Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: 4uN79tLSExWXeMUlWMQZYlW/tbw+ES378HtgqZyQaqU=
Subject key identifier: 8D:6A:CF:5C:CA:97:FE:A4:67:51:F6:1E:80:F3:E9:86:EF:B5:7A:25
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 01A183AD1AECC9F8EC359BB6C4908517D58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 1447
Signing time: Wed 28 Oct 2026 18:02:02 +0000
Manifest this update: Wed 28 Oct 2026 18:02:02 +0000
Manifest next update: Thu 29 Oct 2026 18:02:02 +0000
Files and hashes: 1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: 79OZzY7YPq5ItAY3IvlGPT3xLCJKgTujfBvR1YoAfSY=)
2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ad:1a:ec:c9:f8:ec:35:9b:b6:c4:90:85:17:d5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Oct 28 18:02:02 2026 GMT
Not After : Oct 29 18:02:02 2026 GMT
Subject: CN=8d6acf5cca97fea46751f61e80f3e986efb57a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:b8:2a:34:b0:e3:ff:0b:a1:27:84:35:0a:
db:7e:9e:4f:86:0e:cf:35:ff:49:73:33:f3:73:97:
19:b2:e3:c4:8c:3e:90:b3:56:c5:8f:98:42:4d:a7:
db:40:76:af:04:4c:2d:cb:fa:82:a4:2b:e5:b2:f2:
bf:0a:6e:ab:bb:5a:e4:6a:76:4a:33:eb:63:ea:f5:
75:e7:3a:2c:e5:57:d4:d4:25:8a:01:fe:49:16:61:
3d:6a:7b:0f:a5:c7:53:6f:a8:f4:a2:51:b2:6b:f5:
8a:d5:ed:4f:cc:4f:fe:b0:85:bc:be:17:64:ac:58:
16:4a:b8:58:f9:d7:03:52:f5:39:16:72:a0:75:df:
08:7e:44:30:f8:b2:31:d8:6d:5b:57:13:12:63:8f:
8a:6d:19:24:3c:45:7d:30:b4:ee:a3:e0:56:74:d0:
e8:05:a7:5b:a6:2f:21:38:5f:9c:b9:e1:f2:0e:a1:
50:6d:c7:de:da:f0:63:88:01:ec:f7:b5:5f:17:fc:
ef:22:7f:a4:93:a5:76:c4:19:ef:5d:08:0b:4c:71:
11:ba:b9:55:b7:46:42:cd:1e:f1:f3:b5:eb:9d:b5:
df:9d:b2:40:e9:08:85:f4:44:d6:5a:30:ea:99:df:
07:a9:a3:0d:64:75:3c:aa:4f:12:ef:76:2e:1f:c3:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:CF:5C:CA:97:FE:A4:67:51:F6:1E:80:F3:E9:86:EF:B5:7A:25
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:44:3a:a6:f4:5a:29:a0:db:0f:b1:1a:04:07:d1:aa:0c:8f:
21:36:e0:9f:59:15:0e:ed:69:28:a0:8a:19:79:78:14:92:db:
bb:55:9a:6f:0f:74:5d:62:fd:0c:5e:db:d1:f7:c9:95:4c:54:
2e:d2:b6:91:bf:80:9b:43:c1:9e:2c:d1:d7:0a:dd:85:64:3d:
e3:6b:31:36:a4:8b:04:2c:3b:42:aa:9e:0f:c2:11:41:ee:28:
5a:e8:8f:67:39:18:e9:ef:06:c8:ad:69:dd:02:8b:f9:13:8b:
04:d2:81:ab:3d:3b:9d:98:07:88:f3:91:7a:d8:2d:88:72:82:
8e:1d:40:a2:b6:72:5a:eb:04:05:2e:6d:24:ae:0e:1e:3c:4c:
e8:7a:f5:3a:38:d9:b9:52:00:8a:20:13:87:97:84:ad:ab:62:
0d:55:e7:e7:c1:5b:cf:44:2f:b0:73:0b:3b:e7:4b:95:93:3f:
33:e0:f0:bc:34:bb:6a:0f:e7:fa:37:1f:31:de:06:33:29:5f:
10:e7:67:2e:4a:b4:29:45:aa:73:a7:47:1e:66:1b:48:39:c5:
61:78:74:de:cb:f6:6f:33:bd:14:44:68:67:85:b9:93:e0:1f:
67:c4:0a:08:1a:3a:39:52:70:a7:59:c9:ff:1f:f5:da:09:12:
98:a3:8e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:47 2026 by rpki-client