Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: EkTzirWTEORX1Ln3tytPC53EX5kuuwFG1tV10ZpzD+I=
Subject key identifier: 04:5E:36:5C:29:80:C6:C6:8B:A0:8F:43:F7:F7:10:AA:A0:05:5D:BD
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 019DCF75114F6580B417E93A4A2390C7F930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 125C
Signing time: Mon 27 Apr 2026 15:00:48 +0000
Manifest this update: Mon 27 Apr 2026 15:00:48 +0000
Manifest next update: Tue 28 Apr 2026 15:00:48 +0000
Files and hashes: 1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: dgKwK0x/DK7PhYJNE1vvXhq24igbGyVqqtOYVsPZy8E=)
2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:11:4f:65:80:b4:17:e9:3a:4a:23:90:c7:f9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Apr 27 15:00:48 2026 GMT
Not After : Apr 28 15:00:48 2026 GMT
Subject: CN=045e365c2980c6c68ba08f43f7f710aaa0055dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:ae:11:65:af:12:91:d8:f0:6b:5c:ed:02:
5e:d6:a9:e6:db:b1:61:f9:04:f8:3d:8a:3f:9f:e4:
18:f5:99:95:ea:fa:e8:54:37:5e:dc:a8:ee:ae:49:
2f:74:91:56:22:fa:9f:37:56:6c:c9:b7:4d:10:bc:
56:5f:fc:6c:3c:16:d9:11:8d:cd:b8:11:56:e9:54:
37:4c:6b:9a:94:5c:f8:22:cc:ca:b5:7c:ec:2b:af:
5b:e1:33:5f:e2:10:b1:cb:8d:c7:02:19:d9:9e:e7:
9b:35:ec:25:9e:4a:f9:97:7e:2a:d9:cc:85:fc:85:
59:84:53:e6:d7:53:47:1e:ee:3c:53:1f:78:6a:bd:
38:d1:9a:6c:2a:ec:5d:cc:bd:86:20:b7:93:bd:81:
59:22:79:ce:80:2e:80:f2:c4:b2:19:f0:eb:71:9c:
34:a5:04:74:d7:38:8c:3b:3d:26:9f:a1:16:ff:3d:
10:d5:42:0c:8b:b8:0a:40:29:a8:4f:ee:f9:74:4e:
00:70:bc:e0:b2:33:8a:9f:5b:6b:f0:98:ab:58:a1:
ca:f6:76:7f:fb:cd:4c:e2:63:06:cc:a0:aa:4c:01:
84:6d:61:f2:39:51:db:6b:6b:f5:76:54:1d:da:7f:
d2:a2:52:50:2c:9d:e0:25:3e:5c:af:cc:87:00:f1:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5E:36:5C:29:80:C6:C6:8B:A0:8F:43:F7:F7:10:AA:A0:05:5D:BD
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f9:de:08:be:64:32:4e:71:3c:05:09:6c:4a:75:8b:4f:e7:
43:66:82:eb:e5:31:cb:e9:34:71:cb:80:b4:e1:0f:89:b8:7c:
33:06:07:dd:5f:de:8b:bd:7b:bd:3a:1e:e6:2f:9a:c6:f4:d8:
2a:b4:d0:5d:f3:c7:a9:1c:19:ae:ad:c9:66:76:cc:28:f6:e6:
07:88:44:75:3d:1e:bf:51:40:dd:f8:ab:99:c4:a8:f7:d7:84:
c8:92:db:0d:c8:91:f8:79:9e:a4:c2:f2:84:8f:0c:6f:fb:45:
12:ef:d3:3b:e3:5b:e2:44:c1:b1:2b:11:eb:4e:fa:54:85:cd:
26:e5:ec:17:8d:26:3a:a6:0f:69:1f:4b:dc:81:8c:1f:17:6a:
fd:46:43:44:84:0d:18:58:c1:90:4a:4b:4f:b3:91:b5:51:e7:
d8:15:28:76:e3:72:bd:67:fd:c5:7a:d9:4c:9a:42:6d:7a:3f:
68:23:04:63:e8:d3:c7:be:62:6c:76:5b:60:27:a5:fa:2b:ae:
d0:8d:25:f5:d3:07:f9:79:0a:e7:a7:c4:eb:ed:66:31:12:fe:
27:c5:ee:be:0c:b3:4c:7d:a6:8c:bd:5f:e0:4b:4c:c2:34:04:
c6:2d:9c:4e:e6:af:56:59:66:33:8f:5e:da:c1:bf:41:2b:88:
f9:03:9b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:17 2026 by rpki-client