Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: 04/ytFRkzpGIwk9mzEVIXleqEiOiF1KjYiPKbZhzLrM=
Subject key identifier: 17:F9:80:D1:20:92:C9:C3:CA:A1:58:20:E7:97:79:E1:57:FF:2E:B7
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 01A0D804A689E3A4521D20EB653C7CBC18D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 1A7F
Signing time: Fri 25 Sep 2026 10:02:58 +0000
Manifest this update: Fri 25 Sep 2026 10:02:58 +0000
Manifest next update: Sat 26 Sep 2026 10:02:58 +0000
Files and hashes: 1: 4F0qq7jfLgA4RD6gA7xmoqFDdAQ.roa (hash: 9eu4ch/L8yFJeyFrLuDangAXcD7SJ7FBYBZ7Pt6AAHE=)
2: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
3: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
4: IcJ3NkApy3ZuH6zT14y3NRctQTs.roa (hash: YF8uwCi6VEOuzkntI7vmvok4914x30Fr6OxRnIaMfhE=)
5: JPCCmHU8ahX1DiUwh62NrS-GovE.roa (hash: DSN9B+i7KCMrZdm0LMRFnAUtEcKLHOT2ja1tLaLHNkQ=)
6: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: Dyau0QRgLJWAFuJsfBgLBZoKqazrIR2BClAOO1q7T3U=)
7: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
8: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
9: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:a6:89:e3:a4:52:1d:20:eb:65:3c:7c:bc:18:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Sep 25 10:02:58 2026 GMT
Not After : Sep 26 10:02:58 2026 GMT
Subject: CN=17f980d12092c9c3caa15820e79779e157ff2eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:c9:ac:8f:b1:9d:c1:df:c6:87:e2:a3:4e:
bf:11:14:85:3c:a3:c2:7c:e2:0a:b1:c4:09:9a:cd:
2e:bc:17:e2:a2:10:82:84:36:67:31:7b:ed:07:7a:
70:dc:89:fb:5a:3b:2d:11:08:6f:5f:21:7a:63:a1:
41:7b:95:88:ab:be:12:d5:ac:1b:85:87:68:90:c0:
15:10:d3:c5:56:5f:bb:a8:4c:ba:15:e4:71:55:a6:
6d:3d:05:32:83:bb:3e:56:65:9d:8b:2d:4f:36:94:
c1:07:7e:9c:89:43:2d:cb:f0:a5:a1:82:9c:ff:a3:
a4:60:ec:69:56:98:5d:6d:7b:79:38:78:e4:1e:02:
05:48:6f:b9:22:ff:f3:da:50:58:c9:ce:f3:7e:73:
45:db:45:16:b9:34:61:79:42:c0:31:b2:f7:e1:ca:
7b:57:2f:45:ff:12:29:37:5a:a4:37:1a:d0:4a:cc:
86:54:ff:9a:10:98:5f:d9:ce:a3:25:8d:f9:f3:33:
77:35:dc:65:5e:72:f1:0e:8f:9f:3a:fe:3e:30:7a:
4b:bc:4a:8e:3b:98:4b:cf:08:34:56:8c:0d:8f:6d:
6c:36:94:f1:1e:67:f2:21:3c:a6:67:37:fe:e9:a7:
36:04:e4:f6:11:ce:29:d6:24:17:5f:33:38:d5:09:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F9:80:D1:20:92:C9:C3:CA:A1:58:20:E7:97:79:E1:57:FF:2E:B7
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:aa:e2:e7:9c:11:26:d7:50:59:ea:4a:4f:33:40:53:50:92:
78:c8:bd:12:e1:9a:c6:8f:d0:17:02:2c:b3:b8:58:d9:d5:3e:
b1:71:5a:79:59:ab:4f:cf:12:18:0b:96:b5:5d:d7:92:ea:c0:
e7:75:3f:dc:96:5b:0f:67:90:22:f2:3a:02:c0:c2:15:aa:66:
02:4b:41:f3:55:c2:5e:1d:ce:d4:34:df:51:c1:11:1f:3b:a4:
64:d8:03:1b:9b:d7:7c:24:d7:00:1c:b7:8d:c2:29:5e:58:c8:
e0:3e:c4:dd:80:a7:48:2b:3f:51:21:f1:65:2f:ce:5e:7d:4c:
77:1d:d9:f9:84:f6:42:2a:27:77:15:87:bb:a4:cf:9d:14:6a:
f7:fe:d4:b0:23:12:47:80:3b:15:2d:fe:4c:36:b9:7e:30:a2:
5c:71:37:8a:7b:23:44:c4:71:16:5d:8f:c3:3f:33:19:aa:57:
ee:f8:74:96:fe:32:8c:27:13:20:20:32:19:24:7d:e5:eb:53:
a1:95:e6:cc:f6:0b:76:90:ae:b4:ea:62:e4:34:10:3c:10:3f:
7c:8f:40:b9:c4:56:5d:17:ec:e8:2f:24:e3:80:71:de:c9:04:
58:68:44:3b:e7:35:79:19:88:46:92:eb:a7:00:b6:e1:88:0a:
b7:a2:f7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:57:38 2026 by rpki-client