Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: ReKw+oD5z7O/ma0/wztx7ymwqB/aMDqr0Z5Z/EGg7fg=
Subject key identifier: 99:E9:F5:28:36:3A:D1:76:01:A0:D9:1E:85:74:17:5A:FF:B4:24:F4
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 01A0D2DE09BDE8C20A43D676FF6D7C162DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 16A1
Signing time: Thu 24 Sep 2026 10:02:41 +0000
Manifest this update: Thu 24 Sep 2026 10:02:41 +0000
Manifest next update: Fri 25 Sep 2026 10:02:41 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: OAQRLE3Q5gmz9eQSGLJO912QNT7iHCciX4/F8gI5RLs=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:09:bd:e8:c2:0a:43:d6:76:ff:6d:7c:16:2d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Sep 24 10:02:41 2026 GMT
Not After : Sep 25 10:02:41 2026 GMT
Subject: CN=99e9f528363ad17601a0d91e8574175affb424f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:16:e6:33:38:3f:60:d2:79:42:3c:d0:c7:
80:bf:c8:f8:c3:2d:77:92:cf:56:1c:3b:ee:ef:89:
d6:95:75:bb:21:be:bc:a0:bd:b1:88:94:6e:47:eb:
cd:20:97:91:c6:82:96:09:55:a3:80:06:da:c1:da:
00:98:46:a2:8f:90:0f:62:e6:b3:9a:a2:ce:ca:71:
bd:bc:d2:2f:50:04:ce:fa:d0:29:46:17:fd:55:13:
a1:68:4c:06:07:6a:56:e6:48:36:12:6e:93:2c:29:
a2:c1:64:ca:bf:40:0f:68:f9:28:34:f7:af:f2:5f:
b9:2c:71:33:8a:3a:b8:a9:99:65:5e:e0:e3:71:80:
f2:a9:6f:09:d9:31:f6:75:79:06:e4:7a:62:f1:88:
a2:18:bb:9b:4f:0a:2a:0d:dc:ef:d1:0b:9a:e7:f2:
0f:0c:06:d3:8d:8c:14:de:2e:b0:90:fb:45:6e:2b:
4d:fd:df:a1:b6:ab:4c:db:9f:e6:a1:e2:ba:9a:56:
c1:89:d8:45:01:2f:aa:1e:f2:37:8e:fa:db:ae:b2:
fd:9b:19:e8:d8:bf:cb:63:08:fb:e1:36:d4:9a:61:
a9:74:b7:5e:75:44:6d:81:12:37:56:cf:b9:36:62:
15:9b:a0:93:7d:a5:45:60:bd:fa:ae:28:89:0f:c8:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E9:F5:28:36:3A:D1:76:01:A0:D9:1E:85:74:17:5A:FF:B4:24:F4
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:94:b4:57:56:4b:3c:d5:a2:f2:fa:dd:38:56:fb:b8:d8:7e:
3e:a0:06:02:cb:d6:61:8c:77:b3:34:48:13:3d:2a:55:0b:c1:
8d:04:72:08:2c:10:c3:5a:09:b7:69:24:75:cb:3e:4d:9f:3d:
63:c4:63:a3:01:1f:85:ae:ea:8a:b6:a2:59:0b:4e:85:81:c1:
82:f4:41:f1:db:ab:ac:98:a0:6b:59:89:d4:55:d5:0c:ce:07:
d2:06:a8:1e:a5:98:ba:d9:77:b0:dd:ce:c0:00:9a:68:8d:98:
f9:b6:44:6a:45:bd:73:67:b5:85:48:bc:52:8b:4d:84:42:ae:
32:46:8d:93:51:b4:78:5e:c7:50:f2:ee:6e:71:53:da:3c:07:
f1:58:24:7a:6e:e4:8a:9e:0c:ad:d4:39:86:07:03:24:6f:e5:
41:3c:a0:4c:f9:75:49:87:fb:33:88:df:c8:f5:53:71:d0:0d:
35:71:08:2a:2a:89:19:95:08:7d:18:0e:f6:a7:a4:ba:a6:ef:
91:05:86:7c:0b:c2:cb:47:b8:07:a2:b2:18:c1:20:a0:1f:ad:
ba:73:7d:52:94:5d:e3:4e:a4:6f:98:9a:2f:fd:11:a6:35:d4:
be:cd:f2:ea:b5:42:ec:a1:56:f6:df:b6:ab:52:29:d4:35:63:
0d:6e:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:06:17 2026 by rpki-client