Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: gSLNxNQo3gUWBDE9SdDRyA/iTZpnKoQLMi9hvqbQeJk=
Subject key identifier: AB:25:5B:5F:E7:32:21:99:05:05:3B:FF:89:2B:7D:5F:D9:DC:1F:C5
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 01A0DBA9DDC1E34227DE11FFE1A4562E00B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0FFE
Signing time: Sat 26 Sep 2026 03:02:17 +0000
Manifest this update: Sat 26 Sep 2026 03:02:17 +0000
Manifest next update: Sun 27 Sep 2026 03:02:17 +0000
Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: 61BzO7RvhtYb/nq60ONrly33rf4h5VLv1dbk0ljVyCM=)
2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=)
3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=)
4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:dd:c1:e3:42:27:de:11:ff:e1:a4:56:2e:00:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Sep 26 03:02:17 2026 GMT
Not After : Sep 27 03:02:17 2026 GMT
Subject: CN=ab255b5fe732219905053bff892b7d5fd9dc1fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:3d:31:9d:36:60:b3:c4:d7:2f:4c:61:ab:
94:ff:61:76:89:c2:7a:21:a9:d9:a4:af:8f:13:2d:
9c:e5:73:1b:e2:15:0c:b5:ea:42:c6:0e:15:0d:c1:
53:e1:d9:de:e8:10:09:27:ca:a6:f9:af:85:a2:f3:
30:c9:12:ff:8b:97:64:b0:56:97:af:c8:5e:e9:af:
8f:98:60:df:72:74:44:e9:71:fd:73:45:da:65:8a:
98:b1:e2:f4:48:c5:84:b8:dc:81:43:e6:d5:bd:a1:
f8:e6:22:55:66:32:bf:53:e8:09:fa:78:22:c6:01:
32:1b:61:88:b1:70:e8:5e:2c:86:51:1b:41:0e:84:
b4:e7:ad:d3:a4:19:b4:7b:72:55:6e:90:d0:88:f8:
99:d4:9e:25:a2:37:b0:a7:9d:07:19:02:ff:f2:01:
4d:ed:64:f2:8f:dd:13:89:09:a9:fd:c7:0d:1d:5b:
b5:29:84:55:38:c7:a2:c8:99:71:03:30:47:18:ba:
4c:0b:64:3b:aa:64:58:f9:e1:81:e2:f4:2d:17:02:
2f:ec:fb:2f:36:56:e5:54:ad:ca:69:b5:cc:33:b8:
22:ae:ce:96:42:58:4d:12:5f:7f:88:df:c7:2d:04:
61:de:e6:ab:9a:80:1c:e5:56:0a:c6:23:f4:bd:a3:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:5B:5F:E7:32:21:99:05:05:3B:FF:89:2B:7D:5F:D9:DC:1F:C5
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6c:27:e2:f5:77:9b:85:f1:3f:68:d6:54:e0:ae:56:5d:87:
0e:68:46:e9:47:cf:e3:77:2f:5b:ae:be:1f:a4:62:22:5c:9e:
fc:32:0f:3f:44:e1:a8:dc:e7:dc:88:2c:fa:da:d5:7f:77:bd:
93:4d:3b:a1:ed:35:c7:3f:c6:af:48:ad:2c:6c:2d:fb:f5:cb:
89:f6:11:40:0c:0e:39:bb:5c:50:77:15:90:5e:6d:78:8c:a5:
5a:be:56:c7:1b:0c:4f:f4:7d:3c:b3:dd:0e:f7:9b:93:c1:4b:
4a:c5:06:8f:53:50:e6:78:0f:de:ac:1b:52:5d:b3:3f:8c:00:
84:d0:3e:e9:27:96:f9:98:c5:83:21:4e:ee:75:18:78:c8:0b:
17:bd:4d:29:d8:a2:d9:89:f8:f4:9a:da:b4:a7:a7:23:24:1f:
4a:47:3c:93:1e:8f:05:da:d9:70:27:3a:29:d9:f4:7a:06:a9:
4f:04:47:14:99:28:cf:80:3c:d5:b5:bc:c1:f7:fd:46:4f:40:
8b:44:b4:31:b8:ca:44:14:3b:79:1e:9e:93:ba:8e:06:33:a7:
4b:a9:fe:7f:50:30:e0:81:c5:c0:2c:79:71:48:42:30:58:47:
57:fc:0f:62:6b:5a:6e:17:f1:7a:10:92:37:7c:fa:82:5f:fb:
2e:e7:17:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:18:47 2026 by rpki-client