:8f:a0:66:bf:08:5b:06:c3:3d:6d:16:59:5a:01:b6:aa:
67:b2:7f:64:3f:01:e5:fd:5b:00:0d:da:39:41:cd:2f:a5:16:
d9:98:37:5e:6e:0d:df:cc:60:c3:9f:2c:8e:12:79:9b:48:52:
41:5d:84:51:ca:e6:6f:c2:46:b7:05:06:9d:4d:08:8d:ad:a9:
aa:7f:cf:09:cb:28:8e:b6:80:8b:50:9b:62:98:ba:32:4b:b5:
92:ab:73:da:db:bc:c4:7e:99:18:d3:c2:a2:e3:f4:8e:4b:70:
96:52:51:0f:e6:4f:b3:b1:da:56:26:99:68:f7:2b:dd:0d:30:
d4:c1:8b:f1:6a:78:63:1b:1d:26:4f:78:cd:16:3b:84:d3:c0:
ab:9a:2d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:47 2026 by rpki-client