Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: QoM0IDfqIUOB3HlbVZ6CBRaN1qD4t+FeXbiu2j/E/m4=
Subject key identifier: 15:02:17:3A:ED:CE:5E:99:51:C0:53:2C:3E:92:C5:47:0E:95:5D:05
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 01A0BFC37BADCF2901BF71B4605970DF6B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1A65
Signing time: Sun 20 Sep 2026 17:00:54 +0000
Manifest this update: Sun 20 Sep 2026 17:00:54 +0000
Manifest next update: Mon 21 Sep 2026 17:00:54 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: SkZDnK0osoGM2PEvXa372D++dednszNchFeCyYNjQU8=)
2: sKwkfCXbsIoN8Tz06VbLnX982Mw.asa (hash: 71Gnrq1SXo9YWAgxUMMoZvsmt9ojmvRIGQ+aSBy2/Tk=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:7b:ad:cf:29:01:bf:71:b4:60:59:70:df:6b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Sep 20 17:00:54 2026 GMT
Not After : Sep 21 17:00:54 2026 GMT
Subject: CN=1502173aedce5e9951c0532c3e92c5470e955d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:9b:e7:f6:64:dc:25:93:14:f2:75:7e:bc:
1c:8f:86:b5:5f:7b:76:40:eb:c4:86:07:0e:b7:39:
6e:60:c8:5a:2f:9f:30:fd:bc:a6:be:83:b8:d7:7b:
45:0b:e7:c2:55:4c:c3:51:e5:82:99:bf:88:29:60:
2f:19:21:a3:09:ec:57:fd:0e:be:7a:41:df:d3:17:
2b:b0:2d:e4:09:7d:86:21:16:3a:af:45:65:5d:13:
d2:b6:e8:85:14:c3:65:cb:d5:d3:85:78:de:38:19:
a4:5b:75:e1:45:d7:a6:77:7d:c5:e9:43:aa:7b:3f:
e9:5b:f6:7e:9e:b1:6b:8f:d1:19:25:9d:df:36:30:
c6:78:8f:f2:9e:55:5c:7d:c6:0e:46:43:36:7d:ce:
d1:7c:39:c6:a5:83:0d:a3:ad:b0:06:86:44:02:b8:
a2:cf:df:ff:d6:b0:1c:00:57:33:24:01:f1:4c:ed:
46:d0:e4:fb:c6:6f:e0:29:76:44:cd:9b:8b:95:61:
fa:39:f8:e1:12:cc:cd:95:8c:ec:b0:a8:9a:82:48:
27:bb:f8:13:1a:e1:23:9e:6c:02:93:a3:6c:8c:3f:
c3:e3:bb:d8:7c:84:0e:a3:a7:80:fc:b4:a1:5b:bd:
c0:80:89:56:df:eb:88:35:e9:f1:27:a6:d5:d9:dd:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:02:17:3A:ED:CE:5E:99:51:C0:53:2C:3E:92:C5:47:0E:95:5D:05
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:63:78:5a:28:cf:14:a6:84:58:ff:21:40:6a:1b:e7:3b:94:
5e:82:0d:63:dd:e0:f8:78:3c:fb:e2:e7:54:81:6c:7b:af:74:
b1:0e:f0:61:6d:15:81:00:91:47:3e:a1:be:94:c5:19:88:d3:
cb:e6:48:b6:ef:56:1a:d2:a7:1b:97:04:ed:b8:50:66:0f:fb:
64:db:39:41:df:35:45:b3:a1:49:84:4a:4b:d5:22:28:08:2e:
f8:cb:88:aa:82:df:7f:a9:fe:29:d2:13:95:cc:9a:a2:3b:11:
da:4d:6c:37:b0:5f:97:95:f5:9d:f4:7f:4e:ef:10:92:03:ba:
e3:64:bf:ee:e9:23:e7:d6:a4:51:49:4b:97:87:f0:e1:2a:51:
fb:45:2a:1c:cc:f0:46:74:9a:9e:3d:cb:d6:dc:71:a7:18:c2:
c1:cd:b3:70:7c:45:bf:11:09:c0:88:b0:0d:f3:64:c7:0d:cc:
0f:09:6f:b2:ec:0e:da:b4:91:97:83:81:e3:38:7a:0e:db:9f:
f2:e3:ca:01:a9:b7:8f:68:9e:12:11:10:aa:4e:64:ce:ec:4f:
93:ca:7d:b3:ee:2e:31:e8:fa:8a:ba:07:dd:b1:29:97:a9:07:
1f:a7:4d:f5:04:0d:80:69:c2:bc:b8:f7:ad:40:76:62:7e:66:
be:cb:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:16:24 2026 by rpki-client