Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: IZdYbPtKhRlL/1+dwXUc4gTplOBAXlwG/J6IH+LYIL8=
Subject key identifier: 83:73:A6:74:F0:0E:F6:EE:36:CB:B8:C9:9F:9F:A4:C9:61:85:3D:5B
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 01A0DB04499DD7D8171EA7FE54504B7501BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 1A83
Signing time: Sat 26 Sep 2026 00:01:26 +0000
Manifest this update: Sat 26 Sep 2026 00:01:26 +0000
Manifest next update: Sun 27 Sep 2026 00:01:26 +0000
Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=)
2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=)
3: IL0F6yFMaBjVjUPbOk1OfPuS4kI.roa (hash: KS3UNapFjrnwtbqG25bWZith7R8byYpg03cu4j54MCU=)
4: LVPO8JZfNdJa2U5Ik8I34YcEOUA.roa (hash: p6JxXEEX7qFpTZe35bHvc23RUvTVNt4iONQ/5P6VF/A=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: mMziTPDy1Q+XKJSRrHcqnyUtWip3kBl+b4bgE+PuXdE=)
6: tXrrUP_TFy0LZMX_c9DSBUiK_1g.roa (hash: IqdNMmp5ttOJAyhkpsC/dBhKLWgRCKvww/+kSgvGp08=)
7: umIRuHpxX9ebriBCvcmax-6rghI.roa (hash: C/8G0mcCjZSfHcX9z+n/wr8OBXx9A0aj/vE5hg6xmP4=)
8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:49:9d:d7:d8:17:1e:a7:fe:54:50:4b:75:01:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Sep 26 00:01:26 2026 GMT
Not After : Sep 27 00:01:26 2026 GMT
Subject: CN=8373a674f00ef6ee36cbb8c99f9fa4c961853d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:0e:be:eb:7f:d5:cc:02:e3:4f:fd:9a:3f:
f6:17:aa:68:30:2d:f8:71:28:2e:a0:7d:b8:2f:8c:
32:ca:bc:0d:5e:c3:e9:1e:42:f5:d1:aa:73:25:77:
db:58:f8:c2:da:2f:17:a5:90:f5:5b:25:9d:1e:53:
78:d3:47:5a:95:a2:5e:32:11:eb:31:f3:31:c1:17:
8b:ac:11:09:0e:db:a6:64:20:e8:9a:a5:c5:77:6e:
37:ed:23:95:d6:59:ea:cb:20:0c:57:ec:1b:8d:b8:
91:c7:d4:fe:38:aa:7a:e2:17:62:25:ee:c9:bb:c8:
e9:d4:7e:a1:59:e9:1e:67:60:e2:33:9f:f7:56:ce:
33:d6:0f:d4:06:5b:63:c5:eb:9a:ee:c0:d6:98:55:
57:c9:2d:0d:d8:bb:ab:e8:35:d6:0b:d6:6c:8c:7b:
2a:9f:13:06:b5:57:14:0f:a6:34:3b:91:ca:d7:e5:
5a:2b:5a:18:9c:84:cf:ac:a5:b6:c7:9c:52:de:28:
fb:7f:f4:d6:cb:39:ea:4a:9b:eb:f4:36:d5:49:52:
2d:27:34:3b:16:06:e8:f8:ba:9a:cf:63:bb:27:44:
63:24:7c:df:31:c2:51:65:3d:5b:70:71:b4:2d:ec:
5c:de:6c:5d:9f:0c:f9:90:92:b1:2f:77:38:8a:34:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:73:A6:74:F0:0E:F6:EE:36:CB:B8:C9:9F:9F:A4:C9:61:85:3D:5B
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:60:76:20:35:aa:72:e4:a2:fb:65:6e:48:6f:90:7e:12:67:
e8:1c:4a:9a:36:a7:b7:d6:ac:5f:30:23:87:96:6f:9c:3e:06:
d7:64:c3:32:3e:56:0e:37:25:c9:70:ef:16:c5:06:60:a9:c4:
f5:44:e9:f7:c1:24:d6:46:e0:75:89:8d:a0:ae:ab:25:69:06:
57:93:5e:aa:88:44:9f:3a:76:97:0e:87:78:ca:22:b8:cd:1a:
ae:83:34:fb:27:e0:7e:3a:82:af:32:36:b6:20:1d:01:22:d5:
b1:50:16:15:cf:7b:d1:3e:bd:45:e8:60:ab:a3:9f:47:0e:58:
da:03:f4:64:ec:f1:37:e9:83:ea:28:e6:e9:79:4b:26:c8:21:
f3:c7:a1:4e:e7:63:08:30:e6:a6:ce:8f:54:11:8c:af:09:82:
75:e7:26:92:c1:17:14:80:f5:3a:b7:e0:9f:7b:88:97:1e:b5:
4b:f7:84:b5:f1:28:27:4d:e1:b4:e9:a6:79:37:ea:c5:0b:e8:
d0:ab:e6:33:61:bc:e2:80:b3:88:3a:e5:26:e8:09:37:2d:53:
a1:63:a0:ab:94:c3:a9:cb:75:ad:64:7e:7e:54:68:52:e2:cd:
bb:f2:13:41:93:a1:5f:d8:1c:bd:22:8b:a7:26:53:c3:ef:2b:
20:db:02:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:51:28 2026 by rpki-client