Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: N/7xSoE4rr4owQtRvz/7M0Qc5+V1B814wCpE9A7yK5w=
Subject key identifier: 41:3C:3F:C5:4D:43:BC:03:45:67:D7:BD:F4:C2:5D:46:30:3A:9A:A7
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 01A0CA4755189706F35AD1344E7CC95BF074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 0457
Signing time: Tue 22 Sep 2026 18:01:07 +0000
Manifest this update: Tue 22 Sep 2026 18:01:07 +0000
Manifest next update: Wed 23 Sep 2026 18:01:07 +0000
Files and hashes: 1: 5KIVeVQ6ATgB8-zTA_htC2jHMDw.roa (hash: zOXJ05ZKtRDWujtbHatrIa70pfwaUeWS9EUsC9cnW6o=)
2: PKjsey5cBzrl0JWfe47IqGPiYsc.roa (hash: hiWbQtDMwP7B1PYRdCuidEbqA+Byx4L5VqAKRcbQ+DU=)
3: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: LNDXmYBNF2RUzUxHpbgRbFKowmGAHj5yIsETA9pefXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:55:18:97:06:f3:5a:d1:34:4e:7c:c9:5b:f0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Sep 22 18:01:07 2026 GMT
Not After : Sep 23 18:01:07 2026 GMT
Subject: CN=413c3fc54d43bc034567d7bdf4c25d46303a9aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:6a:37:11:30:e5:4e:d3:8c:b6:b5:fa:de:
4e:22:81:99:c4:b5:83:d8:fb:c7:d4:66:97:28:1e:
3e:9d:a9:99:c2:99:42:70:2f:b9:e7:22:34:30:83:
f6:fa:51:76:8a:0c:e4:5d:a8:4a:69:79:e1:d8:17:
27:d7:54:2a:7d:c3:e8:ee:7f:84:63:ce:4d:6c:bb:
f1:f7:ad:83:b7:b2:bc:c8:1e:aa:19:34:3e:f4:11:
72:af:d0:b3:07:82:26:a4:da:77:8c:d1:c7:99:a2:
9d:28:b8:ec:66:ff:8c:cf:f9:d9:b3:0c:7f:0f:fe:
4b:5a:83:1b:39:a3:39:fc:7b:f9:8c:5c:00:a2:95:
b3:4f:33:63:2c:15:a7:d6:83:4c:88:f0:3c:af:05:
74:26:90:00:64:b7:5d:50:d9:ad:4d:39:0b:c0:09:
5b:47:dc:4a:c3:5f:34:3d:cd:bc:f1:ac:73:31:ee:
ca:3e:fd:ae:d1:9e:4b:f5:d3:3b:d6:2c:ca:9e:9f:
eb:e9:70:75:20:81:fa:91:13:39:86:aa:65:51:e6:
d3:db:16:cc:aa:b7:83:cf:d7:77:bf:e0:a6:bd:44:
ca:1e:ac:e3:ec:bf:4c:e0:25:59:53:89:9e:41:85:
76:2b:fd:54:77:5e:b1:32:a9:d4:38:1b:22:6f:fa:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3C:3F:C5:4D:43:BC:03:45:67:D7:BD:F4:C2:5D:46:30:3A:9A:A7
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:99:ba:59:ea:8e:0e:86:6b:80:9d:97:8d:70:79:c3:48:4e:
dd:4b:5d:b4:f1:43:61:39:ae:17:c8:04:09:3e:6f:fb:cc:67:
64:53:72:65:57:5c:cd:99:e7:8c:c2:39:70:9a:1f:41:6a:8a:
a4:ef:0d:e8:d6:f7:df:28:c7:8f:41:fc:96:a7:21:f7:f6:ec:
f2:88:7a:4c:0d:6f:c4:ad:e3:0c:80:8c:76:cf:e1:01:11:36:
9f:58:a2:81:67:0f:f5:1a:be:11:24:89:88:66:f9:6b:65:9a:
10:e5:4a:af:c8:83:1a:55:57:cb:94:2e:3c:9c:7f:c2:1b:1a:
8b:bf:c1:e2:c1:1b:85:f9:c5:21:0d:98:2c:0d:a0:cd:b6:e4:
19:00:42:45:22:89:c3:68:f9:94:62:d4:f3:ef:fc:c9:ed:e1:
b2:85:f4:d4:8a:06:6d:9d:88:34:39:25:cd:37:e1:e0:a7:00:
1c:d3:60:b2:15:25:67:44:71:60:86:03:67:b2:6c:07:6c:d4:
e6:b1:01:e8:02:08:cf:7a:d8:94:f3:b1:38:bd:41:b3:4c:8e:
8f:65:be:ca:bf:a7:0d:95:6f:4f:83:0b:ff:00:f2:58:9d:c4:
ea:3b:36:60:a4:dd:84:a4:44:43:02:c9:3d:eb:b5:d1:81:78:
a7:ac:9d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:19:18 2026 by rpki-client