Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: qi4GczPZ8xslQdSMxOg659KP7ogQCrrD5WvLHWWHsdg=
Subject key identifier: E7:0F:70:1D:D6:33:32:25:03:D4:58:54:06:3A:75:F9:FA:4C:9C:12
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 01A0D8A7D2EA4FA2D8E2E7AF1C4627ECB21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 12F2
Signing time: Fri 25 Sep 2026 13:01:12 +0000
Manifest this update: Fri 25 Sep 2026 13:01:12 +0000
Manifest next update: Sat 26 Sep 2026 13:01:12 +0000
Files and hashes: 1: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: by/J/hsIVj3GZmDDtsp6zJ0CsYxwTEY2K2Qxqy+Fudg=)
2: tRrojmCf6GIHy7rOSc8HEorjdDM.roa (hash: P8uZJNdgJmiR9RNimT+TldXg8dI9zNVaN+cuOggU5GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a7:d2:ea:4f:a2:d8:e2:e7:af:1c:46:27:ec:b2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Sep 25 13:01:12 2026 GMT
Not After : Sep 26 13:01:12 2026 GMT
Subject: CN=e70f701dd633322503d45854063a75f9fa4c9c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:bd:79:1a:fd:62:9d:59:1a:02:4f:28:ca:
7f:79:29:1f:8b:a3:3a:01:ba:de:a2:06:54:68:aa:
ef:01:f5:5a:51:f1:a4:da:98:da:4c:33:18:31:ba:
65:22:8f:17:2c:2f:99:6a:bc:20:7e:ab:8a:20:24:
86:ac:bb:d5:26:41:40:97:ff:c0:d2:53:a4:61:28:
60:38:7d:74:c9:a1:b3:a5:7a:b9:ce:a2:c5:79:de:
b9:95:00:dc:28:f7:33:5c:91:b3:a1:ba:1d:d5:04:
7e:d4:3e:7b:fe:b6:ae:ff:ec:a5:56:db:7d:90:bd:
76:52:ed:67:04:90:6a:3b:46:81:0a:4b:51:21:16:
40:a7:ef:ac:f0:97:53:ef:6f:31:ba:3b:8f:2b:d7:
3e:b6:e7:f2:6a:ad:11:b6:6f:88:fa:6b:96:34:18:
d3:55:15:dc:dd:15:54:95:8d:98:44:da:46:6e:48:
fb:d0:19:d5:ae:89:1e:5e:ac:85:22:99:fa:94:c6:
d1:22:cc:6e:07:f2:f1:72:f3:75:4d:7f:e4:04:3b:
68:4f:2d:79:f3:ed:63:e3:c2:23:0c:c0:fc:5c:8e:
42:90:33:06:4c:26:c0:2e:60:7a:dd:89:8c:5e:ed:
f6:08:54:3c:49:3d:b1:8d:1b:cb:6d:6f:8e:10:25:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0F:70:1D:D6:33:32:25:03:D4:58:54:06:3A:75:F9:FA:4C:9C:12
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:86:96:c9:75:88:ed:c2:f9:9a:11:9e:79:9b:a8:07:f4:54:
0e:bc:4d:da:09:b7:f3:90:fa:13:20:d9:8c:c5:e6:17:5d:d7:
2b:bf:4d:36:11:92:ed:75:b4:18:21:20:a3:fe:59:30:41:73:
c5:14:40:7e:a8:60:eb:ca:32:64:0b:72:96:29:ca:58:d5:e7:
f0:d1:2e:c8:70:bc:e1:34:9f:a1:f8:35:2c:21:83:2e:da:56:
3a:1b:15:f0:9f:4d:de:54:2e:7b:e9:15:67:0e:37:4b:af:66:
92:db:09:88:de:b7:5a:9e:16:6e:72:9e:f1:c1:55:65:52:94:
e0:a2:48:95:e5:76:53:a2:6b:56:83:c1:ed:bc:d3:45:27:13:
ad:b3:34:ab:b3:ab:6e:08:c0:6b:08:39:54:61:c1:fc:87:6a:
2b:74:57:b3:91:54:ae:35:8d:68:fb:3d:7c:c0:02:63:d5:1a:
19:c5:36:0b:d3:c9:98:c3:27:81:35:f2:b7:7e:74:a4:a8:7d:
f2:ca:8c:e7:08:5d:30:35:4f:24:b6:de:40:4c:fe:e3:5e:b8:
cf:fc:c0:9e:06:1b:48:50:f0:03:78:59:87:c8:9d:4e:68:95:
ea:cf:3c:df:d2:bf:3e:1b:23:56:48:cb:41:4b:ae:1e:63:1c:
c1:de:1a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:01:04 2026 by rpki-client