Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: jsK/d6tISEB1ytzJCWXSi4AHo4VUFassl3tOjPLVWgA=
Subject key identifier: F9:09:22:43:2C:E4:00:1A:57:D4:12:3F:71:6F:ED:BD:13:BD:2E:43
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 01A133D97E343C4E5FFFEA4697DB209F9D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 1A1E
Signing time: Tue 13 Oct 2026 06:00:53 +0000
Manifest this update: Tue 13 Oct 2026 06:00:53 +0000
Manifest next update: Wed 14 Oct 2026 06:00:53 +0000
Files and hashes: 1: 2MsPFamPffku1ttx9gaJe1ffa6Y.roa (hash: DHSbfM3R76vdNxci0L/Qjop0BLeabp3SpJ5q1Jd300M=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: yh4ueZsMcUXaPQZfqsNZi5zcFmu0il2vY6ieTp1OwIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:d9:7e:34:3c:4e:5f:ff:ea:46:97:db:20:9f:9d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Oct 13 06:00:53 2026 GMT
Not After : Oct 14 06:00:53 2026 GMT
Subject: CN=f90922432ce4001a57d4123f716fedbd13bd2e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:33:df:89:99:58:04:ea:33:dd:86:68:2f:
5b:8c:9a:b4:48:c9:46:9a:2e:9a:82:d0:75:e2:4a:
77:9a:47:86:31:0b:48:87:e1:2b:88:eb:c3:35:bf:
2c:09:d9:81:87:18:38:01:b2:92:ae:0e:2c:0a:28:
f6:07:d1:22:c7:7f:0b:7b:f6:2c:71:d7:83:a4:2c:
b5:1d:1a:9f:7c:ba:e0:3d:e2:72:3a:5f:bc:44:0d:
83:96:eb:92:a5:9c:15:c7:44:60:aa:cb:94:89:44:
3d:95:91:8d:12:99:ce:86:a1:0a:7d:01:f8:f6:5f:
dc:c3:94:b4:d1:29:28:47:f6:d6:25:7e:31:ae:6e:
4a:86:d5:6b:bc:19:56:16:4f:a6:62:4d:60:59:40:
0b:5e:40:13:07:3d:b5:06:70:0d:17:2a:a9:11:60:
8c:5b:e0:1c:d8:10:74:ac:8d:9a:26:ae:b7:4b:70:
77:51:c1:a5:79:62:0c:a7:20:67:53:61:c5:09:b0:
3e:1d:de:b5:a8:d5:0f:d7:5e:60:46:82:59:6c:eb:
af:4b:2d:f0:19:c2:26:43:b3:c8:8a:f4:d2:db:fa:
01:76:3f:e2:48:31:82:23:5f:e2:87:7f:d9:1c:6d:
41:2f:e1:b4:93:49:1c:b8:17:5b:13:b4:ff:f1:a2:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:22:43:2C:E4:00:1A:57:D4:12:3F:71:6F:ED:BD:13:BD:2E:43
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:97:cf:9f:86:8f:e4:6d:00:65:14:b3:ee:5f:54:cc:94:3f:
d9:88:48:69:4e:a6:31:c8:5e:6d:d9:cf:8b:f6:6d:9a:de:36:
1b:96:9b:ff:36:31:97:ad:00:4e:d6:d5:29:4f:ff:3a:7f:db:
e5:54:ca:14:a1:39:d2:e1:d4:ae:c2:4d:36:bd:59:31:f7:7f:
3d:bf:8c:47:66:0f:68:c3:98:f2:bf:45:b6:70:07:11:b7:d5:
0e:06:ce:8d:32:e9:82:a2:f5:93:ed:4b:31:fb:56:0a:29:b9:
af:a3:3e:94:8c:43:d5:1c:53:cb:83:7e:f2:fb:b0:29:a3:f5:
38:ab:27:b4:4f:7e:a6:23:9a:7c:28:a7:f3:78:dc:bc:31:79:
23:42:11:17:4c:c5:65:51:6d:ac:99:4f:3d:e7:66:50:04:5f:
7e:74:3e:09:fa:f0:9a:10:89:0e:e4:cc:ce:60:51:59:db:a5:
77:69:1d:98:0a:a3:47:58:90:97:b3:09:84:98:5d:bc:65:fe:
b8:c3:50:82:a5:d4:3b:ec:31:2a:4e:cf:33:ec:da:c6:64:44:
fb:c9:02:ff:af:1d:c0:eb:99:fc:30:8d:94:79:38:f0:cf:24:
84:9f:f0:8e:f1:bf:ec:7f:da:f1:4e:e8:5c:45:1d:4d:a7:08:
08:db:06:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:24:27 2026 by rpki-client