Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File: oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier: mtAFyAupvZhFsx01eS+BbWK/bHXVGM9/Y33SMrm4vnk=
Subject key identifier: 3F:C7:A1:21:FB:13:C6:F2:99:41:B9:44:57:7D:9D:89:CA:17:35:B7
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 01A100233A2D11D7298E40C7C4D6EE156AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number: 1752
Signing time: Sat 03 Oct 2026 05:01:10 +0000
Manifest this update: Sat 03 Oct 2026 05:01:10 +0000
Manifest next update: Sun 04 Oct 2026 05:01:10 +0000
Files and hashes: 1: oSEjLh7tE7vzCV32cKgJCqIbOfQ.roa (hash: ok2Rd/dHH1xrcTOxIJkwbkzjT9nJscBwgfvl/QmA4kw=)
2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: JtcaJJ81noK+SfrqJtF4ccZAKVtYSlfNQLbwcDKi6kw=)
3: qp2csbkacIhcPOH3gt72Onkgy-g.roa (hash: ryu959Oek09C+3HvM+qc6pJhm8EK7Sp/xMy1J1sbAYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:23:3a:2d:11:d7:29:8e:40:c7:c4:d6:ee:15:6a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Oct 3 05:01:10 2026 GMT
Not After : Oct 4 05:01:10 2026 GMT
Subject: CN=3fc7a121fb13c6f29941b944577d9d89ca1735b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2c:1a:82:e7:9e:cd:6b:f8:11:57:fd:72:d0:
45:ff:bb:68:d7:cb:54:ce:b9:79:a3:a5:17:54:19:
cb:0a:8e:53:b2:0d:a5:aa:06:a5:8f:0a:95:eb:ea:
67:e4:22:88:35:22:c3:0e:81:dc:54:39:88:da:bf:
26:03:5f:3e:db:c2:c8:f7:49:92:05:85:92:56:34:
06:c8:e3:1a:e1:a8:a1:f5:95:29:44:bb:a3:23:53:
64:aa:b0:14:a3:11:b9:d9:4d:39:52:24:38:6b:39:
b3:24:18:10:e6:64:97:da:22:1b:7f:7e:94:f5:47:
54:62:a9:ef:9d:db:17:1b:21:0c:05:dc:6a:09:bd:
d7:16:a9:85:0d:9d:24:b5:ed:bd:b8:5c:fa:db:f6:
2d:0c:3e:0f:95:8e:de:6d:d7:aa:34:47:bd:02:c2:
46:99:98:b8:48:0c:c5:20:43:d0:45:19:49:28:cc:
9a:12:50:62:e3:ed:04:e9:0d:5c:19:71:a4:46:ac:
75:e4:4f:3c:45:4a:e2:4b:fb:4b:a6:2b:6e:75:f0:
ba:15:78:d7:b3:e8:38:24:df:c8:eb:e6:89:e6:ed:
c9:13:52:ef:af:f6:be:7a:ae:3e:78:f0:f0:12:cd:
5f:3b:09:32:a8:0a:d4:07:b4:80:94:1c:f0:55:b2:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C7:A1:21:FB:13:C6:F2:99:41:B9:44:57:7D:9D:89:CA:17:35:B7
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:86:cd:1d:b4:cf:c6:f6:b1:2a:bc:3c:96:c5:d6:4e:09:58:
98:d2:f9:6a:ed:43:c0:1f:17:b1:fb:30:04:a3:7e:33:0a:43:
3c:84:f5:6a:b5:9d:d6:9e:3b:45:8d:f8:a9:dd:88:33:0b:2b:
79:e7:06:7a:fc:a3:04:19:93:6e:ae:ed:53:88:13:5c:cb:df:
65:1b:71:af:98:1e:7f:4a:a2:6a:7d:0b:6d:e8:6f:05:f3:33:
ba:cb:e0:66:66:0d:80:44:e1:ce:21:0b:ac:2a:87:11:05:24:
2e:16:c1:bf:7f:4b:09:6d:24:62:89:58:7a:e7:a9:ac:ab:fa:
e9:c2:f8:a3:7c:b1:31:b9:e4:c5:ec:67:cc:fa:ef:61:bd:88:
ef:ae:89:ef:93:89:0f:b7:17:8a:12:13:9c:20:9d:45:f2:a7:
81:58:92:bc:54:14:b6:9e:67:73:51:30:86:f5:44:67:32:6b:
74:e7:4a:e4:19:e8:d0:ac:ea:08:24:69:88:cb:d6:f4:d8:40:
a0:39:57:61:29:c5:75:cd:25:51:a1:dc:64:f5:b4:1d:59:74:
98:ea:b9:d0:ee:71:82:3f:e1:1c:1d:a0:a6:65:6d:62:bf:02:
73:f5:99:ef:fe:2c:ec:61:a9:d6:e8:39:88:94:b5:6e:b1:af:
ba:35:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:05:21 2026 by rpki-client