Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File: o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier: yG7h0MQXpnCzOJ//MtAZ5+7E0Sk+6HbGaDihCJnNhx0=
Subject key identifier: 13:04:44:C8:A9:A1:05:73:EB:66:A9:EB:85:33:6C:28:8B:28:2A:8E
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 01A1336BCB3DFBD1E9C798A2125E1E76D58B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number: 1AA3
Signing time: Tue 13 Oct 2026 04:01:04 +0000
Manifest this update: Tue 13 Oct 2026 04:01:04 +0000
Manifest next update: Wed 14 Oct 2026 04:01:04 +0000
Files and hashes: 1: cqrDqsllU4angXR7ZhiixighcHI.roa (hash: fhOWug7UyzusWzCmpcbK8cX3/PPspaEdcPiG9KdZ6F4=)
2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: Wyt0iF1zpFjZWn0zvcmnZ1X3ef7Z96W4BmaoJtgzV84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:6b:cb:3d:fb:d1:e9:c7:98:a2:12:5e:1e:76:d5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Oct 13 04:01:04 2026 GMT
Not After : Oct 14 04:01:04 2026 GMT
Subject: CN=130444c8a9a10573eb66a9eb85336c288b282a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:21:b0:28:9c:f2:3f:fd:3a:08:82:09:5a:
d7:09:2a:7e:3f:ad:2e:7f:c0:c2:3b:1a:5c:78:0b:
f6:8e:4d:53:da:89:96:e3:23:ac:54:d0:a9:a0:9d:
99:2a:79:55:38:81:36:ec:28:22:3a:27:8b:fd:a3:
db:5a:63:b2:c6:ac:bc:2b:ac:b4:84:48:3f:c6:43:
34:2e:d6:0f:12:b5:b5:79:87:c2:0a:ac:fd:ab:5b:
a8:47:be:e1:c9:4a:75:83:63:22:c6:60:95:52:d8:
d2:32:41:f5:d1:17:2a:82:b8:f9:ef:2d:cf:19:15:
26:e3:aa:e3:83:19:8e:4b:71:ba:37:1f:98:65:fa:
4f:27:a6:a8:2c:c7:4a:93:1c:7e:dd:84:14:ab:03:
ae:03:a1:14:45:42:42:09:03:39:64:d9:ef:a9:83:
6f:2d:9a:6f:56:5d:a6:8a:cb:8e:99:ef:40:d4:e3:
c8:59:90:76:f5:b8:89:a9:dd:ce:a6:3c:fa:25:72:
45:0d:42:95:22:93:e4:f3:d4:8b:21:bd:d1:3a:fe:
22:09:c3:b9:73:8f:72:c1:e2:40:c8:b5:ca:e4:3a:
18:12:b0:da:0d:91:14:e6:ab:c4:99:3c:c4:72:96:
71:5c:e6:9e:3d:5a:1a:f9:e4:01:90:5f:c1:e0:2e:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:44:C8:A9:A1:05:73:EB:66:A9:EB:85:33:6C:28:8B:28:2A:8E
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:10:77:a7:7c:24:4e:5d:2d:02:e1:c8:96:63:35:ab:61:d2:
25:1a:f9:1d:56:64:e2:ba:74:a3:e2:3c:e6:1f:f4:24:ea:6f:
60:83:50:ff:43:ce:04:6e:a2:c5:b9:05:7a:d5:22:3d:32:cc:
bc:e6:71:82:f4:71:33:be:88:2d:e7:9d:43:19:57:54:df:d2:
bb:85:f2:85:e8:48:33:7d:13:f4:9a:ba:a8:2a:83:03:ee:59:
1c:40:49:50:9d:02:b6:ec:95:fa:1c:c4:b8:b3:09:a4:3f:e7:
a4:b6:97:74:8e:3d:82:e5:2b:64:c3:21:aa:ea:15:93:39:7a:
ec:11:43:86:de:d5:cc:8e:ad:8a:29:89:eb:44:bb:0e:7f:8f:
1d:c5:c4:ee:28:6e:4f:69:c8:3b:27:5a:76:91:01:a5:d5:f4:
d2:4b:75:23:d1:96:53:76:fd:8e:39:b5:1b:ea:54:fc:53:04:
1d:8f:58:4b:cc:6f:f0:20:01:00:f8:1e:b8:31:7e:d3:2a:2c:
f6:54:4f:d2:f4:f7:8c:4c:bd:b0:82:79:fe:e9:3c:49:da:27:
a3:e1:59:63:fd:5d:12:24:02:15:e4:8e:6d:43:9c:1d:c7:1c:
42:94:5a:4a:69:62:e4:a5:07:f1:ce:0a:21:6f:c8:be:3d:15:
99:84:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:04:30 2026 by rpki-client