Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: op33qWLZaPWGTzqzXl7qT+LjNXG7SV50mzTBfjquTJ4=
Subject key identifier: AD:02:08:67:4A:9B:49:EC:15:64:73:EB:1E:70:39:4D:80:04:BD:25
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 01A0D570177E42D3FF4A50DBD5B45BC13755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 108F
Signing time: Thu 24 Sep 2026 22:01:27 +0000
Manifest this update: Thu 24 Sep 2026 22:01:27 +0000
Manifest next update: Fri 25 Sep 2026 22:01:27 +0000
Files and hashes: 1: OxlIMVmAsJoaXxdeH-zRm0aZJmY.roa (hash: Ip5Y0NJgcptDCnlNShnY7k1XbFcnH0s1uGDobJEDi+g=)
2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: CTswCMBERFJ4vQo2gLxLYqQnjoCwpHb2lgqqseU9tI4=)
4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:17:7e:42:d3:ff:4a:50:db:d5:b4:5b:c1:37:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Sep 24 22:01:27 2026 GMT
Not After : Sep 25 22:01:27 2026 GMT
Subject: CN=ad0208674a9b49ec156473eb1e70394d8004bd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:17:8a:38:58:9d:e2:9c:57:41:0f:53:24:
36:36:48:7f:d8:80:d8:04:f3:6c:b4:4f:fe:9f:a3:
79:fd:88:a1:ea:b8:24:60:25:d2:fb:db:00:04:6b:
c9:eb:a4:0d:6e:42:4e:d6:47:e1:4b:bd:6b:6f:81:
5f:28:30:06:b1:ac:30:e4:d7:a5:b1:03:c4:35:14:
ac:0d:bd:6d:a4:c8:ad:f7:54:97:31:44:22:c7:68:
f8:cb:fb:bc:5a:ea:9d:0d:64:0b:94:ea:f2:5b:00:
4c:7a:71:5d:d8:32:e3:2d:01:1c:82:1b:0d:c0:66:
07:d7:e8:22:13:f0:eb:b4:34:4f:d5:82:cd:07:59:
60:3e:3f:6e:bc:e1:e7:16:39:ef:af:f8:c0:d4:f9:
54:27:ad:f9:fb:79:75:24:90:99:f4:b2:04:93:ba:
52:c9:67:86:20:c8:81:cf:8d:e0:90:5a:ca:a0:72:
ae:1f:a3:3c:be:d1:9d:18:ae:d8:10:c5:1f:4f:82:
c9:78:77:d3:af:41:0c:86:55:fb:90:93:94:30:0f:
b5:86:53:63:32:80:f0:ed:b9:2a:3f:bf:ed:ae:c5:
59:09:50:56:44:19:eb:3e:b8:06:cc:84:51:fb:ea:
13:37:e6:14:da:23:d2:ef:1a:a8:4c:9f:8c:59:a2:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:02:08:67:4A:9B:49:EC:15:64:73:EB:1E:70:39:4D:80:04:BD:25
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ac:94:cc:31:34:94:9b:83:4a:25:09:fe:da:87:9b:bd:e4:
47:0b:f1:d3:2d:36:6b:0d:f4:6b:09:3e:b7:5c:4c:b4:8e:78:
7d:92:c5:a4:c5:7b:7d:18:38:04:50:f7:bd:fd:d6:c1:b2:bc:
ab:02:f4:7b:34:53:73:56:77:9d:4c:13:a2:f1:7f:f3:8b:65:
c2:ef:74:bb:28:7a:8c:83:75:d6:70:ce:b1:2b:d1:77:68:1e:
f0:95:ee:90:bd:c8:70:3b:ba:8c:e4:36:11:23:7d:41:3a:27:
8f:f7:7d:bb:61:b8:d1:af:6b:59:92:11:92:29:52:d1:c6:e1:
fa:70:91:6f:4c:d7:5d:f3:68:80:6e:fe:8d:21:1b:c8:d3:50:
23:ee:c1:47:44:2e:08:59:94:df:89:8c:6f:87:d1:b3:bf:3b:
dd:88:2e:1c:9f:16:51:da:30:17:30:89:3f:c0:58:98:2b:93:
42:58:47:6c:e3:29:e3:a4:d3:ab:8f:e4:c5:b8:61:0b:07:d3:
34:ee:5f:e9:16:bf:4e:80:ef:b2:bd:12:90:5f:89:79:3a:5c:
72:7f:a4:21:69:d9:4e:b0:69:1b:21:8c:db:66:b6:47:5a:3c:
8a:f5:f6:f2:ed:0f:d7:32:2f:1e:11:0c:ab:a1:4d:81:3a:22:
25:81:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:48:53 2026 by rpki-client