
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: L+Uuwrxog9ppqVSiBCX/fr1PmPzh6VcvQVUHxJsId7Q=
Subject key identifier: EE:79:51:F2:BF:60:38:D9:C8:DF:61:7A:0D:13:E3:40:7F:D0:F9:13
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 01A0CBFE9EB71C9E3421C8C614C90C6CDED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 02:00:56 +0000
Manifest this update: Wed 23 Sep 2026 02:00:56 +0000
Manifest next update: Thu 24 Sep 2026 02:00:56 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: 7B2XS6aeEH87XkQUyQ9YPArfo8vOpiVbtBB5B+84WsE=)
2: v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa (hash: +Ugur4Zx8N+utcUH4v+QIfdsbIfqtrKkMiSiyk7i/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:9e:b7:1c:9e:34:21:c8:c6:14:c9:0c:6c:de:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Sep 23 02:00:56 2026 GMT
Not After : Sep 24 02:00:56 2026 GMT
Subject: CN=ee7951f2bf6038d9c8df617a0d13e3407fd0f913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:22:54:f6:d1:41:90:21:4b:cf:62:45:8d:cc:
7f:0d:1b:44:20:6a:59:d4:a6:ce:a4:29:34:f9:0f:
ac:0c:4e:c7:66:99:ea:54:94:4a:a3:a4:6d:f4:b0:
a6:f4:da:18:6e:4c:70:78:2b:07:42:3e:7b:4a:59:
eb:c4:f6:88:78:c7:75:ec:a3:41:a7:e4:42:25:40:
5a:9d:d0:42:35:ed:32:69:d6:25:64:5a:0d:f2:f9:
f0:20:bc:b7:c3:c7:5b:de:7b:3c:06:c2:c0:34:c1:
31:82:c3:55:93:7f:2e:da:d1:57:cb:de:3d:b6:4f:
64:a1:a3:88:40:d6:c7:c0:0f:56:b0:60:cd:92:ee:
81:5a:0e:d0:6f:aa:31:d7:05:7f:57:1e:f6:4d:ef:
fc:05:df:24:75:54:1b:07:f8:b8:a7:5d:74:3c:a5:
55:15:06:3a:12:cd:76:61:49:dc:36:68:5b:d5:61:
6e:12:ce:10:38:66:85:f5:b3:95:b7:25:be:24:71:
cc:cc:14:12:00:53:ac:8c:0c:24:62:87:28:d7:df:
2b:fe:be:e6:e2:d4:0a:e4:f8:91:2f:ff:17:e5:7f:
dc:ac:ed:cd:90:5d:2d:5f:ec:1b:83:e2:70:b0:05:
79:35:34:7c:ba:6e:37:3a:f6:70:bd:86:27:dd:8b:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:79:51:F2:BF:60:38:D9:C8:DF:61:7A:0D:13:E3:40:7F:D0:F9:13
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1c:61:fd:b2:42:d0:dd:2c:f9:d2:fe:af:ec:bd:2d:c1:83:
c6:3e:d6:cd:dd:03:e8:d4:c1:b5:2d:f2:ac:5f:8a:b1:24:65:
d7:bd:72:c3:cc:ba:d1:41:b1:2f:c4:cb:76:40:73:55:c9:ba:
17:ef:b9:99:72:3c:14:2a:2b:eb:8b:73:45:b6:89:47:ef:40:
19:03:78:c7:da:9d:7d:d5:f1:98:a4:b9:c2:af:68:1c:67:ad:
d8:1e:57:10:4d:4c:d7:c3:86:07:a1:cb:93:a9:1c:23:5c:17:
7a:81:cc:57:eb:e5:08:12:4f:16:92:38:ff:06:86:f9:4f:eb:
26:b9:9f:10:fd:62:90:5e:5c:9a:3b:57:27:01:d8:0f:8a:ba:
08:b6:d7:86:ff:74:ef:3a:e8:44:90:9d:23:8e:46:77:5d:33:
01:bf:70:e0:3f:de:a4:99:aa:26:98:4f:b0:1c:59:f6:bb:eb:
44:fe:d7:aa:b3:4b:3e:51:bc:d2:43:86:04:8f:45:f5:2d:d4:
17:1e:aa:66:1d:09:fe:78:15:48:cb:04:e1:5f:c0:cf:b4:d4:
22:e2:8f:89:2c:2b:dc:d5:e2:16:19:b6:66:38:40:7e:ef:b3:
2d:61:5a:22:ba:12:ec:7c:0c:32:cd:3a:7f:8b:06:49:6c:2b:
e1:c0:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:02:31 2026 by rpki-client