Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
File: mOUyD4Vr6C6odOktbYC8b5l4MA4.mft (raw, json)
Hash identifier: 5gvrgwHiCIANhGj1aMPH70OMHa0zQL7WFEIum5ZTIf4=
Subject key identifier: 02:E0:04:F6:28:93:1A:74:60:48:65:D9:6D:D2:CF:27:21:EC:32:94
Authority key identifier: 98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
Certificate issuer: /CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Certificate serial: 01A0DBA8E781101A08836115DBD07D27F2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
Manifest number: 0426
Signing time: Sat 26 Sep 2026 03:01:14 +0000
Manifest this update: Sat 26 Sep 2026 03:01:14 +0000
Manifest next update: Sun 27 Sep 2026 03:01:14 +0000
Files and hashes: 1: 46CB3rmq7ghb0IOigVJMslc8LZI.roa (hash: iNpxmitmZCNCk+8flAyzDSyitulva1I3mwpI1j7ulR8=)
2: cXM4klbaacUguvuXRN4gU4Cio9A.roa (hash: TvSKvxbQqZ/2OHUvXcP+0jqJAZh3aKDn2NH8HHVBK/A=)
3: mOUyD4Vr6C6odOktbYC8b5l4MA4.crl (hash: LxFCZ6vAsYCU24zKXY0FoTvd5B/or7rE2uEGM1n+vkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:e7:81:10:1a:08:83:61:15:db:d0:7d:27:f2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Validity
Not Before: Sep 26 03:01:14 2026 GMT
Not After : Sep 27 03:01:14 2026 GMT
Subject: CN=02e004f628931a74604865d96dd2cf2721ec3294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:b9:8e:6d:75:25:d8:97:37:9d:44:5a:0e:
a3:1d:11:65:6d:0f:08:1f:e3:e4:96:cb:f2:3a:9b:
96:89:43:85:33:d6:8c:34:5b:4f:f4:66:17:d9:12:
63:79:f2:21:28:b7:e3:a7:87:15:2d:0b:a7:61:e9:
f9:ce:d6:95:19:d8:04:49:b4:c4:0a:1f:f5:1d:65:
fa:5d:8e:3b:dd:e1:c0:01:7c:0e:9f:5a:0f:ef:1c:
eb:61:3e:e5:3c:4a:69:b5:d8:25:1c:7f:a3:21:12:
10:6a:52:a0:b6:05:3c:97:ab:9b:fb:ec:36:d9:c0:
aa:db:33:dd:43:84:60:24:c1:81:c8:23:65:e3:e9:
4b:d8:1b:e5:ed:65:2f:1e:09:54:16:70:77:53:a2:
e2:f3:1f:8a:34:c4:d8:8d:db:20:d8:06:c5:5d:79:
67:ae:96:07:3f:02:59:88:4d:c9:c0:75:c7:62:9d:
f4:33:08:a7:ba:f8:bc:01:1a:95:78:aa:ae:7f:cc:
87:11:82:8c:60:ca:b5:f7:2e:5a:ba:d7:8a:7a:af:
70:d5:44:49:7c:83:19:3d:e3:c0:f8:ca:fb:1e:3f:
e1:e6:a1:13:3b:97:79:0e:96:fb:21:fc:f1:e2:f9:
a2:99:6f:29:3b:c9:01:eb:b7:96:d8:dc:4b:c6:20:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E0:04:F6:28:93:1A:74:60:48:65:D9:6D:D2:CF:27:21:EC:32:94
X509v3 Authority Key Identifier:
keyid:98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b0:cf:38:10:03:04:23:62:0d:0c:db:80:43:d0:5c:fd:cd:
06:0e:16:67:71:46:1c:94:ec:29:7f:0c:9b:30:0e:c3:3c:5f:
e4:17:a5:9b:a7:ef:fa:91:d9:83:b8:f6:83:c0:32:1f:9f:91:
96:15:63:43:42:7c:fc:8f:62:53:47:b8:c4:e7:f8:60:9f:39:
f3:56:ef:1f:19:9a:b0:bb:b0:a5:71:95:39:f5:93:ce:33:da:
0d:10:68:6b:0b:63:7d:d8:b9:51:03:75:ee:ca:31:b2:a0:42:
83:29:36:24:13:14:9e:36:5f:3a:d0:7f:c2:7e:76:a4:c5:b4:
94:6b:ad:d5:a5:62:65:dd:cf:1b:19:5d:0e:8f:08:a0:b7:fd:
7d:81:53:81:fd:1c:5a:d3:25:b2:d6:94:c1:15:fa:44:e2:3d:
49:2a:20:29:9e:d0:e4:cb:ff:de:23:98:9b:72:c7:2a:9a:c3:
6c:fc:13:30:fb:60:b7:c2:1a:8b:27:66:81:35:81:12:e8:55:
e7:e8:b8:31:e0:83:42:6a:cf:de:0f:38:4a:21:12:4f:8f:b1:
8a:fd:05:0a:31:33:fb:92:21:73:f5:36:3d:66:4f:2e:16:b6:
f3:fb:05:a9:ef:91:42:b8:ea:f7:55:f4:4f:51:53:84:09:b7:
09:eb:87:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:23:56 2026 by rpki-client