Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: Zny0+VwSDtcXEc14MO703LULnoxna7yhq/VkNkAyxTk=
Subject key identifier: AF:A2:44:97:7F:16:42:28:AB:29:74:EA:F1:E7:38:F5:5A:B3:A1:8E
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 01A0D94D2B695BB11FC35C19B7764A0C9486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 1091
Signing time: Fri 25 Sep 2026 16:01:48 +0000
Manifest this update: Fri 25 Sep 2026 16:01:48 +0000
Manifest next update: Sat 26 Sep 2026 16:01:48 +0000
Files and hashes: 1: OxlIMVmAsJoaXxdeH-zRm0aZJmY.roa (hash: Ip5Y0NJgcptDCnlNShnY7k1XbFcnH0s1uGDobJEDi+g=)
2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: F6q7+YN1H/1ge2I7tH3eNR0eLJp2XROLktqQULEjvNI=)
4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:2b:69:5b:b1:1f:c3:5c:19:b7:76:4a:0c:94:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Sep 25 16:01:48 2026 GMT
Not After : Sep 26 16:01:48 2026 GMT
Subject: CN=afa244977f164228ab2974eaf1e738f55ab3a18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:a8:27:ac:b3:84:86:0b:54:06:84:35:fd:
a7:68:e4:58:8e:c5:72:ab:c3:7b:59:b6:da:71:4d:
20:6a:9a:54:91:01:45:62:b0:4e:3f:b7:49:39:b0:
c3:6d:63:16:83:d1:6b:6d:45:3f:d9:7c:a0:e4:7d:
42:0d:e7:ff:a3:d3:0f:83:4b:37:9f:ed:39:42:0c:
fd:87:74:56:7e:21:5a:46:eb:50:13:5a:14:be:dd:
97:b6:fa:69:96:95:ce:86:11:59:6b:ba:a5:ea:79:
fd:46:82:4f:fa:c4:00:54:84:bd:a5:e3:9d:2c:78:
ed:ec:20:95:02:9c:af:33:b8:2c:31:1b:6b:d2:4e:
1b:ee:2b:cc:69:34:9a:4d:99:e8:dd:88:d7:3b:de:
62:8a:8c:6d:5b:6d:e0:35:ca:26:21:58:15:f6:f4:
8d:a5:b4:d7:5f:34:57:65:e7:02:41:83:29:22:c2:
1e:5b:e0:0d:10:66:5b:26:fc:80:ca:db:03:ca:5b:
05:29:8f:06:b1:87:d5:d0:3b:69:d7:fe:c8:b2:24:
56:b6:0f:0f:c5:77:ca:e9:82:09:74:9d:ad:ef:1e:
94:16:dc:33:d8:bf:13:9e:ac:e1:8e:49:49:62:1b:
36:16:a1:40:75:33:5e:a5:31:16:3c:d3:66:b7:11:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A2:44:97:7F:16:42:28:AB:29:74:EA:F1:E7:38:F5:5A:B3:A1:8E
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fd:f9:f3:40:a9:01:2a:ac:39:2d:09:a1:2c:3c:82:47:e8:
f2:ca:96:5f:46:a1:89:1a:39:e2:5f:3d:a7:f3:e4:fd:32:f6:
84:96:c2:80:d1:95:51:75:17:4b:7a:1e:65:75:84:88:30:92:
44:85:9a:95:e4:60:8e:1d:a7:a2:60:b8:33:e2:8c:bc:2c:e6:
5f:59:9d:a6:42:0e:9c:fb:28:6a:6f:1c:ef:b1:45:28:60:fd:
0a:c7:4a:1a:4e:0c:f1:74:4b:21:0f:4a:ec:53:79:4d:1a:f7:
4c:c6:56:c8:e7:4b:11:9f:43:99:38:36:82:cc:5e:7f:3c:cf:
33:03:4f:4e:23:56:49:73:51:d2:9a:f0:a6:6f:d4:2a:53:63:
df:1d:59:ab:ec:e6:55:f9:83:e6:0f:94:ca:32:76:bf:cb:5a:
48:20:8b:15:34:f7:08:a2:85:5c:7b:b7:89:5d:bb:cc:6f:da:
0d:c8:db:98:ea:67:97:e6:f3:29:03:25:05:85:5c:ef:f8:f3:
4c:e2:c6:d9:d0:80:ab:0f:0b:59:8e:bf:33:96:44:00:0e:e8:
f3:74:ed:27:c6:20:d8:e3:8d:7c:83:9a:73:b7:95:99:52:6f:
47:cb:bc:59:a2:dd:bd:87:29:5f:1c:5a:73:7f:1c:7f:fd:b0:
90:1e:3a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:52:50 2026 by rpki-client