Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: Qydb7Wg++lcIiDdiAlf5nrTaQBEl/jOLCMVaYW6RXOQ=
Subject key identifier: EE:89:52:65:18:F7:68:8D:4D:33:23:F2:AA:0E:C1:2B:64:E9:E3:FB
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 01A0CE5AF017437B763514152528D99D3A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 13:01:01 +0000
Manifest this update: Wed 23 Sep 2026 13:01:01 +0000
Manifest next update: Thu 24 Sep 2026 13:01:01 +0000
Files and hashes: 1: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: noBXjwTVK8UqRxPru7EQQ5IW2FFBatDKZlBe4nKu1xk=)
2: sbWj3cDEvspo2pzFM90qmBN7XGY.roa (hash: ZCuFftw5Wl2QKtDaCFVmcabJrAkBRibR6g/1SyLs2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:f0:17:43:7b:76:35:14:15:25:28:d9:9d:3a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Sep 23 13:01:01 2026 GMT
Not After : Sep 24 13:01:01 2026 GMT
Subject: CN=ee89526518f7688d4d3323f2aa0ec12b64e9e3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a4:a1:46:7f:62:c1:ca:4c:65:2e:cd:ad:70:
42:80:20:cc:79:eb:5a:7d:27:8a:6a:17:f6:a8:fb:
a0:38:96:53:88:a4:b9:69:06:6d:dd:6c:53:bd:32:
9e:de:62:37:68:f9:69:ee:db:e8:13:85:98:50:02:
57:b9:f4:4c:45:fb:e6:79:fc:c6:74:3c:15:b2:d8:
6d:cd:38:df:60:43:ff:76:b0:f2:3b:13:09:85:74:
e7:fb:37:7b:b5:b4:31:af:e4:fd:a9:e2:33:7c:02:
33:49:e7:8f:e6:29:e8:05:05:9b:36:6a:0d:4c:6e:
91:d2:35:a1:a0:25:fe:ba:7c:60:19:65:ca:1b:6f:
01:a6:69:0e:64:dc:90:f0:11:34:34:d1:4e:ba:c6:
5c:d9:58:a9:db:f4:b6:81:ad:d9:4b:06:9d:cd:cf:
ab:a0:b6:4e:72:59:87:bc:28:e6:22:2e:fb:16:3d:
18:a1:0f:4d:e4:5c:5b:ad:a1:b5:62:df:31:72:15:
52:0c:19:f4:a5:57:c7:18:c1:58:8a:7d:34:22:aa:
39:c1:60:c8:9e:79:f8:e9:94:ba:1c:d7:de:d0:c4:
65:30:a7:cc:fe:f8:5e:cb:26:69:e0:01:89:1f:b3:
4d:56:f8:94:2b:61:66:58:5c:80:7c:30:82:58:ad:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:89:52:65:18:F7:68:8D:4D:33:23:F2:AA:0E:C1:2B:64:E9:E3:FB
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:30:87:9c:fb:57:cd:ef:91:f5:35:ee:99:95:90:9d:86:6e:
a5:37:9e:27:9a:50:ef:3e:b6:79:f9:18:d2:96:bc:ee:ed:a4:
ba:86:0c:f1:bc:86:4a:41:af:07:65:85:cc:e2:a7:a2:17:24:
55:51:ae:6b:64:71:95:19:d9:1f:e5:ae:ce:41:48:b1:6d:9a:
4c:69:bb:05:d7:ae:36:c8:3c:7f:ef:77:9a:8d:f8:8f:63:5d:
2f:35:c7:e0:dc:10:92:7d:c0:e2:c0:a8:95:48:d7:f1:3a:80:
60:c7:4e:5d:e0:51:4b:87:95:c5:d4:81:e6:94:da:1e:d7:20:
a1:b0:83:59:6e:c2:e3:78:95:d6:f5:29:4f:55:73:38:7d:84:
3f:bb:d2:b4:58:aa:fe:97:4d:1b:d0:5e:24:58:2d:ab:86:4d:
ff:2d:45:7f:9b:2e:5e:1b:b8:15:7d:70:48:b6:d2:11:23:75:
af:4e:8c:62:cd:f1:b2:ef:5d:18:db:34:af:a1:90:1a:f6:72:
31:65:92:e7:44:c8:4b:40:b2:5c:a4:ef:c9:ef:e3:02:24:74:
bd:99:88:cc:b6:30:9c:4b:51:fd:26:31:2a:8d:d7:fb:0e:09:
b4:9c:c1:45:67:2f:b3:57:46:7b:8b:ef:27:4a:ce:cb:ee:20:
5d:73:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:08:48 2026 by rpki-client