Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json)
Hash identifier: tX9xe/JPXM9MS3n34IxV0E66kT7dvLSg47F1Mq7cQNI=
Subject key identifier: F9:8D:BC:FF:FD:A1:5F:EA:B9:AF:6C:3A:A5:C0:B6:D8:60:28:60:D8
Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Certificate serial: 01A0DE3C486587687C01D907FB308C789D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
Manifest number: 03A3
Signing time: Sat 26 Sep 2026 15:01:27 +0000
Manifest this update: Sat 26 Sep 2026 15:01:27 +0000
Manifest next update: Sun 27 Sep 2026 15:01:27 +0000
Files and hashes: 1: hRuDhXhX54qw1wEPjhcbUnyv6xs.roa (hash: TAW6RX8CSvyYletMRNoT2k5BjZvitleWVxLZc1Ntn/4=)
2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: uV91bOHuKt0Bo3Qylu9JvJtIUc3nC7WApA9y2f37IdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3c:48:65:87:68:7c:01:d9:07:fb:30:8c:78:9d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Validity
Not Before: Sep 26 15:01:27 2026 GMT
Not After : Sep 27 15:01:27 2026 GMT
Subject: CN=f98dbcfffda15feab9af6c3aa5c0b6d8602860d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:a4:67:30:aa:7d:b3:e0:57:c2:3e:0c:47:
76:fc:36:62:12:6b:c1:3f:b0:39:a5:3b:de:46:36:
c4:94:43:ad:91:10:fb:d7:66:16:fc:85:4b:ae:5e:
f3:37:d8:7a:70:e2:8a:6d:70:c9:aa:63:87:17:7d:
47:02:ba:dd:6d:6e:7a:df:8e:d1:c3:73:9a:9a:db:
59:ba:42:ff:58:d7:3b:9c:a8:cd:7d:f6:be:e8:3f:
75:11:42:38:35:0a:af:63:6c:4e:27:11:97:dc:f7:
a4:de:e1:1e:e1:bd:e1:14:c3:97:32:b5:9c:99:9f:
1a:dd:20:5e:44:16:86:b2:ec:3d:78:96:72:19:e0:
0f:b2:a9:69:f1:f6:8d:fb:bc:eb:3b:77:ff:c5:5e:
43:47:1a:69:b4:d4:e2:cc:f1:19:72:57:a5:89:9c:
63:59:19:91:d4:4f:5a:ee:f3:0f:c7:47:22:e5:89:
e1:cd:ce:3e:6b:83:64:d7:ee:e0:fd:02:be:4f:90:
5a:38:11:bb:bd:9d:1e:4a:c6:d6:8e:bb:73:a8:14:
e4:0d:13:bc:13:17:56:57:8c:b9:40:1f:3a:ba:45:
b6:79:1a:b0:17:81:70:e4:71:ba:77:5e:b9:e9:a8:
5e:b6:8f:c4:a8:87:a5:59:05:71:59:86:98:b2:3f:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8D:BC:FF:FD:A1:5F:EA:B9:AF:6C:3A:A5:C0:B6:D8:60:28:60:D8
X509v3 Authority Key Identifier:
keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2a:15:be:c7:27:10:b2:6a:2a:28:9d:b3:44:cb:4a:0d:bb:
79:2a:68:33:a2:cd:15:cc:d1:8e:a9:60:a5:57:b0:10:3e:55:
9f:b7:c3:9e:ef:dc:25:22:2b:cc:98:ea:44:e7:68:9f:67:63:
aa:96:56:dc:6a:df:fe:73:6a:21:ac:b5:77:c7:c4:79:3f:ab:
73:f4:a4:73:4c:40:38:f5:aa:65:ca:5a:e9:9c:43:f2:db:5b:
be:51:8a:b0:bb:c9:b7:39:d6:72:7d:56:8e:3e:12:f6:de:fc:
90:4d:31:0b:46:fb:e2:64:96:f9:53:9c:85:3d:40:e5:3f:23:
c5:93:67:f6:7a:56:0c:cf:7d:1f:30:7c:1f:4b:c5:8a:bc:a9:
a2:2c:77:f9:08:91:a0:1a:19:10:4a:a9:8f:db:84:d3:6b:1f:
08:58:2d:e7:fd:9b:fb:46:20:61:5d:a5:b4:76:b7:35:4a:da:
5b:7a:98:72:f1:de:55:e4:7b:11:3d:63:dc:01:40:6a:8d:bb:
27:db:c9:35:e5:09:d8:d6:21:15:aa:f0:1a:37:07:91:a3:0e:
02:43:08:3f:5e:74:f5:97:f2:f3:ea:9b:0e:b4:74:b6:f2:f5:
b9:25:fa:ff:18:a4:03:cd:83:6b:14:96:d1:b6:d5:eb:bf:f3:
36:7a:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:46:28 2026 by rpki-client