Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
File: oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json)
Hash identifier: 3+drLGNOOq+NTv2ZsuKGeekJOPwvuNgDP0m0QPB0Ov0=
Subject key identifier: 5D:40:98:7A:76:5F:7A:3B:7C:FB:AD:FC:0D:C5:07:77:58:62:84:0E
Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Certificate serial: 01A0D9F19BD5A30871FF4D1C5D37F1CEE11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
Manifest number: 0BE3
Signing time: Fri 25 Sep 2026 19:01:24 +0000
Manifest this update: Fri 25 Sep 2026 19:01:24 +0000
Manifest next update: Sat 26 Sep 2026 19:01:24 +0000
Files and hashes: 1: AtniHnWS_m5XJnsdI3EUIOstzH4.roa (hash: KMRx9/qM9+4wF0F9XLzExOU323HbvcZo4zC4bgJQesg=)
2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: OtlbP3VokjaZ16cAIodci+8TpP0AjfOlLu66/15p78o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:9b:d5:a3:08:71:ff:4d:1c:5d:37:f1:ce:e1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Validity
Not Before: Sep 25 19:01:24 2026 GMT
Not After : Sep 26 19:01:24 2026 GMT
Subject: CN=5d40987a765f7a3b7cfbadfc0dc507775862840e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:90:98:5e:bf:ad:88:f5:9b:84:d4:15:88:
77:0a:05:3f:98:3f:37:84:16:2b:98:c1:50:2f:0e:
64:b3:b0:4b:ff:cb:4e:d2:20:c2:11:8d:a6:c3:c3:
c9:14:1d:37:f2:39:65:fb:93:05:1a:bf:36:c8:84:
df:8e:d0:8e:30:52:6c:4b:3f:3c:8d:24:f3:5d:ff:
0f:9b:01:05:24:1d:53:d6:36:12:39:d9:bc:92:62:
50:c7:a1:37:bc:a8:3a:1e:e2:34:52:7d:fa:45:9a:
2d:f3:48:1d:fa:7d:a4:22:4f:95:03:63:17:02:c1:
69:ff:e8:44:8a:f2:07:dc:a4:30:e1:7f:fb:3b:a8:
9b:31:1f:01:ca:27:3c:96:6b:8c:59:1b:d1:ae:31:
eb:64:ca:79:14:f0:a1:7f:6c:c4:c0:e8:3c:72:75:
0e:28:b7:e0:eb:8c:b6:59:71:5e:a2:63:3e:1a:0e:
c3:7b:5b:f7:b5:a6:20:03:05:f1:79:8f:ad:e2:e2:
a9:dd:a7:ab:72:60:3c:d3:d7:15:ea:fc:79:b4:21:
85:a9:d8:c7:f9:91:1f:38:c2:e2:aa:8f:0c:8d:d1:
ae:d3:ef:70:7d:11:ee:4f:51:f3:63:4d:8b:93:44:
16:bd:df:78:f7:5b:6d:14:28:de:ed:be:98:83:7b:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:40:98:7A:76:5F:7A:3B:7C:FB:AD:FC:0D:C5:07:77:58:62:84:0E
X509v3 Authority Key Identifier:
keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:19:03:bd:bf:18:ac:a8:61:d1:1c:45:61:56:ec:6c:41:86:
e7:15:07:3b:b3:d4:6c:0c:37:b2:cd:99:66:a4:a6:f1:cb:88:
0c:ed:db:c0:83:06:6d:76:66:57:c3:66:b6:a6:a1:02:31:b8:
7a:78:57:c9:44:f2:0f:d0:4d:29:2c:3a:d3:11:ef:d6:c1:a9:
c5:47:16:74:7a:75:27:96:8e:7f:25:aa:64:ff:f6:c9:f4:8c:
f2:bc:36:8c:55:52:37:07:92:fc:78:45:13:16:65:e5:82:08:
87:ce:1d:4b:fe:17:20:9d:4b:80:5d:b3:99:03:d5:e5:23:fc:
3e:6f:ac:64:2c:b8:54:71:a4:eb:bf:cd:29:13:54:ab:00:1b:
b5:d1:00:77:23:dd:bf:61:49:6e:37:ac:95:dc:56:f7:4e:96:
e2:6a:12:0c:4c:97:ee:9f:d2:54:db:0d:42:78:e8:34:78:15:
92:11:81:0d:38:5b:25:af:26:4b:bb:f6:4c:f6:aa:1b:90:88:
c2:cc:5d:1f:69:f2:be:67:2d:5c:84:8c:f9:62:87:f0:91:ff:
51:0e:e6:36:57:01:a2:0f:e2:e6:00:99:a6:87:e1:03:d0:1a:
33:ae:71:f7:4e:12:ce:14:21:8f:2c:ab:32:e5:7e:e9:db:74:
17:62:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:04:19 2026 by rpki-client