Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: e/DVQ9FLMaa/8IffijDZLEPxEF87B3anF1Ql3ojttk8=
Subject key identifier: 41:A1:DC:91:0B:F9:B3:91:6B:7A:88:94:F0:FC:2A:89:A5:58:98:29
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 01A08A8C8262064351D6F92EAA811FC55602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 13C6
Signing time: Thu 10 Sep 2026 09:00:59 +0000
Manifest this update: Thu 10 Sep 2026 09:00:59 +0000
Manifest next update: Fri 11 Sep 2026 09:00:59 +0000
Files and hashes: 1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: VALJ3uMVpFmZVnM3Uxol1OXpFMxmmeelQOXTT3C/Ua4=)
2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:82:62:06:43:51:d6:f9:2e:aa:81:1f:c5:56:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Sep 10 09:00:59 2026 GMT
Not After : Sep 11 09:00:59 2026 GMT
Subject: CN=41a1dc910bf9b3916b7a8894f0fc2a89a5589829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:c6:ba:0f:ca:75:c8:f1:75:fc:1e:08:4a:
ca:58:f1:be:1f:ed:27:e2:05:31:a8:3e:7d:f0:59:
6e:00:82:bf:1b:49:88:ce:8a:00:2c:22:ed:5c:ea:
db:18:46:2d:05:8a:ad:48:0d:fd:82:58:96:c4:d8:
0c:4e:d8:94:e8:70:32:5a:a0:18:3f:82:72:bc:98:
4f:af:35:15:54:34:44:d2:62:89:66:22:75:1e:30:
c8:a5:fa:ef:f7:3b:dd:b3:0f:ce:46:d8:69:c3:92:
41:91:3f:89:bc:7b:43:45:71:37:7c:5d:64:fb:9f:
35:8b:68:c2:1e:e4:6d:e3:af:22:39:57:bd:05:cb:
02:f3:64:c9:10:38:92:5f:38:22:36:dd:93:3e:45:
36:60:79:0e:9b:20:3e:32:41:be:32:16:f5:7d:8c:
28:17:e3:2e:3e:ad:6b:25:e0:cb:50:13:3e:0e:d9:
a1:aa:ad:5b:4c:a7:da:dd:c8:d9:0c:b9:cf:ff:e4:
1a:7b:c2:63:34:88:63:1c:74:79:44:57:e4:a2:3f:
ab:92:f2:ef:74:6f:7d:d9:5f:65:13:65:fb:05:1b:
0b:5d:11:bd:26:10:bb:24:b8:66:e6:98:30:39:d9:
12:2d:25:61:61:66:8e:38:ef:d4:5b:0b:15:24:3f:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A1:DC:91:0B:F9:B3:91:6B:7A:88:94:F0:FC:2A:89:A5:58:98:29
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a4:2f:59:46:aa:80:d9:8d:d0:1f:8b:b7:4a:5f:05:a7:ec:
b3:b6:c9:98:7e:57:26:4c:c2:70:2a:a3:02:7b:a2:29:04:ff:
66:74:4b:d9:93:71:8f:3c:40:84:67:e3:eb:f5:92:44:9c:86:
05:2c:33:4f:12:c9:dc:33:76:07:6d:e9:1e:ab:28:5a:4a:6c:
0d:e7:e6:49:a2:77:ed:2d:65:10:02:c6:23:43:9d:fb:12:c2:
7a:f0:9f:de:49:da:cf:4c:5a:50:01:86:06:61:c9:24:bf:d2:
1f:7d:f2:4a:b6:34:30:16:a5:b2:84:37:7b:30:6e:dc:74:3a:
a1:dd:8b:73:40:62:29:26:69:ce:2d:75:62:bc:40:a6:43:0e:
1c:e1:9d:5f:92:f1:1e:62:9e:1d:13:a9:b4:38:89:ec:51:e4:
dc:23:e6:81:1a:89:c5:73:61:e7:20:6b:be:f1:5f:7e:fc:a4:
06:d8:7e:97:c7:4e:10:e1:ab:7d:4b:b9:c2:4f:0a:4e:df:70:
ad:12:e1:62:56:a0:b9:36:e4:41:82:ee:cb:d3:53:f9:a0:fa:
08:8f:59:b1:34:b6:f6:6a:29:ff:f9:fa:69:45:b6:37:08:b8:
92:b4:4c:f6:50:1c:5d:5c:c6:70:b6:5e:38:ae:ed:15:c2:b3:
de:f3:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:44 2026 by rpki-client