Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: YmovAVhcSTCYn3vGqLnvP6yFvpAbXdO7sy0IDykupHs=
Subject key identifier: D5:F9:37:2E:55:29:DE:83:DB:04:8A:7D:DC:97:95:B1:27:E4:81:18
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 01A13BCA0910C56AC7F6C24E652C5D224245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 19:00:58 +0000
Manifest this update: Wed 14 Oct 2026 19:00:58 +0000
Manifest next update: Thu 15 Oct 2026 19:00:58 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: pkOuAjeR42djo/uHdmtj0WRSc+LLCg3aBolQ2jmKlYk=)
2: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (hash: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:ca:09:10:c5:6a:c7:f6:c2:4e:65:2c:5d:22:42:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Oct 14 19:00:58 2026 GMT
Not After : Oct 15 19:00:58 2026 GMT
Subject: CN=d5f9372e5529de83db048a7ddc9795b127e48118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:c0:f5:f4:56:9b:06:e7:34:9e:0a:d5:10:
d6:4c:73:db:83:73:9c:81:75:4e:70:2d:93:8c:31:
57:19:ec:d4:0d:d7:9c:15:bf:38:eb:7d:cf:d7:0c:
4c:2f:ee:23:94:00:82:70:fc:29:9e:13:50:ed:24:
26:a3:1c:6d:48:5b:49:3a:66:2b:74:95:f5:f9:5a:
28:d6:6e:7a:76:1e:7f:e4:99:bf:1b:96:ef:20:c5:
55:48:2d:fb:45:8e:21:a5:06:a4:96:16:ab:d4:ba:
e1:85:38:d9:5a:1c:6d:de:f9:8f:17:b8:a8:f7:f0:
a1:ce:14:ad:36:a6:96:18:43:94:bf:5c:82:9f:a8:
7a:d5:ef:56:11:4c:64:f7:db:7e:9e:96:3e:35:37:
dd:6a:b1:84:55:99:84:9f:3d:2a:14:7d:e0:15:52:
ad:68:c2:a7:18:8f:07:3f:41:14:67:5c:7e:d9:9e:
b1:4a:50:03:39:10:ac:52:e7:96:aa:b7:65:08:44:
5f:cf:e2:7d:4a:fb:2c:12:32:b3:54:85:be:b9:2a:
90:62:12:89:16:22:32:b3:c6:85:20:f0:64:a7:b0:
c2:76:65:3b:3b:f2:08:e4:de:39:2a:82:c8:78:0f:
35:29:93:1a:7b:a4:b6:b6:8a:3d:82:f2:41:12:6f:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F9:37:2E:55:29:DE:83:DB:04:8A:7D:DC:97:95:B1:27:E4:81:18
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:98:f6:2a:9f:70:1c:aa:a8:ad:95:61:a4:ae:3e:cb:0f:72:
4f:eb:96:fa:c0:3e:c2:47:70:6c:74:e7:82:db:67:64:66:be:
0d:be:67:4f:18:dc:c0:29:03:e9:0a:d5:44:f1:6d:4f:fc:68:
90:b0:2f:24:d5:3b:b9:ea:d0:87:8d:f5:a0:68:5c:c9:0f:d9:
13:17:d3:7b:89:68:02:ae:24:f8:f8:49:55:13:b1:d6:13:02:
f6:be:aa:b2:95:81:80:c6:3a:10:38:05:46:6c:11:43:4a:49:
4f:15:42:65:f6:b0:2c:3b:eb:1c:6c:19:7a:84:bd:47:7f:47:
f1:04:bf:5b:f4:53:18:21:32:8a:82:5f:cc:5f:5e:be:ad:71:
f0:cd:8f:9c:1c:c5:8b:94:5e:8f:a3:9b:a4:f3:72:d7:db:bd:
86:70:9a:88:9f:30:0d:cf:b5:50:2d:a1:df:f0:b5:09:c8:01:
20:b5:c3:e9:e8:18:c2:79:07:b8:97:59:e3:e4:6d:4f:8c:97:
6d:63:a4:90:84:81:4d:bc:22:d3:7b:f1:d0:dd:f7:8b:b1:e4:
a2:94:a1:a9:34:ef:fb:5b:1c:ff:a3:71:c3:b8:34:0b:4e:21:
0a:4e:d4:e9:3c:29:2e:e4:8b:d0:8a:3a:f0:c0:9b:de:52:f7:
99:ae:f0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:46:16 2026 by rpki-client