Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: V76fns8pUuOKIeiL1oOXmyXiIJ26H91GhlKvaLbslj4=
Subject key identifier: 3A:77:D4:D6:0F:52:49:5E:1C:70:28:B0:7D:70:30:45:F6:72:D4:5B
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 01A0E73FA650EF3150E86574B7DD18D84378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 1004
Signing time: Mon 28 Sep 2026 09:01:43 +0000
Manifest this update: Mon 28 Sep 2026 09:01:43 +0000
Manifest next update: Tue 29 Sep 2026 09:01:43 +0000
Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: 1YOM5SIT8goyGrCGVVuJ2JvYj70EscnF8r66/Ag39OE=)
2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=)
3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=)
4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:a6:50:ef:31:50:e8:65:74:b7:dd:18:d8:43:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Sep 28 09:01:43 2026 GMT
Not After : Sep 29 09:01:43 2026 GMT
Subject: CN=3a77d4d60f52495e1c7028b07d703045f672d45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:66:9f:1c:23:96:45:d4:da:fc:f2:5d:ba:dc:
6d:00:f7:12:93:9e:fb:28:0f:95:b8:c3:b7:cc:a6:
0c:a9:de:cf:7f:29:64:8e:7b:4c:8a:6d:04:0c:db:
c1:a2:a5:34:fb:da:5b:28:99:ef:60:66:c8:e6:d6:
a6:8b:09:0d:cc:cb:43:1b:c6:43:79:ee:02:e0:c2:
72:44:06:54:45:28:b2:5f:1b:5e:80:11:d9:0f:76:
17:d1:4e:0b:e8:42:cb:4f:ea:7e:91:b3:95:00:e5:
61:43:13:24:90:cf:c3:9f:27:c2:52:a2:90:c3:9f:
07:86:98:82:50:6f:71:95:93:51:cf:e0:b2:cc:a1:
68:d7:cf:2d:b2:5b:e9:33:91:f6:49:8f:4b:e3:b4:
6a:1e:a1:af:d7:c4:cf:b1:99:43:b2:b5:29:be:54:
73:ca:ff:ee:66:93:b4:ff:f7:d5:7c:6d:8e:fe:4f:
07:9f:3c:87:f3:c4:44:d8:d4:2f:b4:48:5b:a2:25:
32:9c:71:b2:6b:86:98:f4:24:45:8d:ea:d9:10:e6:
44:23:b1:3a:76:9b:5b:3e:01:d3:34:fc:79:0e:3d:
5d:13:fb:7e:2a:aa:2d:67:40:70:23:d8:56:66:62:
8b:40:85:b8:b3:b9:bc:08:a1:50:ba:76:48:f9:2b:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:77:D4:D6:0F:52:49:5E:1C:70:28:B0:7D:70:30:45:F6:72:D4:5B
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ac:9c:dc:88:52:fe:87:e8:ab:b7:29:0a:66:0e:1d:dc:b5:
4f:71:41:8f:a8:74:05:a2:60:d2:9d:1d:4e:3b:8a:c3:6f:34:
c5:20:7f:dc:cd:17:3a:c0:79:3f:94:94:a5:41:c4:85:35:ba:
94:90:39:92:ce:c2:11:a4:28:ea:aa:ad:39:76:a8:0c:02:29:
e3:c0:f7:61:92:06:83:ab:8b:59:62:b5:ea:25:cc:4a:a8:65:
30:35:11:ea:29:24:91:49:65:84:a1:26:a0:5e:66:ed:e8:4f:
90:04:51:47:33:95:d3:0b:91:00:9a:7c:14:54:19:3e:34:b8:
b2:98:99:c2:22:72:82:2a:d4:16:c7:07:c7:b0:cd:0e:b4:a9:
ed:2e:eb:ad:13:a5:fb:03:b6:0d:5b:5c:e1:a0:df:aa:9e:54:
61:90:8f:08:46:b3:04:99:f6:1d:5d:94:1d:d9:f4:7f:7f:ea:
48:31:a4:f5:2f:fd:d9:f7:64:43:72:1c:17:67:1b:c4:9a:b1:
05:e6:6c:e3:86:62:3f:e8:f4:ab:75:55:22:17:49:8d:40:f0:
76:04:79:92:9b:bc:9c:54:70:08:3b:04:34:18:55:e5:3c:24:
2b:8a:56:3c:f6:8b:3c:37:ec:5e:59:16:63:ae:d1:7a:44:b3:
fd:5d:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:11:38 2026 by rpki-client