
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier: J54saHNh1zMRy4X7dkoBjfkJ1MysW6kzKbBMYaNlIgg=
Subject key identifier: A3:95:C1:20:41:99:E2:AA:1A:6E:F3:3B:05:FD:03:04:AF:A8:3A:08
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial: 01A0D64C3FD0A1CDD8CEDC79217C42A05353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number: 0E6E
Signing time: Fri 25 Sep 2026 02:01:56 +0000
Manifest this update: Fri 25 Sep 2026 02:01:56 +0000
Manifest next update: Sat 26 Sep 2026 02:01:56 +0000
Files and hashes: 1: 8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa (hash: lpIuAWveKCKeQMUzXLJXzixQ82Be/vxjOdAft2Y84BY=)
2: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: A9sbkTk+Y2u6MSRpjwH7Jlbhy0mMxu09zVlnYWB2CPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:3f:d0:a1:cd:d8:ce:dc:79:21:7c:42:a0:53:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Validity
Not Before: Sep 25 02:01:56 2026 GMT
Not After : Sep 26 02:01:56 2026 GMT
Subject: CN=a395c1204199e2aa1a6ef33b05fd0304afa83a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:c0:6c:cc:27:43:02:d2:ed:40:8e:79:43:
93:03:46:3f:26:80:97:a6:f7:e1:87:0a:b9:53:75:
d7:47:75:46:eb:b8:00:a7:44:f0:cc:d2:c8:8b:1c:
bf:8b:86:33:78:76:4a:d8:b4:84:3e:07:25:1e:2b:
06:22:91:a3:fd:b2:07:c1:61:51:cf:33:f3:2f:cc:
fa:c7:0f:4a:2a:53:d3:82:fd:eb:24:cf:ea:71:3b:
c6:18:22:cf:59:f8:05:c5:63:41:c1:74:4f:83:c5:
0b:26:89:a3:43:91:d7:28:03:40:77:b2:5e:ae:78:
3a:b5:dc:bf:71:e2:e7:04:20:4f:97:de:27:de:0e:
4e:7f:b9:c4:36:3e:2c:f1:52:b2:ce:79:c6:24:34:
d3:26:7f:c5:39:03:1f:8a:56:d1:ed:5b:96:e9:b4:
67:a5:9d:94:da:3f:f2:11:ae:83:ce:30:7f:58:d9:
18:67:f8:d1:de:24:fb:fb:a5:58:be:46:65:bc:28:
09:0e:95:c8:0b:46:c1:84:0a:49:5c:b4:89:0f:dc:
0c:62:84:4e:21:8a:97:c5:fe:16:1f:9d:f5:4c:b4:
7e:20:64:e7:33:da:6c:77:da:95:b8:da:49:56:46:
c7:04:29:71:13:0c:48:51:64:42:ab:84:e5:19:e4:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:95:C1:20:41:99:E2:AA:1A:6E:F3:3B:05:FD:03:04:AF:A8:3A:08
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:90:d2:38:15:7c:33:d1:d8:07:fe:68:a0:b8:7b:58:57:a9:
7c:d1:5b:9c:f0:90:d9:2f:42:32:0d:8e:57:ea:56:f8:46:98:
72:35:f1:da:6e:c9:10:6a:82:1b:7f:21:7e:11:b0:cc:a2:83:
af:cd:83:3b:9a:18:08:7c:51:41:8f:02:7e:70:64:4d:f6:ec:
31:ed:c0:3c:3b:44:83:71:a2:85:c3:b9:f3:0e:27:9a:2e:fe:
c0:3d:60:7d:2d:7f:df:fc:a4:c5:11:45:52:d5:71:36:6a:4a:
1b:a5:a4:10:bc:9b:ee:dc:47:30:98:d7:09:c4:65:80:80:a3:
ad:03:45:af:fe:9b:a2:8f:d4:68:7a:d3:44:9c:9c:b4:d0:fc:
af:62:07:fc:5c:d4:93:f0:39:6c:43:b0:45:8f:1a:7d:48:2b:
02:4e:c8:7f:1d:b5:27:e9:97:47:88:68:7e:81:e7:c9:e8:70:
89:7d:12:fa:87:e1:8c:d0:4f:21:bd:ef:41:37:66:9f:14:2b:
81:c6:25:1e:bd:24:69:8b:a2:11:f4:0b:fd:3f:86:45:2f:57:
f0:f9:87:de:3c:dd:b0:6e:78:77:a8:02:e1:63:b8:9f:77:fa:
88:77:6f:fc:45:13:f0:b0:ac:5e:0c:87:c2:7b:c5:cf:0e:70:
17:50:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:30:50 2026 by rpki-client