Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: 0a6yg3v10yxUiDOMtt+zMhF6YxJYMAMc4laz1uIXdWY=
Subject key identifier: 89:22:D9:85:18:E7:C8:78:AF:4A:9A:A3:15:5B:75:7A:3A:6C:DC:33
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 01A0D796D3AE5758E45719EE391D68DC291F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 11B4
Signing time: Fri 25 Sep 2026 08:03:00 +0000
Manifest this update: Fri 25 Sep 2026 08:03:00 +0000
Manifest next update: Sat 26 Sep 2026 08:03:00 +0000
Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: MXBJDZMTRfwfHdMKLdii9lps43qaG2gYzlHN2yMSaGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:d3:ae:57:58:e4:57:19:ee:39:1d:68:dc:29:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Sep 25 08:03:00 2026 GMT
Not After : Sep 26 08:03:00 2026 GMT
Subject: CN=8922d98518e7c878af4a9aa3155b757a3a6cdc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:88:66:fc:55:5c:41:4e:d3:43:6b:18:0e:
cc:f0:7a:9a:f4:2b:6d:a0:19:37:ae:18:ea:98:ff:
cb:9f:a8:ba:60:f4:2e:66:00:85:e5:a6:97:3b:98:
99:20:c6:e3:de:ad:39:14:f2:f5:a1:1c:90:79:ff:
65:bf:04:a6:db:9a:ce:8f:31:06:d3:87:9d:a7:54:
1c:05:33:93:0f:c9:3f:37:3e:b5:67:6b:b5:db:1e:
aa:2b:d5:2b:90:a1:66:89:2c:e3:07:ba:23:00:ae:
46:6a:77:1e:34:83:9d:a7:fe:57:aa:6a:b2:42:61:
37:71:53:ef:dc:b3:d9:1c:c8:97:35:ca:ae:99:05:
ad:df:b8:cc:84:c5:c4:28:6c:fb:29:fa:42:55:52:
dd:12:10:2c:06:63:f3:47:b8:53:8f:4f:76:4b:15:
8f:82:ca:66:e0:06:84:f9:f5:4d:83:15:e3:e4:82:
85:ff:af:77:ef:7c:53:75:b6:61:c5:5f:96:03:8e:
83:fc:38:96:a4:da:a4:27:c7:22:cd:67:45:ba:d5:
ff:d0:d7:50:4b:db:5f:5b:c1:e2:1d:a0:cf:1a:a5:
8c:72:13:fe:0a:3d:0d:82:a7:67:88:15:cd:cd:39:
00:a4:98:13:7d:dc:c1:43:d4:59:f9:ce:09:8a:9d:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:22:D9:85:18:E7:C8:78:AF:4A:9A:A3:15:5B:75:7A:3A:6C:DC:33
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:94:cb:99:18:b0:89:c2:5a:cb:bb:69:82:fa:04:69:63:3b:
c3:82:ac:69:1d:94:d7:f8:a0:51:47:e4:68:1c:b1:c5:93:fa:
0d:bf:cc:e5:81:3c:ee:f8:29:24:cd:01:a3:56:e8:1a:2a:40:
a4:28:c9:43:58:4c:dd:63:e0:86:f4:40:9b:d0:76:49:6e:ea:
68:e3:e8:33:68:6e:97:3a:28:b8:1f:df:71:97:2e:24:01:b2:
cb:5d:8b:b4:61:8f:d2:ce:be:d4:ba:eb:22:3c:17:02:ea:ca:
b4:1e:ad:32:6d:d5:7b:0e:e2:35:d0:48:63:1c:bc:e4:7e:cf:
3d:fc:7c:3d:af:36:3b:70:74:ce:82:f1:82:28:3a:23:7c:15:
94:d2:0a:13:10:fa:34:02:0d:48:ec:25:00:50:a4:af:e4:dd:
6d:95:84:a5:36:92:e0:51:1d:53:eb:f7:db:62:2a:24:5b:0c:
df:05:96:e8:31:0e:ad:c5:b0:0e:9d:fe:3d:9f:f9:53:8e:15:
69:05:7b:1d:d0:8b:b5:f4:da:e8:4b:aa:7d:db:ee:87:de:31:
b2:84:f0:cc:7e:ab:cf:c8:9b:ee:94:92:fb:37:cc:34:aa:b3:
64:f3:7b:51:6c:21:02:2c:9d:79:6d:4e:ed:39:2d:b0:bd:0a:
2b:cf:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:54:08 2026 by rpki-client