Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: IWI7l3SPdPM+/mfohO0iGpeJLOwyvKnaT6UGOGCPLxg=
Subject key identifier: CA:73:86:42:63:19:77:CB:2D:1D:46:3F:D6:6F:B9:E8:7C:DD:04:00
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 01A1E095B4BA2235A8B40316107F9571B078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 1B00
Signing time: Sun 15 Nov 2026 19:01:09 +0000
Manifest this update: Sun 15 Nov 2026 19:01:09 +0000
Manifest next update: Mon 16 Nov 2026 19:01:09 +0000
Files and hashes: 1: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: W7NMq/PjINHSVG6KQepp8ckp/BWvYMjGCi5wfkTqiVc=)
2: qD-udMWogv1RWmmNx555UrdPqVk.roa (hash: tt02ErUs19MVdE/pg4jrYCoKExmW/kUQzgxB8MltUrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:95:b4:ba:22:35:a8:b4:03:16:10:7f:95:71:b0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Nov 15 19:01:09 2026 GMT
Not After : Nov 16 19:01:09 2026 GMT
Subject: CN=ca738642631977cb2d1d463fd66fb9e87cdd0400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:95:02:cc:d2:7f:56:d3:ef:32:10:80:fd:
ef:33:ac:6c:6d:ff:ba:9b:e0:2f:3c:69:44:fd:3b:
9b:ca:f7:2f:a4:09:1a:19:73:ee:cb:85:15:be:cc:
ad:0b:76:07:86:dc:9a:15:ef:66:44:9d:45:6f:55:
3b:8b:cd:8b:da:15:97:5a:9e:1d:86:e4:b6:a3:38:
92:1c:e6:83:a3:b9:2b:47:41:c0:33:74:37:3b:3f:
03:98:a9:9f:9e:2a:28:29:ad:1e:c8:2e:9d:e2:af:
b7:a1:b3:57:ea:38:94:71:ea:f8:40:90:03:43:fb:
70:27:22:99:89:e1:58:ca:f7:4e:e7:c1:19:5b:ed:
d8:24:93:49:3e:56:7e:c4:0a:67:f6:8a:dd:cf:61:
0c:61:86:f3:07:e5:c7:68:7d:a7:15:78:92:06:1a:
cb:98:11:33:6e:e1:0a:2a:7c:9e:ee:e6:32:9b:21:
de:3b:1f:c5:18:b3:54:59:cf:83:eb:20:a5:9a:11:
b4:30:06:7c:8f:ec:00:2a:d7:92:49:9e:2b:39:1e:
6f:b2:7f:96:b2:08:3b:d7:13:59:ca:a1:e0:f3:b5:
02:c9:2a:58:d4:74:40:d7:42:86:22:bf:97:80:cc:
d4:b6:4b:d6:a1:b6:30:be:b0:85:04:06:b9:0f:b5:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:73:86:42:63:19:77:CB:2D:1D:46:3F:D6:6F:B9:E8:7C:DD:04:00
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d8:9f:86:e1:4b:1f:49:7e:c3:24:75:1d:fe:c0:cd:17:8d:
19:e4:a0:9d:73:27:5d:a5:6a:dd:60:24:63:e2:fb:df:6a:b0:
7e:0d:f1:e9:14:e0:61:ae:07:fd:bc:56:e0:65:ef:0d:18:4c:
79:17:22:b8:45:2c:53:1a:f9:69:78:85:d6:d2:76:c0:e8:08:
7a:35:8f:95:26:01:8c:1b:c6:80:d2:11:05:dd:9e:4f:5a:a9:
ab:65:5d:72:10:1c:fd:c7:7a:0c:63:53:39:90:91:31:d5:da:
a5:c2:fd:a7:7d:c9:e8:d4:f3:40:e0:47:22:77:af:1b:80:e7:
94:b7:ed:aa:c7:c9:97:9d:d8:15:88:18:39:c5:92:de:a8:11:
00:ba:65:cd:60:f2:88:bf:b0:6f:17:15:2c:fe:83:0e:e8:9d:
d1:01:5d:8d:c8:2f:5d:f1:56:1d:27:f3:80:6a:57:b4:b6:0a:
26:2a:ad:40:ac:11:1d:23:fb:c5:a9:33:5f:59:c7:73:48:b8:
92:5c:d9:81:33:8a:bb:32:b5:39:fe:ef:94:92:0a:2b:ed:e2:
67:b7:96:dc:83:73:17:38:54:94:7c:72:60:72:52:03:35:21:
b8:67:d2:90:14:3e:fb:fa:41:2f:6a:89:c0:e3:91:0e:6f:87:
f2:e4:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:58:33 2026 by rpki-client