Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/b2bc26-6ea7-43ea-8f00-a87ebafc8da8/1/o6NtBBdRmLhWbKTHRZ46f73E5Hk.mft
File: o6NtBBdRmLhWbKTHRZ46f73E5Hk.mft (raw, json)
Hash identifier: ZB8wlVUiQ5FsRIHUFhcXxc+WaZYZWP4wnFxTyUiH4TM=
Subject key identifier: F9:25:B8:3D:3D:92:21:7A:AD:D5:3D:1B:88:83:4E:DC:0B:F7:AA:F9
Authority key identifier: A3:A3:6D:04:17:51:98:B8:56:6C:A4:C7:45:9E:3A:7F:BD:C4:E4:79
Certificate issuer: /CN=a3a36d04175198b8566ca4c7459e3a7fbdc4e479
Certificate serial: 01A1C2C1C65F05B4587281186E8709DFBD81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6NtBBdRmLhWbKTHRZ46f73E5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b2bc26-6ea7-43ea-8f00-a87ebafc8da8/1/o6NtBBdRmLhWbKTHRZ46f73E5Hk.mft
Manifest number: 51
Signing time: Tue 10 Nov 2026 00:00:41 +0000
Manifest this update: Tue 10 Nov 2026 00:00:41 +0000
Manifest next update: Wed 11 Nov 2026 00:00:41 +0000
Files and hashes: 1: 0uRH4kNn6UeFtNGsTuyPlB_L6vc.asa (hash: hSScpFFSIKB2811K+KF2bOume0RGpWRI0v8+4bbi1iE=)
2: o6NtBBdRmLhWbKTHRZ46f73E5Hk.crl (hash: VdJvlqUhCfM9Qy5s+zytSDL/RSs8+HcEzZ/bbv8yhOo=)
3: u-yQc4anbAE0o89xpV3wnoAvukA.roa (hash: tCZhN3FArTvOF+ssZVxrH8n2f4Pf4R0GdARtS0BFrXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b2bc26-6ea7-43ea-8f00-a87ebafc8da8/1/o6NtBBdRmLhWbKTHRZ46f73E5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b2bc26-6ea7-43ea-8f00-a87ebafc8da8/1/o6NtBBdRmLhWbKTHRZ46f73E5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6NtBBdRmLhWbKTHRZ46f73E5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:c1:c6:5f:05:b4:58:72:81:18:6e:87:09:df:bd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a36d04175198b8566ca4c7459e3a7fbdc4e479
Validity
Not Before: Nov 10 00:00:41 2026 GMT
Not After : Nov 11 00:00:41 2026 GMT
Subject: CN=f925b83d3d92217aadd53d1b88834edc0bf7aaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3d:57:be:d9:e8:2e:9d:58:04:7b:86:67:2f:
88:3e:1e:95:ec:0e:ce:59:0d:03:e5:19:10:59:57:
aa:c6:47:41:3a:4a:db:bd:0f:82:f6:b3:af:7e:26:
2e:10:80:8f:27:08:13:ba:55:fa:2b:18:fb:8f:6d:
4a:5c:78:ca:bf:0c:d9:eb:f6:49:44:0b:76:20:65:
ad:c3:6b:1c:bc:e8:ba:cc:2b:29:68:41:b4:0b:ac:
b4:26:27:a7:70:ae:78:9a:7f:16:96:bb:44:ef:ce:
35:88:86:3e:88:5b:56:67:b2:a3:f3:51:91:e6:68:
b0:a6:ac:15:ec:d1:4c:ee:d7:e7:94:74:cc:90:ee:
5c:59:e6:14:42:0e:5e:31:e8:f9:fe:32:25:15:5d:
23:21:e6:ef:6b:15:a9:2a:f9:2f:4e:c6:2c:13:be:
b4:2e:50:a3:a7:a4:a6:2c:f4:20:0b:c8:eb:99:aa:
2d:12:60:38:44:fd:42:b0:5a:c8:d6:c6:2d:36:00:
39:cc:13:d6:ee:4c:1c:29:36:12:08:f0:4f:16:e4:
b6:80:6a:90:01:03:1d:91:6c:c7:a7:23:45:df:6f:
c7:9d:28:d9:31:53:15:e5:9e:b3:a0:66:75:6f:b2:
2e:a8:8d:c3:ef:29:23:e3:c8:0f:60:4c:60:d9:bd:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:25:B8:3D:3D:92:21:7A:AD:D5:3D:1B:88:83:4E:DC:0B:F7:AA:F9
X509v3 Authority Key Identifier:
keyid:A3:A3:6D:04:17:51:98:B8:56:6C:A4:C7:45:9E:3A:7F:BD:C4:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6NtBBdRmLhWbKTHRZ46f73E5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b2bc26-6ea7-43ea-8f00-a87ebafc8da8/1/o6NtBBdRmLhWbKTHRZ46f73E5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b2bc26-6ea7-43ea-8f00-a87ebafc8da8/1/o6NtBBdRmLhWbKTHRZ46f73E5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:34:92:6d:9c:dd:2f:27:6f:60:58:78:47:05:23:b6:66:2c:
5d:04:6c:f3:db:e6:a5:ad:29:b4:aa:38:d9:5b:22:92:12:6c:
5d:2e:20:fc:7b:92:8a:0a:6b:9d:91:79:c8:29:c7:1a:81:66:
e3:21:8d:d2:c0:65:05:15:19:19:2a:f5:49:75:5a:24:d2:a7:
7f:c5:4d:ab:d3:5d:f1:6f:f2:f0:40:ad:1c:98:ca:63:bb:ee:
23:eb:b7:fd:d1:0e:ff:bc:a0:f7:0a:07:e1:35:78:90:a5:b1:
42:8e:37:59:6e:88:82:5f:71:3b:ed:5d:bf:c5:32:53:aa:19:
7d:8c:45:5c:36:dc:5b:1f:9d:f1:da:c9:67:b3:ee:1f:0f:c7:
6b:57:61:dd:a1:ae:e5:bb:98:1c:49:71:d8:3d:e9:f6:5b:ec:
e7:b7:73:f9:1f:24:79:c6:90:47:4c:22:e7:09:6d:d4:d7:a7:
86:32:2d:d9:ba:7e:84:eb:b3:26:48:10:ba:82:1b:83:57:a7:
0a:bd:0b:2c:0a:4f:9f:48:b1:e3:af:78:5a:89:5b:b0:9d:72:
1c:f2:4c:37:99:c1:fd:ad:95:71:32:f5:de:12:71:b9:0f:2e:
83:5c:27:83:4d:d0:73:14:0b:d0:20:e1:34:62:4e:cb:a7:e0:
6b:6a:06:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:07:38 2026 by rpki-client