Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: eW7mnjM1+jAl1WsQtl1VUt3Hef/eDjObY5oP5eiIrtg=
Subject key identifier: 0D:D2:EB:69:C7:EB:58:34:B1:75:30:4F:DA:8B:02:17:A7:FE:CD:38
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 01A0D9BA9A41A0EFDA4022C40C2195F5DE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 0D86
Signing time: Fri 25 Sep 2026 18:01:19 +0000
Manifest this update: Fri 25 Sep 2026 18:01:19 +0000
Manifest next update: Sat 26 Sep 2026 18:01:19 +0000
Files and hashes: 1: GbMgngzItY4uIndF-XcuFLKJhR4.roa (hash: wGyJex/ofBYcPy2R1/ePo/0rQqidiA5P6cvt53DFaE4=)
2: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: yyTF8ngk9fW69KsWwwXXdZ1pp7820EKrOpumLc6nctg=)
3: ez4u_1j0_ojM3jorhMhPc8LRXyY.roa (hash: iklDjhEm/+o8jK0OCBuLkTDvKYqHZMgst24iVNDdcek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:9a:41:a0:ef:da:40:22:c4:0c:21:95:f5:de:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Sep 25 18:01:19 2026 GMT
Not After : Sep 26 18:01:19 2026 GMT
Subject: CN=0dd2eb69c7eb5834b175304fda8b0217a7fecd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:99:43:78:ac:a4:e7:d1:05:dc:10:c2:06:
0c:3b:6d:82:19:0c:43:52:57:41:52:09:16:c9:1a:
33:c9:b8:f9:ce:bb:68:e4:47:61:b4:17:95:45:6a:
8f:07:43:9e:5c:c3:1a:98:8a:fc:87:ca:26:ad:fb:
33:9c:6f:02:35:ed:fc:f4:6d:4a:b3:79:9c:dc:a2:
30:ef:35:1b:69:2c:28:a3:e3:09:5c:24:bb:b2:49:
55:ee:e3:7c:de:22:32:8b:0f:c0:9c:f4:8c:c1:06:
db:00:86:d0:66:0f:ab:0d:3a:20:40:b6:36:59:3f:
48:b5:f1:17:e1:60:a4:f3:65:6d:12:da:12:ca:2c:
38:08:36:3e:26:0f:ec:42:c2:b2:eb:80:3c:cd:fc:
be:f1:7d:da:ec:66:0e:c7:be:ca:ac:8e:9a:e3:2d:
a9:d9:04:5e:d3:e5:73:8c:10:03:2e:9a:d1:02:af:
1a:0c:f5:95:b3:ee:dd:9d:34:f2:f3:ad:3f:da:cd:
81:e2:1d:ec:5b:2a:31:fe:0a:19:30:47:1a:18:52:
5c:d4:fd:62:07:a6:c0:7e:5b:8d:99:e1:b4:28:8e:
cd:66:07:0e:b7:de:2a:0d:0e:1d:b7:58:0f:bc:cb:
d3:1b:05:63:43:eb:63:a4:dc:87:23:f7:70:3a:1f:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D2:EB:69:C7:EB:58:34:B1:75:30:4F:DA:8B:02:17:A7:FE:CD:38
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e8:3a:96:0c:20:0f:ca:d8:ce:a2:c6:00:cc:9e:a1:1b:a9:
80:70:84:c9:8d:f4:b6:07:66:23:38:b2:7f:5d:61:2f:31:9d:
90:93:37:ff:1e:0d:cc:9e:46:d9:11:f2:dd:25:79:98:30:a9:
c6:19:a1:68:15:cd:a1:b5:7a:1c:31:c3:07:8f:d5:3e:31:b1:
6b:2a:0b:3c:fa:44:a4:91:d5:97:4a:ce:10:31:00:70:43:f3:
48:2d:32:cf:c4:e2:d9:77:4c:63:39:5a:1a:ff:96:0d:9a:73:
dd:80:fe:7e:eb:be:34:8e:fa:60:87:7f:74:f4:87:04:b7:c4:
dd:f6:89:cf:10:60:7b:9f:e7:68:47:bf:71:ab:df:fd:55:97:
6c:35:da:b7:0c:09:bd:54:9b:e6:97:a0:1c:73:26:c7:2f:e3:
5a:16:13:90:52:03:4f:80:b4:32:1a:11:b8:3a:33:c6:39:1d:
2c:03:38:e0:c9:fe:55:59:16:9a:71:55:5f:ae:81:eb:a8:e3:
25:e2:d2:6d:c0:be:18:ee:e7:8c:13:f4:76:2d:bb:20:9c:93:
28:17:eb:37:42:b4:9d:ca:ab:43:d4:6c:1e:89:4e:b1:c7:ba:
e7:4b:95:41:0c:90:a6:da:c2:a3:02:1d:f7:cc:0a:05:c6:da:
e8:90:d9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:35:31 2026 by rpki-client