Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json)
Hash identifier: ymyVWWC0VzGhMiOp6gD41poRN4CYQenNeAMZ95lJ+K4=
Subject key identifier: EA:A6:0D:A5:F3:F9:F2:24:F4:9E:5B:2C:DA:C0:0C:C3:29:3F:9E:19
Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Certificate serial: 01A131B447BFD05CD5506628D1C211CD73E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
Manifest number: 02C3
Signing time: Mon 12 Oct 2026 20:01:00 +0000
Manifest this update: Mon 12 Oct 2026 20:01:00 +0000
Manifest next update: Tue 13 Oct 2026 20:01:00 +0000
Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: OO9s1IxnFWGcuw71mB/D30jkblQE9zSVdHbWJITMRH8=)
2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:47:bf:d0:5c:d5:50:66:28:d1:c2:11:cd:73:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Validity
Not Before: Oct 12 20:01:00 2026 GMT
Not After : Oct 13 20:01:00 2026 GMT
Subject: CN=eaa60da5f3f9f224f49e5b2cdac00cc3293f9e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:7b:4a:2a:5b:ac:19:73:ee:20:e8:a9:c7:
58:eb:84:a4:53:e9:af:4a:ec:d5:21:b8:cf:ff:02:
f2:c5:5d:de:c5:92:d0:be:f1:cf:86:7f:61:7b:09:
01:08:d2:5a:04:e6:aa:de:58:d7:75:32:3f:c8:7f:
5d:26:8b:a2:25:b0:9c:b5:13:2f:85:65:3f:92:e1:
32:c8:0e:d1:09:c3:63:a9:fb:ec:5c:c2:21:30:fb:
4d:84:8a:a7:d7:45:21:32:33:66:ea:72:cd:b1:a6:
98:3c:07:02:a0:9a:26:03:bc:a0:c1:d1:7c:74:c9:
52:6c:d1:48:b6:3c:31:ac:7f:18:3e:84:43:bf:92:
4b:d0:f2:95:e7:01:ee:22:0e:01:35:8f:e0:16:20:
6a:0b:79:26:db:07:51:98:fa:0c:ef:52:a8:5c:9a:
f5:9a:1c:37:e4:0b:31:76:ec:9d:15:bb:e2:c1:e5:
c5:bd:aa:80:b4:8b:96:cd:7b:d1:00:66:8f:c4:7d:
02:7e:4d:23:88:65:f3:a7:bc:30:9c:00:36:38:38:
a2:3f:c9:57:c3:17:0d:a1:c7:45:48:d2:2c:ce:2f:
d8:da:f9:d3:0b:97:69:e2:1e:35:d8:e2:95:be:49:
20:a7:30:4e:37:fe:17:c0:2f:42:ac:cb:c7:86:ee:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A6:0D:A5:F3:F9:F2:24:F4:9E:5B:2C:DA:C0:0C:C3:29:3F:9E:19
X509v3 Authority Key Identifier:
keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cd:38:07:91:1a:bf:53:68:63:b8:02:2a:20:79:14:59:3f:
d8:90:e5:9a:71:28:b1:d1:06:b1:1b:a6:15:bf:74:64:6f:03:
c6:65:cf:cf:42:82:9a:7b:2a:bb:32:16:0d:12:61:1d:2c:77:
32:6f:14:76:0b:a0:d6:8e:d7:15:1a:f1:2c:a2:21:f1:86:27:
5a:32:4a:08:4e:37:b4:af:d4:81:bc:76:a4:c5:9b:fa:54:6d:
88:51:74:ad:39:b5:1c:99:cf:c6:c3:7a:7a:38:eb:f9:35:7e:
3e:41:d5:44:55:ce:9b:7d:fd:9a:37:ec:2a:80:e5:1b:bc:91:
49:3a:c4:04:6c:9c:72:6b:0f:a0:e0:89:cc:c2:91:89:e4:4e:
a6:27:0c:91:a5:e3:a8:2d:27:36:6d:90:fd:99:6a:b7:b6:72:
da:02:62:e4:21:8c:8d:4b:bf:f8:54:6e:0a:31:1c:dd:2e:3c:
e6:1b:51:4d:80:0c:d3:9b:43:12:34:aa:bd:bb:09:0c:a7:fd:
79:92:14:4e:e7:2b:db:e4:87:15:5b:7a:30:ff:0d:17:90:79:
ad:79:bd:81:d4:79:53:d6:c7:0c:9c:d4:03:26:c7:03:0d:8d:
64:7c:e9:28:16:83:e0:60:3c:58:8f:10:d9:9e:a2:f1:20:8e:
7b:5d:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:35:00 2026 by rpki-client