Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json)
Hash identifier: lUvFqksAQiecOA59kWiUGe7PAuCvf6ZdHUwzNPAT6So=
Subject key identifier: 57:04:D2:E8:92:F5:9C:AA:13:B4:2C:DB:69:B8:D8:CB:40:13:9D:80
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 01A0E7AF5CAE2260546FC4AF6BA2B1071A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
Manifest number: 19FF
Signing time: Mon 28 Sep 2026 11:03:44 +0000
Manifest this update: Mon 28 Sep 2026 11:03:44 +0000
Manifest next update: Tue 29 Sep 2026 11:03:44 +0000
Files and hashes: 1: QR6JCvg_yJC5a7s73DyQnmCM4I0.roa (hash: s2aQJ0ionOhGA/bORwEZg/xbj2CgaA7Pt0VzSP4Fylw=)
2: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: xDawodfTOYkcOCrDw02F4Mu3mbJ4By3rKaX65+WSj9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:5c:ae:22:60:54:6f:c4:af:6b:a2:b1:07:1a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Sep 28 11:03:44 2026 GMT
Not After : Sep 29 11:03:44 2026 GMT
Subject: CN=5704d2e892f59caa13b42cdb69b8d8cb40139d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:06:7f:37:09:f6:a4:f0:ec:2c:9d:29:70:8b:
df:2a:97:51:5b:ac:86:9a:c4:7f:e0:2b:cc:6b:a0:
ab:74:c2:06:8c:c2:25:b4:ef:f4:71:12:1c:94:4e:
30:5a:69:eb:ef:4f:92:32:fd:7f:6d:ab:6d:79:c8:
16:d6:96:d8:55:6a:49:b4:ce:af:b4:c4:59:3a:de:
a0:2b:44:1e:5d:89:91:69:3e:06:26:4b:c8:a4:46:
09:dd:45:2a:a0:a4:1c:57:e0:96:b6:6c:51:43:7f:
16:57:c5:b9:28:e0:57:b0:3f:d9:c6:09:0d:f0:4a:
d0:9e:72:fe:dd:53:5f:8b:19:b2:64:c3:77:aa:3c:
fd:22:16:f5:e2:e2:9e:1c:4b:1f:a3:b2:59:b7:39:
5a:98:7b:c6:83:4e:60:08:a3:61:12:51:97:cc:34:
cb:a1:bb:4f:0e:13:4c:9f:7d:ef:dd:a6:50:e7:6e:
25:8f:d4:17:97:66:52:00:70:73:7f:5e:19:3c:ac:
d3:6f:de:8c:6a:f2:84:df:95:7e:d9:8c:14:92:64:
cb:ef:10:92:50:b7:45:5b:50:87:9a:74:8c:4d:3c:
46:ba:e3:b9:a5:89:7a:e0:f7:26:34:91:cd:83:da:
e2:1f:75:3b:b8:0f:68:25:e0:8b:08:bf:af:2c:89:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:04:D2:E8:92:F5:9C:AA:13:B4:2C:DB:69:B8:D8:CB:40:13:9D:80
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0e:b0:b1:ba:45:9c:89:53:2e:c1:14:34:39:c7:c7:18:21:
cb:cf:c2:55:d6:b6:2e:92:7f:41:ce:86:76:a5:53:ce:a7:16:
7a:07:6a:9b:96:11:2b:dc:87:11:9c:f8:60:38:2d:55:eb:6d:
3d:83:40:18:79:30:ea:24:44:a8:22:1f:f8:99:c2:d1:a4:78:
c8:06:b7:f1:06:b3:26:8e:25:e2:96:9d:e9:ad:22:d7:63:9d:
47:52:f6:b8:aa:bd:e5:69:6d:51:bb:ff:10:a5:c9:d0:3e:bc:
c3:f3:14:67:93:33:c2:19:c9:f1:79:ee:7d:a1:b5:2d:ed:0e:
df:41:a5:a2:9b:b0:5a:ad:19:cf:64:75:64:68:8b:75:64:d9:
4d:d2:f5:af:1e:2c:19:c4:e6:b4:ff:ad:b1:c3:71:10:b2:af:
bf:d4:ab:5d:57:8c:4c:58:0e:5c:c1:f2:ec:3c:6c:c8:ef:19:
d5:ce:e0:4e:10:2b:dc:82:b4:f3:e1:85:50:6a:45:50:2a:d9:
03:ec:cd:e6:49:1b:10:05:e4:ef:4f:e7:e5:60:18:58:75:5b:
98:b0:dd:9c:c8:7f:bd:5f:0b:ad:88:47:4c:f6:5f:cf:9b:77:
07:0d:72:04:7d:2d:31:ae:76:bc:a9:53:d1:91:f4:f1:57:fd:
43:f2:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:42:54 2026 by rpki-client