Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: rtuJWG2RyggwKHF4I842XbOJI/j1kYZv1RjmrRjcE/A=
Subject key identifier: 5E:FC:66:4F:5E:C2:06:7D:A4:99:CF:B2:FD:B6:6A:6F:2A:5B:96:4A
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 01A0D426532E7BEB1A5F8A194770125A3C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 0EFD
Signing time: Thu 24 Sep 2026 16:01:16 +0000
Manifest this update: Thu 24 Sep 2026 16:01:16 +0000
Manifest next update: Fri 25 Sep 2026 16:01:16 +0000
Files and hashes: 1: NAWLn2JmIDnFs18yJqr1oS3wGGI.roa (hash: U8Bdx9Br8Djn05pZrQuUuhdCEFzcfGoUftoSy+juomM=)
2: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: aHjkbfVrgRvJZF4wi+OFIM2c5wbmFHnYJmlkMPPDxqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:53:2e:7b:eb:1a:5f:8a:19:47:70:12:5a:3c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Sep 24 16:01:16 2026 GMT
Not After : Sep 25 16:01:16 2026 GMT
Subject: CN=5efc664f5ec2067da499cfb2fdb66a6f2a5b964a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:e6:bf:48:2c:d3:f5:bf:51:d1:d3:02:8e:
69:8a:c6:a8:5d:aa:17:12:62:a3:be:3a:21:e5:10:
95:96:e2:b5:7f:84:14:00:6d:d9:94:ba:c7:25:a1:
0e:ef:0f:60:84:f1:49:d3:5a:32:d9:ed:6f:54:a3:
e2:b2:c3:52:18:6b:a8:47:da:75:31:92:c5:20:4c:
1e:be:10:25:09:88:44:28:5a:e5:6e:68:95:9f:75:
54:f1:dc:a0:c5:85:76:0b:f5:b0:2c:69:ed:38:a6:
1e:00:0e:f8:4b:f5:fc:5e:31:c4:03:03:d2:1a:bd:
f0:ad:ad:c9:9c:51:bb:bc:a4:eb:2a:47:19:ee:b0:
66:f0:9f:8b:8c:84:db:eb:b4:af:b5:95:8f:f0:00:
1c:e4:a5:0c:6e:d7:d6:99:61:b4:9b:44:9c:e0:34:
af:3b:06:cb:20:3d:59:ab:a0:46:cb:13:d4:dc:e2:
e2:b8:08:05:a4:a1:08:28:c7:e5:c0:23:a5:fb:48:
87:e2:0e:25:9d:13:85:90:83:29:11:9d:43:e2:9d:
90:04:ad:25:49:35:6e:53:98:7e:12:5d:35:a2:42:
5d:48:0b:c1:56:5e:89:30:51:db:92:ff:db:74:2a:
be:bd:f2:19:8c:02:21:d6:d5:51:6b:85:7f:c1:a0:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FC:66:4F:5E:C2:06:7D:A4:99:CF:B2:FD:B6:6A:6F:2A:5B:96:4A
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a6:7a:c1:98:66:b8:c6:19:cc:56:fc:57:17:d0:24:0f:03:
eb:68:30:eb:ee:99:a1:7e:80:16:f1:58:84:2b:6b:9c:95:c6:
eb:fa:ed:b7:95:1d:4e:2f:0b:56:03:4a:e3:2d:a9:4f:8a:c3:
b3:49:3d:25:2f:eb:11:50:0c:06:46:36:24:e3:62:09:34:c6:
2b:72:2d:cf:f8:a4:83:d2:b3:3f:c3:a4:a9:d4:3f:bf:ac:07:
7c:c1:b7:4c:a5:ab:2f:53:dc:64:63:a5:61:10:d0:a4:d5:ef:
74:56:9d:e9:99:4b:cb:ff:92:2e:92:52:2e:a8:4d:30:43:fe:
f5:6f:47:54:48:08:a3:ab:ba:b5:00:07:d9:51:ff:4b:a7:75:
f9:0d:71:1f:98:fb:9c:0f:5f:30:c7:95:2a:86:a3:f7:9d:3e:
34:75:65:d7:0f:94:46:b9:83:71:9e:f2:16:2a:a3:53:d8:f4:
37:9f:f1:e7:b9:62:64:c1:8b:10:d9:a6:35:e1:12:c3:e7:e6:
f5:47:08:44:ad:75:5c:33:55:eb:c9:67:0a:af:7b:c5:8f:96:
6b:b9:9d:bf:4f:a3:cb:90:c7:63:78:2f:4a:86:93:b5:45:eb:
95:7f:9a:5a:be:99:24:6e:94:80:a6:c7:75:01:57:d5:e3:c6:
48:0f:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:34:15 2026 by rpki-client