Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: leaVGre4qfXZbeGG5TCAk7q9NvliTejBD/nKrRWeGWY=
Subject key identifier: B8:5B:9C:37:DD:C0:78:EA:35:C6:37:35:F9:E8:76:CD:C6:09:51:C1
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 01A08C7B64198B50E48CA3FE46CE161EA641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 0437
Signing time: Thu 10 Sep 2026 18:01:31 +0000
Manifest this update: Thu 10 Sep 2026 18:01:31 +0000
Manifest next update: Fri 11 Sep 2026 18:01:31 +0000
Files and hashes: 1: 5KIVeVQ6ATgB8-zTA_htC2jHMDw.roa (hash: zOXJ05ZKtRDWujtbHatrIa70pfwaUeWS9EUsC9cnW6o=)
2: PKjsey5cBzrl0JWfe47IqGPiYsc.roa (hash: hiWbQtDMwP7B1PYRdCuidEbqA+Byx4L5VqAKRcbQ+DU=)
3: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: 16fYdt7lKcn/TN33BjWmDnsekl1NTW+qQrcnDP1Iro4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:64:19:8b:50:e4:8c:a3:fe:46:ce:16:1e:a6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Sep 10 18:01:31 2026 GMT
Not After : Sep 11 18:01:31 2026 GMT
Subject: CN=b85b9c37ddc078ea35c63735f9e876cdc60951c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:14:7c:c1:3e:fd:6a:d5:a1:45:ff:1a:a4:
6f:9f:8b:ca:53:20:80:28:82:3f:69:83:41:e1:37:
8c:a7:56:44:30:fc:76:de:7f:2e:e8:de:84:89:68:
31:7d:37:32:e1:92:b4:0b:aa:51:ca:d0:c2:85:06:
d8:5c:93:cc:cd:d8:ec:3c:59:ef:25:15:00:e7:bd:
a9:da:16:84:61:09:0c:bb:7d:df:ac:5c:90:bd:19:
6e:df:9b:84:2b:e1:f0:ae:a2:5d:e2:05:18:62:d2:
f2:00:c4:bb:6d:3e:c1:b6:aa:ad:04:31:05:0b:63:
42:aa:86:af:82:97:e6:06:e5:63:7e:61:e5:43:c5:
d8:0d:9e:a2:f4:b6:7a:59:15:07:c1:28:0e:4e:02:
99:bf:43:cb:86:14:23:6c:dc:0f:04:35:d4:91:92:
fe:f2:fc:fe:5a:5f:d8:52:0d:60:a1:1b:d5:1a:7d:
03:5c:56:38:23:d4:40:8c:ee:91:78:40:9e:d4:99:
71:41:18:f7:c1:d2:b1:c5:f6:5e:92:e4:f3:b4:5e:
b1:4a:e9:d3:49:a2:52:72:04:28:69:bb:9f:43:03:
ba:b2:9c:7f:f5:91:1e:de:5c:0d:79:91:6b:fd:96:
2e:a5:7d:c7:83:1a:d8:79:16:e1:c5:77:65:f3:57:
b3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5B:9C:37:DD:C0:78:EA:35:C6:37:35:F9:E8:76:CD:C6:09:51:C1
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:35:22:75:9e:87:e1:f6:8f:0c:61:f6:39:cd:6d:ed:cb:ad:
a9:f3:fb:af:32:55:39:c8:50:5c:f6:67:96:7d:8a:81:80:0c:
82:5e:70:32:10:8b:e1:e0:b5:3f:71:48:4d:27:1d:a6:80:92:
93:a2:73:04:27:e9:0a:5b:82:ed:ae:b6:6f:c8:9c:7b:88:5e:
3e:27:60:89:1d:50:24:27:86:a3:08:28:6e:f0:a0:c5:9a:82:
eb:9a:2c:45:f2:55:bc:59:7b:34:ac:be:50:ae:7a:a7:5b:6e:
2c:e2:25:bc:e6:33:4e:52:f9:e8:6d:d2:63:49:a6:68:4a:9e:
c5:56:e6:65:75:d9:3c:90:03:b9:a6:3c:43:67:7f:20:13:67:
ac:89:a3:fb:24:0a:20:ce:e1:f4:a2:bc:61:af:65:c6:cb:47:
af:4b:e6:62:87:86:93:8e:5f:19:57:77:ab:17:fc:75:33:c3:
db:a0:52:d0:f0:4c:a1:6c:ac:d6:50:f6:d7:96:ef:32:da:0a:
83:72:69:a5:45:8c:1c:92:e3:9c:fc:8e:d6:38:d3:d1:fd:31:
76:02:6a:b3:be:ae:8d:61:93:a3:31:90:ba:b3:a6:19:1e:a6:
49:f6:e9:d1:b7:57:6a:6d:a1:da:56:15:d5:f1:1e:5c:dd:a3:
44:e4:fb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:33:23 2026 by rpki-client