Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: nw/NYfYjvzMrmdYHv7cRBVd8m/mP3WXKRjBC0zrq7hg=
Subject key identifier: D6:01:7F:73:67:DF:F6:21:EB:E6:D9:52:53:BD:8B:9F:6A:40:A1:BC
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 01A13FA7005D0D325D4ED2B8070D07A12882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 16FC
Signing time: Thu 15 Oct 2026 13:01:11 +0000
Manifest this update: Thu 15 Oct 2026 13:01:11 +0000
Manifest next update: Fri 16 Oct 2026 13:01:11 +0000
Files and hashes: 1: SILmdN_k0hAwwcd5aO58JpMMhcU.roa (hash: nQR9MafvgRfhU+4mU9GSk9xhrq7Cg3nhVrjZkbbiQrI=)
2: W6xDj92QB_yTt67MOz4LRRk37bc.roa (hash: LxBOm9LqiQOWvpCTWjabQmnHLwm7xyywKss1rcgcfNA=)
3: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: uqv84zq3lJ2eUFzN2/s0fw7okzdSHk4kUwOBLxLLgLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:00:5d:0d:32:5d:4e:d2:b8:07:0d:07:a1:28:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Oct 15 13:01:11 2026 GMT
Not After : Oct 16 13:01:11 2026 GMT
Subject: CN=d6017f7367dff621ebe6d95253bd8b9f6a40a1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:f0:f2:44:ea:ba:cf:3a:85:f0:b7:73:b1:
df:bd:3b:92:27:af:74:2a:d9:b3:61:76:a5:5b:76:
ba:6d:98:d8:16:9b:b4:ba:4b:3b:8a:08:80:71:18:
f4:ca:df:b8:59:8d:bb:2d:ce:e3:6b:2d:22:41:41:
94:db:a6:97:eb:76:07:81:4a:6b:dd:76:45:4f:aa:
46:c9:8a:ee:1d:5a:dc:a3:14:54:1d:19:6c:0c:43:
4f:58:31:18:fd:a4:9d:ff:0a:8d:78:68:90:e7:d2:
f4:73:df:32:ca:df:05:9e:71:d9:ac:cc:1e:bf:4a:
45:e1:12:c4:fc:39:7a:eb:bf:b4:d2:0b:65:dc:80:
a9:5f:51:32:3c:0d:b0:38:7c:84:5d:91:83:6d:b9:
ec:5e:9c:3a:36:bd:8b:58:6e:8d:c8:fd:c2:23:1c:
77:f6:78:be:73:4d:a3:ae:78:9d:5f:5e:c4:ec:72:
3d:ce:d3:a4:df:3f:83:ab:5e:c1:d9:cb:56:00:13:
8a:6e:72:be:59:17:b9:de:3a:d9:10:5b:09:19:a2:
40:24:22:2e:15:cd:7c:7e:f7:24:b5:37:95:74:17:
c7:c9:90:c1:7f:ba:80:9f:5c:c1:0e:89:ea:83:d6:
7a:fd:1d:41:41:3f:47:c6:79:8d:01:37:1a:0e:db:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:01:7F:73:67:DF:F6:21:EB:E6:D9:52:53:BD:8B:9F:6A:40:A1:BC
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5a:9f:94:5f:75:83:c6:f7:a0:93:7d:d9:77:b9:11:89:5d:
5d:cd:2c:87:80:4e:0a:df:50:36:fa:c6:5a:72:d6:41:fc:b5:
c5:18:82:f1:8e:46:0e:3b:1f:f5:88:7a:72:a8:f6:d8:ca:6d:
fe:19:e6:85:97:c4:4c:15:92:0b:43:c3:ed:db:02:0d:8d:15:
e1:fa:17:81:be:89:de:d7:1b:4a:41:f3:87:a2:ac:7f:f9:d0:
76:fe:f3:50:c7:4f:9c:22:b7:cb:d0:96:9d:0e:e1:3c:7f:18:
25:9a:5a:e2:d6:c3:fe:10:88:1a:54:ce:23:69:1f:03:80:6d:
de:26:fc:f9:d4:8f:4b:7d:6a:af:32:dd:75:3d:34:6e:b0:8d:
c4:fe:3c:56:c5:60:3a:71:fc:c3:24:a7:58:9f:8f:4c:2d:00:
aa:55:8c:a1:9d:54:3f:69:f8:53:a1:4f:35:07:47:37:d7:f1:
36:ea:72:3d:65:19:f6:32:2c:b6:51:61:24:7d:8d:aa:98:dd:
3c:15:db:cc:38:71:da:ef:5d:bd:f9:dd:8c:0b:ee:3a:35:d6:
55:67:22:8b:34:2d:b6:86:1b:3e:03:b0:44:73:87:68:a8:b7:
4d:54:6c:64:fb:6d:99:4f:18:5f:b7:99:11:85:d6:2e:f5:1b:
8d:c7:62:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:02:45 2026 by rpki-client