Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: SHJe95yzPVAALQ434czFNoJpM73Id4vvFH3CnnwsDxo=
Subject key identifier: 38:4E:62:52:06:27:F6:BA:FF:48:36:75:5B:2D:30:1E:45:6C:52:BF
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 01A0FD2209222F20684E3AAA9E5D1D225EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 09CA
Signing time: Fri 02 Oct 2026 15:01:01 +0000
Manifest this update: Fri 02 Oct 2026 15:01:01 +0000
Manifest next update: Sat 03 Oct 2026 15:01:01 +0000
Files and hashes: 1: AhYsuHNUbK8a0XunNi5rUoZZd74.roa (hash: +Iz4KrzXh/10Mx5yBgfEhonyL6CqUOw7mbJ6px2LQGs=)
2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=)
3: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: 5JUtZu0vgmN1e9rcE09pjNgByRN497MIy613vbI+gjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:22:09:22:2f:20:68:4e:3a:aa:9e:5d:1d:22:5e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Oct 2 15:01:01 2026 GMT
Not After : Oct 3 15:01:01 2026 GMT
Subject: CN=384e62520627f6baff4836755b2d301e456c52bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:0c:f3:ba:dd:9e:8b:53:44:71:8e:f8:29:
ac:1c:58:dd:04:0f:7f:24:db:76:83:e9:11:85:c0:
b2:85:0d:88:f9:90:81:4d:05:34:5a:8d:63:88:02:
95:a7:7c:dc:65:36:40:57:a4:68:96:ce:cb:4f:91:
86:59:6b:9e:83:98:22:71:66:3f:d9:dd:cd:c7:81:
d8:7d:77:7f:19:a4:43:ee:28:d9:17:a8:9e:47:3c:
84:1f:d7:27:d4:fd:9a:69:0f:8d:a0:63:ec:76:5b:
42:c1:57:d6:3d:f5:39:b1:a1:34:fe:55:3d:ed:cc:
9b:2a:1b:d6:70:a7:63:c1:66:4c:25:fd:e4:b4:bd:
64:04:1d:6d:54:96:e3:f8:6b:d9:e7:28:3a:f4:f2:
67:06:17:4e:14:25:3e:e1:de:e6:30:ce:39:2b:e3:
20:56:91:28:9b:e6:7d:d0:78:63:b4:b1:eb:19:79:
c3:43:21:d2:db:10:3f:22:04:4c:25:9b:50:42:68:
31:dc:dd:24:60:aa:9b:18:89:c3:d7:e1:82:d5:dc:
fb:88:c7:b1:ea:c0:71:58:d1:40:c4:f0:b1:43:11:
4b:3f:79:9a:1b:bd:ef:7d:cf:77:4d:8e:bd:e3:c4:
41:50:71:c7:16:a8:1f:4d:28:d6:ed:6e:b3:3a:f5:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4E:62:52:06:27:F6:BA:FF:48:36:75:5B:2D:30:1E:45:6C:52:BF
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:88:a8:63:f5:50:e4:0c:6c:8c:0d:b6:b2:f8:19:e5:b5:49:
42:26:39:c0:8b:0c:e4:b7:07:db:36:18:13:e7:da:20:b4:43:
39:fc:b4:64:e2:fc:44:d3:e5:a8:53:6d:8f:a3:07:6b:1b:aa:
e2:11:04:a7:c2:f9:5d:60:5b:51:44:8f:a1:34:ae:ae:a3:82:
fb:4a:1d:09:9e:4c:82:bf:ec:ce:d8:d8:b6:bd:d8:1b:14:e4:
73:bc:d0:68:32:bd:a9:45:3d:1d:a0:dc:ec:5f:1d:02:ba:cd:
3e:d8:7b:f5:57:93:39:e2:96:7d:c2:dd:12:bd:bb:db:1a:e1:
e4:6a:e5:ec:95:28:43:dc:be:30:7b:cd:3c:35:34:b9:cd:35:
f6:52:95:f1:4a:79:ca:65:19:d3:33:88:4f:69:2f:f3:6d:7f:
d5:ca:ba:b0:74:9e:a8:5a:05:4c:59:ba:31:cd:9d:9a:84:f4:
13:4e:08:c0:9d:b7:ea:30:1d:11:35:00:0b:59:b7:a2:cd:b0:
77:f2:35:d8:77:63:aa:0b:8f:89:e7:36:25:3d:91:67:07:74:
0f:21:78:41:74:87:70:79:c3:ac:ea:21:98:7b:f4:74:4c:14:
e1:c6:c5:c5:05:0a:c3:fc:c7:aa:03:7c:7c:ac:b0:4a:45:31:
a1:b2:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:16:41 2026 by rpki-client