Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
File: o2n7GRvuUc3HQUppYxl_hrvzE6s.mft (raw, json)
Hash identifier: rZawjmlLkvHDnEPGW6bta2phsFtF/sZ6vOqn0UwmVCw=
Subject key identifier: 34:57:6B:D5:5E:09:93:33:C7:35:61:36:CB:A2:55:B4:AC:0A:FA:36
Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Certificate issuer: /CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Certificate serial: 01A0E21941FA2170EE88C1418A13AD557CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
Manifest number: 14D6
Signing time: Sun 27 Sep 2026 09:01:41 +0000
Manifest this update: Sun 27 Sep 2026 09:01:41 +0000
Manifest next update: Mon 28 Sep 2026 09:01:41 +0000
Files and hashes: 1: o2n7GRvuUc3HQUppYxl_hrvzE6s.crl (hash: HGL1YYsaKut3Np+MgYgGFgTCT1peC6TgQqVQbReQoAU=)
2: u-PjOq1WjK6PsqFBvXy59id7R_I.roa (hash: Pz8fOepb3H13pqdKO3L1FSkff2yUOqZGUk6QeB6m10U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:19:41:fa:21:70:ee:88:c1:41:8a:13:ad:55:7c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Validity
Not Before: Sep 27 09:01:41 2026 GMT
Not After : Sep 28 09:01:41 2026 GMT
Subject: CN=34576bd55e099333c7356136cba255b4ac0afa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:64:8a:f5:8c:42:d6:0e:b2:bd:17:64:31:
cb:88:e2:20:a7:69:a4:64:d5:78:b8:21:8d:db:d3:
ac:6a:c3:ec:49:18:b2:4f:ea:67:04:13:4a:5b:5a:
bd:fa:67:8d:69:46:05:f2:df:bf:df:81:1e:95:51:
77:8f:0b:51:6e:3c:70:7f:ce:3e:a3:09:bc:a0:0e:
f7:54:94:6b:2e:e1:79:30:f3:24:e0:23:89:55:58:
a2:88:87:0f:63:98:c1:e0:e2:1a:87:64:34:e5:6f:
e8:d9:71:80:59:98:4a:b1:64:2d:05:b7:50:9b:83:
96:3f:e8:13:e5:04:e3:84:59:6c:6b:d3:ce:88:b3:
9f:75:28:76:c2:35:7a:41:04:54:38:54:f1:85:17:
e4:8f:e3:ce:6d:8a:93:41:80:c1:b7:01:ed:c9:ed:
e9:8d:fb:e3:11:37:e5:59:23:b8:1f:29:09:bb:47:
70:08:c7:8a:b0:55:f3:16:83:90:c6:4f:55:46:f2:
a1:bf:92:05:74:28:d1:5a:9b:5e:66:3a:23:9f:d1:
d7:62:93:91:6f:a5:29:e6:f1:0e:d4:f0:41:0d:93:
4f:bd:7e:34:ac:b4:a9:02:cc:7a:08:e6:e3:4b:e1:
d8:c2:17:2d:43:d3:fc:43:43:5f:f2:57:73:65:c8:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:57:6B:D5:5E:09:93:33:C7:35:61:36:CB:A2:55:B4:AC:0A:FA:36
X509v3 Authority Key Identifier:
keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:f2:d6:a3:54:bd:c3:75:ea:76:83:df:8d:7c:ab:6f:1a:fd:
c3:39:62:81:d3:2c:03:34:db:d3:10:a3:9e:8f:03:26:b1:3f:
08:78:fd:81:29:43:4f:56:4d:82:56:6c:35:0a:55:5c:f5:d3:
d5:8b:55:e7:0c:64:7b:8f:ba:64:6a:aa:4e:73:4b:6e:b7:2a:
00:60:cb:c7:95:a0:55:5e:d0:ed:82:63:18:ff:99:56:a9:45:
0a:d1:77:e7:9e:89:4d:1d:8a:24:6e:20:69:da:f8:82:57:c4:
f6:14:4f:4a:a6:b9:60:ae:05:27:17:27:df:57:79:a2:57:e4:
97:ea:84:15:1a:3e:42:85:a7:82:aa:88:5b:95:8f:06:c6:5d:
9e:45:a3:f0:60:e2:5b:d3:c8:a2:51:33:e7:c5:11:6e:92:12:
08:4b:3b:f2:21:46:aa:92:b1:d9:65:98:78:64:0d:44:a9:fc:
ab:b0:b3:04:f7:f9:41:77:b2:ca:cc:ea:b3:57:e4:f6:6d:78:
34:15:f9:29:80:43:64:36:71:a1:4a:37:51:5d:5b:1a:1b:a9:
69:be:b3:29:5a:f7:fc:16:6e:e5:e1:2e:77:67:89:9e:58:e2:
61:f3:fe:60:05:94:44:e6:ec:b2:e7:cd:ea:8f:88:18:5c:e0:
59:d0:81:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:40:20 2026 by rpki-client