Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: WuFvcKQUZFyjTCD9N7nOpsCfz3Iemt69caTxvbHvE0Q=
Subject key identifier: AC:D4:0E:E2:B2:8C:59:58:80:2E:74:DC:A6:6B:72:AA:34:2A:89:90
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 01A0D64BEDB4968764DD0E6554E28F33D1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 02:01:35 +0000
Manifest this update: Fri 25 Sep 2026 02:01:35 +0000
Manifest next update: Sat 26 Sep 2026 02:01:35 +0000
Files and hashes: 1: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (hash: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: KMC+v1OtzZxH3hoiR+s+yzsVlhHM3G8k4NkchqeHGgQ=)
3: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (hash: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:ed:b4:96:87:64:dd:0e:65:54:e2:8f:33:d1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Sep 25 02:01:35 2026 GMT
Not After : Sep 26 02:01:35 2026 GMT
Subject: CN=acd40ee2b28c5958802e74dca66b72aa342a8990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:16:39:10:a4:73:07:b5:1e:c9:81:55:47:a3:
02:9b:e3:9a:0d:da:9b:93:ba:b1:f6:aa:da:48:f7:
bf:15:84:8f:eb:c8:13:c7:86:b0:9b:aa:d1:ef:59:
9d:3e:27:4f:8b:32:ac:06:67:2f:01:e0:56:17:16:
b0:fe:1c:97:e4:f7:62:7a:bd:43:c8:e3:29:98:21:
7f:a9:9e:cf:3c:02:18:56:b6:fd:1b:cb:62:76:ac:
29:68:c0:a9:20:90:d1:e8:d0:d8:34:09:68:00:37:
76:79:bd:e2:0f:fe:a5:bb:28:f9:f7:7d:55:82:25:
35:b6:af:39:7b:d6:70:7f:6d:f2:9a:a1:bd:f3:a4:
2b:83:63:03:c2:68:7b:1c:8f:2d:d2:d4:00:4e:8e:
f0:b8:8d:48:79:41:bf:28:a9:51:ad:93:1b:83:3f:
90:54:07:22:b5:3c:c0:0f:41:b9:f7:25:e7:5a:e9:
14:58:dd:2a:0c:0c:8b:91:f5:62:3d:02:09:6f:10:
1b:2f:5e:60:1f:2e:0e:4a:2e:4f:43:21:68:e6:ab:
e6:d4:12:94:c4:30:b7:63:9b:df:a6:a6:b9:9f:db:
e6:b5:c6:c1:eb:82:da:38:23:06:97:0e:c9:06:e7:
50:03:91:a7:a9:60:60:4a:10:df:65:b6:ea:1d:09:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D4:0E:E2:B2:8C:59:58:80:2E:74:DC:A6:6B:72:AA:34:2A:89:90
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8e:22:06:23:30:a7:fc:36:f0:77:e6:39:44:21:73:1b:e1:
9e:77:bf:31:fb:2d:6a:77:5a:39:bd:23:be:ae:4b:a4:f1:dc:
95:b2:22:cc:cf:24:e4:c9:e8:bf:2d:7e:e0:30:e2:04:e0:53:
cb:db:f2:34:c4:12:f2:02:50:c1:f7:12:65:f6:5d:ff:37:cc:
17:28:1d:22:b0:97:ac:30:23:bf:1f:3d:59:42:78:32:b0:34:
8f:1b:36:82:39:b4:c2:91:89:25:50:dd:14:9e:58:4c:26:52:
c8:1a:36:72:36:df:21:89:86:cf:04:a9:70:46:b1:6d:07:d0:
57:0c:e4:c3:72:dd:b4:c0:da:26:0f:3f:83:f9:22:86:41:72:
93:9d:93:f4:9d:a0:a1:2f:af:08:17:94:e3:88:a1:54:fa:93:
36:13:b6:52:59:85:5a:0c:36:8d:d8:72:fb:00:3c:39:39:2c:
5c:8c:97:d9:c6:a8:90:07:a5:dc:6b:bc:95:0c:d5:e5:62:8c:
e7:00:37:81:c6:73:49:f8:ee:29:81:06:57:62:f3:5d:c1:43:
60:ad:1f:15:19:45:21:97:a6:cc:fb:32:c0:6e:fe:89:d0:c3:
65:ff:d4:2e:af:1c:6a:8a:34:f4:a8:88:34:55:25:8c:92:4d:
00:82:a8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:38:54 2026 by rpki-client