Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: eenDKQFxqO2NT0bFyPoKfsIwjU5WYsdKPuCKvkgkoik=
Subject key identifier: 38:84:FC:78:09:BD:37:52:EE:CF:F8:89:DA:C8:2D:28:72:96:ED:F9
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 01A1005B0DE69F41CC8AACF9B78CF3B17A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 0A23
Signing time: Sat 03 Oct 2026 06:02:09 +0000
Manifest this update: Sat 03 Oct 2026 06:02:09 +0000
Manifest next update: Sun 04 Oct 2026 06:02:09 +0000
Files and hashes: 1: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (hash: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: 468gIltosum7KvzTr2IuQwPvevDM2Iq5epq3UCn1PDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 06:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5b:0d:e6:9f:41:cc:8a:ac:f9:b7:8c:f3:b1:7a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Oct 3 06:02:09 2026 GMT
Not After : Oct 4 06:02:09 2026 GMT
Subject: CN=3884fc7809bd3752eecff889dac82d287296edf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:50:a0:71:27:e0:56:31:6c:f9:6e:1b:8f:
24:f9:25:00:4d:99:59:d4:c4:05:31:1c:2e:43:b1:
40:d0:2f:a5:b8:ff:b7:c9:2b:8a:eb:19:5e:54:c5:
d5:27:05:5a:9f:3b:1f:1f:8e:df:b3:ea:6d:d4:25:
3a:af:64:df:89:bc:15:0c:d0:79:73:fa:15:d0:96:
ce:61:49:05:18:b9:57:78:35:0e:4e:d6:95:30:b0:
60:8e:5d:e9:dd:0c:7b:ba:3e:eb:76:c5:cc:45:da:
dd:67:c1:63:a4:dc:b1:16:4f:f3:6d:b8:c7:4f:74:
fd:ff:15:c2:f1:3e:56:99:07:f1:e1:41:64:71:35:
99:7e:e4:c1:41:3f:78:c9:38:e0:42:7a:cc:91:36:
45:5b:c2:8e:a9:b6:be:e7:3f:84:f1:bf:5b:8c:9a:
39:5d:0a:29:8d:77:a7:b9:93:0e:bd:97:52:74:1f:
a6:58:96:a1:24:a6:75:40:91:e2:1a:bc:47:62:33:
0a:4d:82:7e:d8:c6:ba:3c:02:c0:e3:e7:64:d0:84:
4d:b8:fe:54:85:d6:1d:19:f3:90:9e:03:0d:af:a1:
40:b8:4e:61:b0:ea:c7:72:94:0e:fa:7d:39:40:63:
49:f6:cb:b0:30:5f:6c:1e:13:0b:4d:f3:69:7b:f8:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:84:FC:78:09:BD:37:52:EE:CF:F8:89:DA:C8:2D:28:72:96:ED:F9
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e7:28:9e:10:96:4f:61:9d:f1:78:90:13:90:c8:54:bf:49:
7f:1d:a7:41:f3:74:fe:81:d9:6c:08:3c:1e:18:99:fd:7e:5d:
9b:bd:50:32:1f:21:5d:ff:79:00:82:90:ff:76:c5:8d:35:be:
b0:9d:e8:27:a3:ce:f1:8c:29:eb:b4:59:23:08:00:ab:09:21:
8b:38:25:8c:0d:d8:ed:9f:c0:1b:a9:46:b8:82:fd:d5:4b:6a:
8b:28:c7:7b:2d:f6:b3:c8:fe:25:08:cf:b4:f4:ba:0c:75:54:
76:fb:13:e8:f3:52:69:00:9b:1d:48:36:0f:89:89:3b:c3:8a:
6e:69:ab:68:c5:2c:75:8e:60:89:68:83:76:08:44:23:93:80:
46:d3:18:cb:7f:ab:8a:f8:34:62:07:b6:6e:2f:d0:fe:17:3f:
0a:7d:3f:c0:97:fc:69:c7:8d:c4:2a:a8:ed:76:dc:a7:dd:01:
df:e6:ef:f2:06:fc:88:8e:45:2b:89:18:f8:e4:50:e5:f9:9a:
14:8e:94:f9:09:71:d3:1f:b3:74:9e:21:a6:67:ac:cd:ca:ab:
4e:3f:b0:98:05:07:68:e0:2f:63:3e:18:65:d9:c8:11:60:7b:
61:2f:53:0d:8d:5d:96:e7:0e:38:7b:02:d6:2f:47:cf:82:15:
ff:90:6c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:40:23 2026 by rpki-client