Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: qAm5RrZVc8MQ7XsMMuQ8JvQAaFiyLJsHUd/BJ58jAp0=
Subject key identifier: 71:5A:BF:EA:9D:5B:07:C1:F2:11:E4:14:E4:81:94:3F:51:C0:7C:27
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 01A17DAA1806C0DC534F8A09A3B4B3C100AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 14:01:01 +0000
Manifest this update: Tue 27 Oct 2026 14:01:01 +0000
Manifest next update: Wed 28 Oct 2026 14:01:01 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: 7u3a7XnVwyOAdvw1Az1Dhx4s1KAiCJCHJIbmvaAUd9A=)
2: v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa (hash: +Ugur4Zx8N+utcUH4v+QIfdsbIfqtrKkMiSiyk7i/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:18:06:c0:dc:53:4f:8a:09:a3:b4:b3:c1:00:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Oct 27 14:01:01 2026 GMT
Not After : Oct 28 14:01:01 2026 GMT
Subject: CN=715abfea9d5b07c1f211e414e481943f51c07c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:74:fd:f0:99:a4:a9:64:d8:6c:16:b5:02:83:
57:3a:c3:f3:bc:38:e4:f2:8e:7e:c5:3f:69:73:be:
7b:c9:86:bf:8e:a0:4a:5e:f0:80:ba:63:f7:bb:0f:
27:71:bf:ed:34:e8:a6:af:ef:c0:a4:ac:d7:1c:c8:
5f:d6:e2:e0:bd:b7:4b:5d:34:ac:94:df:43:6e:a1:
8f:8b:1d:23:53:fc:a6:88:7d:81:d2:30:87:2d:91:
d5:ef:3a:3a:00:6d:80:d8:74:de:2f:40:1e:49:d8:
64:0f:92:c4:cb:2a:13:ee:86:b5:fd:44:c2:c7:15:
e2:44:fc:19:66:2f:19:b4:b1:1f:36:5c:11:6a:a7:
13:2e:3d:86:54:f2:9d:09:72:d4:b7:80:88:f4:f8:
e6:e8:d4:b5:b2:96:40:7c:71:d8:c2:85:79:ac:5e:
87:5d:df:49:8d:f9:0f:34:3f:96:b9:2d:00:c9:d7:
48:73:a3:8f:66:72:c9:0b:47:6f:df:7e:a6:7d:d3:
8f:c1:2f:8e:1e:4a:52:1c:92:d1:4f:b2:9a:d0:ab:
a6:da:ae:f3:7f:9b:45:32:b3:2b:7d:37:14:86:89:
5f:0a:91:54:eb:f2:a4:78:0b:66:2c:a3:d5:6a:9d:
ab:6b:ff:be:71:2b:06:d1:bd:d6:ef:14:d9:0e:92:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5A:BF:EA:9D:5B:07:C1:F2:11:E4:14:E4:81:94:3F:51:C0:7C:27
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d3:e7:64:84:94:d5:d6:3b:cb:f9:c2:58:c7:13:c5:52:09:
b5:5b:13:54:33:86:e8:00:93:a5:22:46:16:1f:eb:9b:ef:43:
20:c8:59:d9:7f:87:e2:c7:c3:3a:fb:8c:9f:70:63:bb:ae:d9:
66:46:5f:50:ba:19:d0:15:e6:3d:00:74:01:f3:f5:87:f2:0e:
2a:aa:ed:67:0d:93:d7:50:53:e0:cd:c5:15:eb:46:6a:39:9d:
9b:9c:f4:0d:bf:6b:69:81:40:38:11:1a:73:8f:25:29:da:22:
a4:b4:c7:af:35:8d:51:4c:8c:a2:1d:5b:b5:51:55:8b:4a:a3:
45:0d:23:dc:15:84:d6:1b:d0:05:05:63:d4:03:35:f7:d5:2d:
88:b4:b4:93:f3:42:f4:1f:71:bc:2c:69:e3:91:f3:a6:86:36:
d4:ee:9e:47:ac:ff:ad:44:f8:b8:8e:80:50:4c:67:7c:00:f9:
db:e1:d8:19:0e:cb:33:6b:ea:4d:d9:87:58:b0:fb:c1:c0:96:
e6:82:f8:62:35:da:74:5c:35:18:f0:f3:f0:1e:3f:f6:c0:d3:
4d:aa:ea:a3:61:13:17:a1:9a:81:bf:aa:a5:24:f1:cc:0f:36:
14:1f:2e:bc:23:9c:69:18:94:66:22:07:e5:ee:fe:5e:33:c7:
3b:d9:8f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:29:43 2026 by rpki-client