Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: tfcKcdeflV/WEYZpSKeeDuguyLAxTMJoT590PSPTl+k=
Subject key identifier: 48:AB:86:37:3D:7A:32:51:8E:E0:3D:B8:29:B9:06:B7:5F:80:B1:FC
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 01A0CC6BF32EBF01ADE81E08AD2901162EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 04:00:21 +0000
Manifest this update: Wed 23 Sep 2026 04:00:21 +0000
Manifest next update: Thu 24 Sep 2026 04:00:21 +0000
Files and hashes: 1: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (hash: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: XXMSL017QxSHvz3utEYd7OENbmqcHvKJcU+bkeDdSyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:f3:2e:bf:01:ad:e8:1e:08:ad:29:01:16:2e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Sep 23 04:00:21 2026 GMT
Not After : Sep 24 04:00:21 2026 GMT
Subject: CN=48ab86373d7a32518ee03db829b906b75f80b1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:6f:db:0d:1b:33:b3:ac:be:ee:70:59:19:
75:a8:50:8c:6d:76:22:db:e0:ee:00:cb:5f:fc:51:
ea:ad:35:d8:69:f9:fd:76:d0:eb:65:b5:d5:72:b4:
5a:74:96:c6:66:d1:a8:c1:4f:89:0b:9b:56:2a:ed:
8a:e5:5d:4f:2c:5c:e7:86:3b:3c:4c:53:0a:28:21:
c3:c8:8f:f4:75:8d:8e:39:a0:15:fe:42:45:08:27:
e9:09:cd:9b:ea:1f:51:0e:bf:16:a2:ce:bb:bb:c1:
ef:94:1b:3f:0e:6c:38:21:03:03:44:e0:9c:8b:60:
ee:f1:f9:23:6c:81:e8:e3:cb:51:38:86:5b:a1:61:
cc:e5:a0:14:3e:d6:0e:84:e2:38:cf:59:d7:6a:73:
be:20:47:41:69:b0:c4:3b:86:ee:2f:4f:56:a0:62:
56:e9:ed:e9:69:da:36:89:06:44:a8:6e:73:01:1b:
b9:02:a2:3c:ff:b4:5b:62:b4:e4:63:40:fe:fc:fb:
55:47:f8:53:c5:dc:97:3b:7c:05:4f:fe:2c:40:97:
db:c7:8a:da:2c:ee:e7:da:f8:0d:60:dd:e7:ec:dd:
fa:69:65:df:94:e6:ff:1d:72:6c:48:2d:80:57:9d:
19:32:28:58:13:2a:4a:98:e3:38:46:1b:9f:e3:4d:
fc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AB:86:37:3D:7A:32:51:8E:E0:3D:B8:29:B9:06:B7:5F:80:B1:FC
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1c:ab:30:4d:92:c5:4a:6e:ae:66:d4:a0:93:1e:7e:d6:6b:
63:8d:70:f3:53:6d:a3:d8:f0:b2:48:93:53:a0:28:fd:9c:cc:
00:a4:38:69:19:ca:4d:22:88:25:61:52:28:c6:e8:7b:0c:f8:
00:5b:13:89:53:e8:62:2d:fe:0f:09:be:fe:fe:74:3d:23:d0:
b6:73:1f:c2:7a:9d:14:31:84:02:26:e8:04:ae:2f:14:f4:bd:
e9:cb:ba:04:4e:5c:41:f6:06:59:d9:c4:6b:69:26:f8:1f:6a:
83:a7:7c:1f:26:d9:4c:26:dd:79:19:bb:f5:dc:b4:e0:51:4f:
c1:f7:85:5a:74:1a:8a:2c:f2:43:30:dc:37:78:7e:b3:70:3b:
39:ac:78:a6:2b:3f:0e:3c:e9:f0:3d:75:9a:af:2f:1a:b2:f7:
ba:56:8b:7c:a9:49:8b:01:05:d1:aa:67:c6:11:5b:50:a3:50:
29:2c:e2:a8:27:2d:6f:cc:c4:8f:66:d8:58:14:cb:1e:de:5f:
b2:84:d6:9a:b2:b4:40:4c:4f:ef:9d:08:ee:f4:9c:69:6a:20:
56:05:ae:57:f9:c4:10:fc:53:74:25:7f:a4:be:56:0f:3a:47:
e5:de:b1:69:04:12:7b:ad:09:b4:93:eb:c2:16:d5:ae:c6:de:
c0:60:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:26:19 2026 by rpki-client