Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.mft
File: o-3nO95s_H12jrCVWPTsefsGiAU.mft (raw, json)
Hash identifier: YvToJYgz1Ss+JH9e43QtRsdHkFKhbn7ceS7QN9kGBlI=
Subject key identifier: 56:B8:09:69:92:EB:5F:6A:2B:C4:7F:95:1D:35:5A:CE:36:03:F0:03
Authority key identifier: A3:ED:E7:3B:DE:6C:FC:7D:76:8E:B0:95:58:F4:EC:79:FB:06:88:05
Certificate issuer: /CN=a3ede73bde6cfc7d768eb09558f4ec79fb068805
Certificate serial: 01A13823FEA0FE28D3758AE130396AAC5860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-3nO95s_H12jrCVWPTsefsGiAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.mft
Manifest number: B4
Signing time: Wed 14 Oct 2026 02:00:45 +0000
Manifest this update: Wed 14 Oct 2026 02:00:45 +0000
Manifest next update: Thu 15 Oct 2026 02:00:45 +0000
Files and hashes: 1: o-3nO95s_H12jrCVWPTsefsGiAU.crl (hash: FViHEzPmvuef0fTz+DHk5gajxYEVEBHwZ68QGiOqqIM=)
2: rxBMafXmJSrXR8vDOASdZ176CWs.roa (hash: UwSN/p8tMYJe6IO6Z1F6/UCLvX0zPceoWwIqurlhRz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-3nO95s_H12jrCVWPTsefsGiAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:23:fe:a0:fe:28:d3:75:8a:e1:30:39:6a:ac:58:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ede73bde6cfc7d768eb09558f4ec79fb068805
Validity
Not Before: Oct 14 02:00:45 2026 GMT
Not After : Oct 15 02:00:45 2026 GMT
Subject: CN=56b8096992eb5f6a2bc47f951d355ace3603f003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:73:31:c3:85:5f:49:43:52:f7:86:ae:43:
58:39:e7:cb:10:ac:c5:9d:71:79:9f:db:52:a0:b2:
4c:00:9d:ff:bd:8c:f2:94:45:aa:a9:da:b3:04:32:
3a:6a:55:59:82:15:60:ce:da:b7:59:56:64:a5:ca:
9a:71:26:c6:37:7d:72:82:e2:5f:3c:4a:28:0b:39:
19:2e:2e:bb:78:40:37:43:8b:43:65:c1:40:51:05:
aa:35:56:55:e8:7f:e6:d1:b9:af:b4:ed:d8:1f:a8:
ef:2a:c9:83:58:d2:31:17:8c:d9:db:02:43:f1:ba:
17:22:82:70:90:15:9b:c0:28:d8:ae:30:6a:98:9a:
26:6d:43:ba:d1:1b:6a:f6:3d:39:65:02:d0:23:cb:
e5:c8:40:56:e1:5f:93:e1:52:3b:07:03:55:fb:ab:
fe:9c:bd:07:f9:d9:7f:5a:6e:49:26:21:36:66:ff:
82:fd:ce:2a:45:f1:eb:32:1e:25:d6:76:fd:1d:cd:
46:b0:a9:b9:d9:33:f8:e9:d5:f6:df:5e:a2:e7:a0:
ec:b1:93:a9:ec:6c:cb:94:09:2f:76:d3:d0:6a:a3:
51:ff:5c:1b:b9:95:00:04:c7:30:11:54:6d:2e:76:
52:7e:41:dc:d3:20:9e:0a:49:97:4f:f8:22:35:b0:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B8:09:69:92:EB:5F:6A:2B:C4:7F:95:1D:35:5A:CE:36:03:F0:03
X509v3 Authority Key Identifier:
keyid:A3:ED:E7:3B:DE:6C:FC:7D:76:8E:B0:95:58:F4:EC:79:FB:06:88:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-3nO95s_H12jrCVWPTsefsGiAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4670a4-23d6-4d6a-94a6-03cda359ce2e/1/o-3nO95s_H12jrCVWPTsefsGiAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fd:76:2c:4d:03:49:1e:72:64:5d:0e:89:0e:d8:8f:a0:24:
f2:d4:5f:c9:89:c6:38:2d:a7:73:76:c1:0c:f2:ac:c9:e4:74:
32:52:10:c9:d3:4c:e5:69:cb:43:96:9d:03:f3:dd:b5:39:d9:
99:a2:ca:23:9d:46:b3:40:df:9c:85:b4:95:d9:64:c0:bc:b9:
8a:85:c7:87:b9:5c:c1:bc:8d:43:cc:5f:9d:f5:9f:ef:47:ac:
9b:5b:6d:54:bf:5b:fe:27:8e:d7:f4:30:5c:aa:bb:9a:9f:69:
6e:87:02:09:fe:b0:2f:ed:dd:b5:d2:53:46:cc:06:58:34:ca:
98:6b:e7:46:27:be:7b:d5:98:3d:48:f7:1f:84:f2:80:2a:00:
03:db:df:1b:07:0b:15:8c:14:c6:86:20:49:e7:37:22:8e:f4:
65:fb:87:d2:00:99:bc:c2:62:f9:2d:04:f1:21:87:3f:5c:f3:
76:a7:f2:8e:ed:1c:5e:3f:73:11:6f:8a:c2:82:d2:d8:e1:b4:
6a:f4:47:a6:1c:b8:c4:81:f7:75:4c:59:4e:17:c6:d5:d5:68:
95:76:33:56:28:5d:01:9e:d8:1c:a0:a6:65:45:6c:bf:60:a0:
ed:66:3d:69:45:2b:3a:e7:4a:57:29:05:0f:d9:85:b6:b0:1d:
57:1e:f7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:55:35 2026 by rpki-client