Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
File: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft (raw, json)
Hash identifier: QxoKjlTHUcrln0aE6sIHTwxiSqW5CzgFXon5oD61BrE=
Subject key identifier: 9D:9E:89:C1:13:6B:85:3D:D7:E1:22:CA:2D:5D:EF:DA:89:56:89:F5
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Certificate issuer: /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial: 01A0BEB18601E1E8FBB95DD621D45D94376B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
Manifest number: 026C
Signing time: Sun 20 Sep 2026 12:01:40 +0000
Manifest this update: Sun 20 Sep 2026 12:01:40 +0000
Manifest next update: Mon 21 Sep 2026 12:01:40 +0000
Files and hashes: 1: 17iDKnMCPzF4M2zO_EMSp433meI.asa (hash: IN8ZKdhOHTTTwuLE4YUbOHesEFUMPKZ5d6iCYuk1AHk=)
2: 8a6S-UC-PzVNfuKH4VEcSEi_3xs.roa (hash: ggJLncnSKUJfbzTsD0cgxExXtCcR+Y6TnGQ+ZK/8VVg=)
3: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl (hash: 0xA5hRoxD4BOYpOL2rDwqGSE1ZTOFeHkm53x5N3sEhI=)
4: UmhoW5VfIZWn13lemnKnlkHqPAs.roa (hash: DGzNzZVpk2iVMIiaSeZ6GUmQLgsZVVAd5WcJYRZRIwU=)
5: bF4AIoJbZesIwX86iDSdyGssluQ.roa (hash: mpdkvKaWVXrslEPSu3+IjnM2tbW2AQwtygmvrWacIvU=)
6: hSst--j5VCqGQF-z8DIf_npvY-Y.roa (hash: BqwaIWDOiFPECUGgrwgZoSY04WbWfryAxU75uG2cx4A=)
7: xkCFgW6AhRTzlPFYxIdYyO_Kfgc.roa (hash: ujOmUW3uo+zC741aDRMzurWVfgMAgyR64bWgpanO+zs=)
8: y-sWnGP-0hQwy4lYSwzVC6rKYt0.asa (hash: 9jRAa+Up2q3z80Ly9J5h5nlaT4zsmd3d7aVIdsnLuHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b1:86:01:e1:e8:fb:b9:5d:d6:21:d4:5d:94:37:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
Validity
Not Before: Sep 20 12:01:40 2026 GMT
Not After : Sep 21 12:01:40 2026 GMT
Subject: CN=9d9e89c1136b853dd7e122ca2d5defda895689f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:49:73:60:43:c7:4e:66:ba:da:94:eb:fc:
fd:df:0f:46:ad:6a:82:e7:05:d7:fb:9d:41:68:73:
48:b8:8c:4c:7f:0f:e4:69:09:dd:6b:0a:be:d7:4f:
6d:ef:50:b8:01:f2:85:5a:4b:86:1e:7d:d4:90:44:
4d:fe:01:96:7a:39:a7:c8:84:ed:29:96:af:84:8f:
29:1a:f1:32:eb:7a:6c:43:84:be:5e:60:78:72:96:
ab:6f:1d:f1:fd:42:cc:13:16:7e:27:1d:3c:49:0b:
a8:d5:b4:bd:cc:0b:07:83:74:ce:21:94:bf:e6:46:
f5:9f:ef:aa:b8:11:83:6f:73:38:04:bb:f2:b6:b9:
c2:ad:bf:59:6d:79:35:58:72:23:1b:a5:fa:09:e3:
43:b8:7b:33:b8:76:03:a4:65:62:92:6d:19:04:15:
a1:c8:4e:1d:e9:55:5b:40:c3:1e:71:c9:0c:34:fa:
c0:0c:9e:f6:ae:2e:90:7a:91:0d:10:c2:43:41:79:
62:ae:04:00:b2:cd:c0:00:6f:8a:60:89:12:d1:ea:
bf:fb:fd:e6:5b:27:23:b9:ed:5b:44:a8:e5:50:fc:
66:db:e8:0d:d1:86:d9:11:84:af:ce:c5:83:7b:b7:
dc:8b:f7:12:6a:ba:7a:55:dc:87:f4:52:14:37:4c:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9E:89:C1:13:6B:85:3D:D7:E1:22:CA:2D:5D:EF:DA:89:56:89:F5
X509v3 Authority Key Identifier:
keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bd:6c:bb:ef:34:d9:82:b1:32:43:b8:f8:a4:81:5a:b9:bc:
dd:0c:fc:35:72:35:5f:e5:a1:df:bf:71:6d:59:dc:76:c7:c7:
27:7f:40:74:cc:9b:12:dc:9a:50:72:f8:4a:ae:62:53:7e:a7:
0a:32:32:46:a3:0c:5d:da:03:45:03:dd:ff:51:ef:26:db:98:
5f:d7:1d:02:d3:a6:f3:ae:89:13:23:1a:a0:5c:4c:f0:60:7b:
a2:c0:af:0f:91:65:92:8b:ed:0a:b0:94:9e:34:92:06:01:ad:
5f:d0:d5:7a:07:d3:b8:e9:7d:79:3a:72:58:bd:7b:84:6b:9b:
d4:e6:14:9b:5c:c9:dc:07:c9:2b:c0:14:76:98:9d:cb:07:2c:
77:d8:52:3e:13:57:81:8c:e4:7e:1f:b0:c6:a0:b3:7b:55:3c:
b2:77:d3:b5:00:52:3e:c6:85:02:a2:dc:55:e6:0d:e5:0d:57:
03:b5:28:0b:22:16:5f:23:94:29:d1:e3:48:27:55:b2:2b:a6:
ed:d3:17:16:b8:e9:41:5a:e1:be:ca:ed:8b:97:16:42:69:ce:
7d:c6:70:52:63:f4:41:12:79:23:7f:45:c9:36:89:be:32:69:
04:9f:d6:1f:73:29:71:96:0d:c3:88:f4:ca:92:22:3d:fa:bb:
fe:ec:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:49:55 2026 by rpki-client