Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
File: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft (raw, json)
Hash identifier: N2a6sHt+3JV4ZaaxlWgaBTrE79y2oiinoxdilPrg9Ks=
Subject key identifier: CC:29:C8:8B:D6:64:4A:4D:07:5A:41:1A:02:1F:12:AB:40:DA:AA:64
Authority key identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61
Certificate issuer: /CN=a36619427c283fa3b2bb7b45cc35a51286398961
Certificate serial: 01A126F9920DF225D9A1AA5BFEE072806684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
Manifest number: 034C
Signing time: Sat 10 Oct 2026 18:00:52 +0000
Manifest this update: Sat 10 Oct 2026 18:00:52 +0000
Manifest next update: Sun 11 Oct 2026 18:00:52 +0000
Files and hashes: 1: kFGche0sUMJjtQYWtRrXVgbIroM.roa (hash: 34UZsa7v3vzkYl287UK/ejNXOYJMH9D9QG1MuCDxpCg=)
2: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl (hash: FxoOvRNiEem73kWgzMxiALKxifRiiGlyg6Ji4veGDOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:f9:92:0d:f2:25:d9:a1:aa:5b:fe:e0:72:80:66:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36619427c283fa3b2bb7b45cc35a51286398961
Validity
Not Before: Oct 10 18:00:52 2026 GMT
Not After : Oct 11 18:00:52 2026 GMT
Subject: CN=cc29c88bd6644a4d075a411a021f12ab40daaa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:06:42:59:fc:76:3b:44:8d:3d:1c:d8:8e:
d6:63:d4:93:66:63:e9:b2:86:d7:9c:f3:aa:f6:75:
ce:55:8d:f2:ab:53:e8:c8:89:03:52:bd:fc:73:0f:
ed:f3:5e:b4:13:e8:ff:8f:fe:f0:62:7a:c2:cc:6c:
51:4f:88:a0:12:9f:43:47:c1:6f:ed:3f:4f:9a:39:
4b:73:6c:3e:15:4d:0b:12:4c:7f:65:e4:6b:f7:4c:
6d:ea:d7:2a:af:34:9b:4d:cc:db:21:e7:c9:ce:f2:
02:0d:f1:a1:90:a6:3a:3b:aa:91:87:d9:f1:78:da:
0e:7a:af:70:00:46:d1:ea:3a:79:4b:df:eb:37:89:
9e:5a:c7:38:56:48:f3:c4:fe:29:96:43:31:ec:da:
8c:3e:d3:14:c9:11:fc:04:5d:6f:6a:c8:21:6a:6d:
75:93:52:c9:ac:ff:42:d6:b3:00:38:6c:12:ca:d4:
5c:46:66:a9:4f:f6:02:52:a4:7f:f3:a4:1f:56:d3:
6b:00:37:da:c9:99:0a:2f:bd:89:a3:b9:7b:21:c8:
19:4b:9a:c2:a7:05:dc:55:80:e5:a8:65:bc:e3:fa:
24:f2:3e:4b:a2:d1:13:6a:c2:43:ef:a6:92:53:6a:
8e:0d:44:24:6f:d9:78:6d:7c:2d:e9:fa:9f:13:24:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:29:C8:8B:D6:64:4A:4D:07:5A:41:1A:02:1F:12:AB:40:DA:AA:64
X509v3 Authority Key Identifier:
keyid:A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f4:8d:b6:b3:9f:8e:b8:99:f5:01:85:57:85:a1:1c:f0:fe:
89:6f:d9:f0:72:06:8d:a4:1c:6a:57:18:07:65:ab:a8:64:00:
15:8a:74:52:3a:7c:54:63:3a:11:1f:d1:e7:7c:7e:e2:97:1b:
a7:f7:19:88:ac:af:2f:76:41:58:99:57:06:b2:07:51:d7:f6:
5f:0c:c6:82:28:d3:95:cb:48:fd:aa:33:57:40:b8:86:44:ec:
00:26:b9:68:54:77:a9:6c:aa:f3:72:dc:7d:44:e3:b5:d9:cd:
e4:eb:21:dd:9e:13:37:24:e9:3e:a8:4b:2f:36:5c:98:cf:20:
70:d8:89:a9:e7:a6:dd:44:70:52:c8:9f:61:f9:34:6e:b6:91:
3c:58:c0:0a:ff:5a:9f:6d:b8:6a:ee:1f:aa:63:d4:8b:85:37:
88:86:d6:24:fe:d7:85:bd:56:c0:14:27:13:94:5d:11:3f:30:
63:19:53:b0:58:db:d0:31:f4:b7:b2:b8:b3:62:d9:5c:62:8f:
f2:1f:5c:b0:68:31:f1:47:7e:fc:49:7c:31:38:06:d2:a5:fa:
55:45:b8:80:6d:6e:a4:2a:ac:fe:a6:b7:19:ef:71:e7:a2:87:
db:2d:ee:a4:f3:79:14:19:29:8f:fc:f4:4d:ef:7e:db:8a:e6:
c6:01:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:12:54 2026 by rpki-client