Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
File: O618kdgYkaWUfX4UpmhJEgY6Xdk.mft (raw, json)
Hash identifier: nJGzdkI2a16Tmm7cDLtysFDjFnaVYQHZi5o+7MFwglU=
Subject key identifier: 8E:9E:02:9A:F1:BC:3B:0B:C5:53:0A:E9:78:2F:35:12:87:40:73:AE
Authority key identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
Certificate issuer: /CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Certificate serial: 01A0F0E83958B2CCB55BC7EEC91FD86F5AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
Manifest number: 02E0
Signing time: Wed 30 Sep 2026 06:02:25 +0000
Manifest this update: Wed 30 Sep 2026 06:02:25 +0000
Manifest next update: Thu 01 Oct 2026 06:02:25 +0000
Files and hashes: 1: GPjTkixHgXgtIDNDsyb7i-Nlleo.roa (hash: 0MyLo6ZK/tC1RGqYqyZYKLVLfr7W+2VBizLdr/A1dio=)
2: O618kdgYkaWUfX4UpmhJEgY6Xdk.crl (hash: 7WNlUdZtoGr5Ayay9pyloZGv6ztIx2EGCFyN74su+hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e8:39:58:b2:cc:b5:5b:c7:ee:c9:1f:d8:6f:5a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Validity
Not Before: Sep 30 06:02:25 2026 GMT
Not After : Oct 1 06:02:25 2026 GMT
Subject: CN=8e9e029af1bc3b0bc5530ae9782f3512874073ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:78:84:c5:ec:56:36:2b:57:0a:bb:72:1f:
af:82:9f:53:1c:ef:e4:24:18:13:9b:7a:0d:4b:b3:
f1:1e:22:d2:83:41:77:ae:96:53:1b:4c:8a:7a:1d:
fe:39:35:26:16:b1:cd:8e:9d:e4:58:67:d7:b0:66:
6f:f9:e1:76:0a:26:aa:e8:0b:6b:19:81:2c:4e:ab:
32:88:04:3f:ad:34:47:49:94:78:4c:96:0f:7c:fb:
cb:aa:e1:ab:d3:fe:93:63:52:19:b2:a5:3a:24:16:
25:52:21:5b:3d:f3:3c:30:51:0c:c2:88:af:26:58:
e0:61:33:26:9d:68:77:8f:3d:23:b9:be:50:b4:dc:
0a:31:03:c0:5d:a6:94:92:f4:0a:31:91:7d:e8:f2:
c1:93:7a:80:ba:87:f6:f9:13:00:a5:71:6b:09:77:
55:ac:40:4c:a3:7d:f9:18:d3:3f:83:e8:04:ed:38:
dc:85:3c:fd:5d:61:0d:4b:93:f6:68:6f:86:b4:d6:
25:6b:f2:03:dd:f2:f5:9b:c3:03:c8:78:10:56:95:
bf:9a:fa:5b:93:96:57:d7:d2:e4:c6:9e:0d:b3:26:
2f:c5:4c:df:df:01:5d:e3:de:5d:ea:ff:18:ea:5d:
b1:41:f9:84:a8:75:a4:64:f8:e8:c4:c9:04:a7:0f:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9E:02:9A:F1:BC:3B:0B:C5:53:0A:E9:78:2F:35:12:87:40:73:AE
X509v3 Authority Key Identifier:
keyid:3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8f:1d:08:8f:ba:37:e1:69:d6:3c:2e:d6:76:de:5a:56:47:
7a:e2:18:ab:eb:2e:17:6b:a0:91:c8:de:f0:9a:75:0a:3b:92:
35:fb:45:2e:c2:8b:49:08:4c:94:e0:28:d9:f7:2d:4f:81:12:
f8:58:ed:51:46:80:dd:08:e4:c3:e3:2e:84:de:46:33:55:09:
99:38:49:9d:55:a8:46:6e:4b:b0:a7:87:13:ca:55:90:9c:5b:
ac:c1:8c:f8:c9:1d:e9:2c:71:3f:0a:c3:8f:45:76:f6:3b:2a:
bf:ee:6c:91:35:db:f0:e4:62:52:12:82:b4:28:d5:bf:9f:c5:
85:9f:88:91:c1:cf:91:7f:f4:c2:4f:d4:ec:17:9c:72:52:f6:
49:93:21:d3:d6:c5:9a:76:fa:d6:f6:07:5a:33:c0:04:c2:2e:
74:f5:c4:5c:d7:7d:c0:79:24:53:1e:ee:54:92:7b:f0:eb:3c:
1e:35:30:95:60:98:64:d2:b6:3c:b3:60:e8:f8:cb:52:a1:c5:
88:ce:24:47:b4:7d:17:f0:d3:4e:52:60:f6:b2:b5:30:b0:ec:
58:88:6a:33:2c:eb:d2:7f:a9:23:b0:08:47:38:a5:ba:e5:05:
89:79:70:43:12:04:0e:92:3b:dc:49:d7:32:85:9e:44:54:58:
44:1d:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 16:38:28 2026 by rpki-client