Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: xnRQOtaKhtOy8tWRAM1Tg8ArBzwSo4NXJB/495rZwDU=
Subject key identifier: 2D:AB:4D:32:5C:6D:EE:26:F1:66:2F:B7:67:B0:DC:02:87:75:2B:83
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 01A0D9BA370648CE04CC98BC6B93B2E2A21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 13EF
Signing time: Fri 25 Sep 2026 18:00:54 +0000
Manifest this update: Fri 25 Sep 2026 18:00:54 +0000
Manifest next update: Sat 26 Sep 2026 18:00:54 +0000
Files and hashes: 1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: WlvWD/LXAR15m3WiuZ69/ds9hgbTUvAt5VaUjtOcLCM=)
2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:37:06:48:ce:04:cc:98:bc:6b:93:b2:e2:a2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Sep 25 18:00:54 2026 GMT
Not After : Sep 26 18:00:54 2026 GMT
Subject: CN=2dab4d325c6dee26f1662fb767b0dc0287752b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:8b:f8:c0:0f:f9:89:6e:a0:9a:85:15:5a:
2e:5d:94:16:59:7d:55:10:a5:e3:71:ce:5b:0f:6a:
fb:c9:43:e9:87:80:da:eb:d9:68:c2:da:b8:79:84:
50:a3:f3:c1:69:c5:d3:c3:dd:75:f1:2b:9f:85:fd:
45:74:8c:0d:e3:bc:bf:49:aa:3b:d9:ba:f2:4e:ce:
fb:e1:21:9c:ca:5d:27:fd:54:25:be:0d:91:67:6d:
77:99:bd:98:54:f8:c5:5d:ae:90:26:ee:99:5b:05:
c9:b3:88:19:8c:f5:7b:af:95:8b:b7:5e:44:ef:68:
53:38:2c:76:6a:5c:2b:e8:53:8b:72:64:ec:dc:82:
ed:f3:0b:33:f4:a6:f4:e7:e2:14:3a:0f:8a:0a:46:
35:24:69:54:d4:18:17:d8:2d:b3:aa:72:58:b6:b7:
98:67:b7:90:b9:60:2d:67:53:9e:5d:bd:f0:e7:93:
7f:75:8b:54:9b:ba:20:51:ed:bf:6d:3e:e2:00:6f:
16:40:80:b6:9a:c4:54:48:28:b2:9f:a5:05:99:01:
31:16:d4:12:d1:be:86:11:ee:6d:c2:9f:af:8d:50:
ae:84:62:e3:ff:21:13:83:05:5c:ed:d2:e3:3b:7c:
5d:d6:8d:61:bf:4a:eb:cf:af:2d:18:8b:a1:de:b2:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:4D:32:5C:6D:EE:26:F1:66:2F:B7:67:B0:DC:02:87:75:2B:83
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ea:55:cc:e1:c4:87:1f:23:e2:72:a6:c3:55:59:85:c3:26:
69:2f:bc:05:1e:43:0b:6f:c6:03:a3:42:34:ee:88:b3:b0:64:
bb:42:db:e1:e5:4f:4f:1c:4d:6b:2b:85:96:bd:56:17:b8:d1:
44:9c:bc:1f:4a:7e:94:71:4c:90:9f:ed:88:7d:5b:31:0a:f2:
c8:25:30:23:00:5e:88:2d:07:67:3f:5a:3f:0f:37:82:7e:bf:
fa:a1:29:14:48:da:2e:f4:8d:46:e6:a4:ed:f5:44:5b:5c:75:
2b:11:84:fa:11:d7:42:96:ec:82:1e:8d:14:79:2b:86:8a:21:
45:4d:46:fe:ba:84:29:11:39:9c:91:33:12:21:55:a3:40:16:
7c:37:9d:c7:b9:64:7f:b4:98:ea:9c:f3:07:d3:e5:ff:85:47:
6c:5f:56:40:fd:af:b3:69:1e:e4:d2:06:04:57:d9:a6:5b:02:
bf:ec:c4:23:b9:9e:20:e0:00:63:7c:36:81:7a:aa:65:63:da:
12:20:5a:fc:2c:ae:3a:bb:92:f1:a1:bb:03:c5:35:0f:d4:f0:
2c:b6:bf:9a:e8:93:db:db:1a:58:f4:8a:c8:40:6d:50:ff:7b:
61:db:c0:a3:7a:93:90:86:e7:5c:10:c5:03:f8:3c:34:1b:80:
97:0c:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:28:15 2026 by rpki-client