Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: OIidLwS8OzL8EWg31PmIpJJA277bkjOldKh714V3whg=
Subject key identifier: 7D:13:CB:29:52:A1:0D:0F:61:C5:4A:EA:93:03:B2:8D:84:9D:75:A2
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 01A0C1E8D7A45BF10DAE3FD21F5E6E871A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 110A
Signing time: Mon 21 Sep 2026 03:00:57 +0000
Manifest this update: Mon 21 Sep 2026 03:00:57 +0000
Manifest next update: Tue 22 Sep 2026 03:00:57 +0000
Files and hashes: 1: 5EPEfFcq0_CQJyJv8NvlTXW122s.roa (hash: shP8Ed/HPJC3iktLjU3AhfJDqjBPIc4NQ5VyPIH2+gA=)
2: HoguhPYctq53_NeJpwMiGGaEYHE.roa (hash: 2Rg4I4psfcDKa015Nd8h+FBbuNVy5CBZXEFltS4HBbg=)
3: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: aFXlHVlR0Gby2vs8SmwsYdxbtxJhenbezTLtsfP95QA=)
4: jqg60u3udEXldRsO6lvjcjKURzE.roa (hash: kW26aKoDuoF4wJ1FRfJ1sSmndtvHSr/VmE5hX9cRIqU=)
5: xkVE7KUdk3_Gxthu42EOBxgV05Q.roa (hash: OLCiaU+AVFxgMEa5gMdkqLSxOFCgu1RCocNrX9T3asM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:d7:a4:5b:f1:0d:ae:3f:d2:1f:5e:6e:87:1a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Sep 21 03:00:57 2026 GMT
Not After : Sep 22 03:00:57 2026 GMT
Subject: CN=7d13cb2952a10d0f61c54aea9303b28d849d75a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:f0:82:92:e8:74:aa:5a:50:cc:58:da:0c:
4f:7e:ca:00:a2:1c:c6:b4:32:b8:53:c2:60:c4:d3:
ac:07:c0:e4:d2:e9:59:dc:7e:49:a1:3e:4d:ea:0c:
ec:15:1a:b2:35:f5:59:21:e7:ac:b7:c7:fb:22:f8:
4e:5e:d9:25:16:2b:59:08:d1:93:05:16:a6:c4:a3:
73:bf:06:72:47:c6:8e:7e:f9:af:26:b9:b0:0b:e1:
f2:0f:90:7f:bb:bb:e6:4b:94:c5:ab:d7:5c:80:38:
7f:6e:d0:33:04:5c:1a:07:6d:17:ac:86:db:10:a8:
93:7c:9e:58:1e:a7:70:1c:15:f7:d1:be:9c:55:ab:
9f:a0:90:c3:85:54:f1:84:f4:bc:c1:25:1f:87:3c:
4d:1b:2b:76:c0:b8:ab:07:de:4f:f6:16:15:47:fb:
61:dd:74:7c:39:0b:3e:be:c0:09:de:c1:87:3d:06:
19:be:9f:86:6e:a9:9f:59:6f:07:f2:68:f3:c2:66:
e3:64:02:fa:44:62:a5:57:5d:5a:8f:44:50:8f:cd:
cb:fa:f4:cc:e1:b5:dd:62:db:b4:08:af:ff:31:06:
b3:61:42:c3:03:0e:69:ba:f5:76:ae:1b:b4:bf:f2:
3d:04:c0:9c:c3:ae:03:73:29:cf:1b:a2:df:6c:79:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:13:CB:29:52:A1:0D:0F:61:C5:4A:EA:93:03:B2:8D:84:9D:75:A2
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:79:9e:9d:2c:5c:17:28:d9:d3:5c:34:4f:f1:00:4d:ff:4c:
48:b7:00:a1:20:d3:bf:37:cf:3a:b6:1a:71:f9:85:ec:8c:f1:
a4:73:44:cc:88:28:3b:45:3a:4e:cf:a0:d1:1a:3d:87:6e:42:
1c:3f:3c:0f:a0:0a:b0:a7:0a:3c:68:6e:8d:e9:fb:13:ab:e7:
01:b6:fc:5b:2d:97:93:1f:3b:6e:58:43:6d:e1:9a:0d:d5:ca:
ca:96:44:e4:f1:65:1b:8b:8d:38:1a:6e:89:40:45:ea:ba:52:
37:11:67:a0:e9:e5:0c:50:d2:00:aa:b2:2d:39:07:bf:e8:df:
23:7d:1d:33:48:96:eb:5a:43:d9:b9:fa:f5:3f:27:87:bf:73:
9f:8f:ef:eb:49:8e:eb:bb:5e:2a:ab:89:25:9f:26:d9:47:34:
e4:ec:a3:46:a3:57:da:ea:73:7a:a6:ae:51:ab:c4:25:34:82:
4b:9a:06:e2:c4:74:fd:47:4b:92:5e:1a:4d:ee:fb:62:ed:ef:
c7:2a:2d:60:cb:a0:02:34:2b:1d:e4:12:24:d5:8b:7a:d4:4c:
d3:2a:34:99:cf:b6:c7:4c:e2:44:ac:be:31:19:91:8c:9d:66:
ea:07:fe:c8:c0:38:66:01:5d:d8:f7:ee:c4:e6:9b:27:38:ba:
af:f1:78:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:06:02 2026 by rpki-client