Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: j6P8aRbKBJj7wmLH69YsdR33E29fG74Vw84aATJO6Ig=
Subject key identifier: E7:B1:7D:1D:6A:64:91:68:D7:1A:BC:0C:56:0C:55:3F:0F:8D:7C:25
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 01A0EB53465FFB2362F29E644EB270C6FC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 1A89
Signing time: Tue 29 Sep 2026 04:01:38 +0000
Manifest this update: Tue 29 Sep 2026 04:01:38 +0000
Manifest next update: Wed 30 Sep 2026 04:01:38 +0000
Files and hashes: 1: 4F0qq7jfLgA4RD6gA7xmoqFDdAQ.roa (hash: 9eu4ch/L8yFJeyFrLuDangAXcD7SJ7FBYBZ7Pt6AAHE=)
2: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
3: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
4: IcJ3NkApy3ZuH6zT14y3NRctQTs.roa (hash: YF8uwCi6VEOuzkntI7vmvok4914x30Fr6OxRnIaMfhE=)
5: JPCCmHU8ahX1DiUwh62NrS-GovE.roa (hash: DSN9B+i7KCMrZdm0LMRFnAUtEcKLHOT2ja1tLaLHNkQ=)
6: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: mlNKEtsDg8ZxPJmP2jvBhb5x3h6cN3A5beGhLhSASv0=)
7: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
8: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
9: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:46:5f:fb:23:62:f2:9e:64:4e:b2:70:c6:fc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Sep 29 04:01:38 2026 GMT
Not After : Sep 30 04:01:38 2026 GMT
Subject: CN=e7b17d1d6a649168d71abc0c560c553f0f8d7c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:1f:c7:03:62:79:30:24:48:5c:03:44:36:
b0:6a:7f:7d:f6:e9:6c:84:95:d2:fe:18:e4:f1:f7:
d8:1f:69:3e:63:5f:21:56:26:fd:4e:13:c2:93:1c:
42:32:6c:00:84:c3:1c:c4:2d:e0:30:4c:7f:e9:11:
3f:7a:d7:6b:da:50:a4:24:1c:ab:e4:1d:09:57:20:
6b:07:d6:d1:a9:a3:33:28:a9:20:5d:2d:c3:f7:2c:
90:37:4e:a0:71:77:8b:f3:e5:9d:07:00:13:3f:ba:
37:71:24:20:8e:1e:cc:fb:ce:4c:01:82:b4:e1:59:
08:3e:a1:1b:71:f1:29:5d:fe:ba:86:0b:54:94:09:
3b:42:89:9a:b9:0c:dc:2a:d9:dd:6c:ca:c6:9d:70:
f4:da:2c:70:7d:48:ae:37:64:e6:ce:f2:60:f3:78:
58:2e:db:e6:ae:59:7d:55:05:65:48:80:e1:d8:00:
40:c0:9b:75:5f:43:6d:48:ec:4a:79:40:ef:cd:ca:
e6:43:45:be:ca:64:41:8f:98:21:9b:b7:5c:93:a8:
6b:01:f7:1e:26:c7:45:9a:36:22:bd:d4:a4:41:e5:
93:44:a7:2a:01:7d:e6:c7:d4:b5:0e:9f:78:9b:e5:
6b:53:78:e3:0d:14:a2:b4:c2:6a:41:ae:9c:1e:7d:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B1:7D:1D:6A:64:91:68:D7:1A:BC:0C:56:0C:55:3F:0F:8D:7C:25
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d1:f0:dd:51:96:50:9b:47:39:9d:a5:1a:09:fc:d0:f0:52:
0d:51:fb:e7:82:84:83:1d:a8:9e:9e:b7:c4:7b:5b:9d:b3:dc:
4e:26:f9:ee:4e:3a:8c:3d:c3:47:d6:2b:00:b9:55:ea:da:6a:
e5:e8:bf:c6:e1:c0:40:29:25:13:1e:5e:da:7d:0b:43:0a:86:
6b:17:7c:ad:dd:ea:e9:05:8e:ba:db:d7:f6:ce:08:13:c5:02:
24:dc:1e:3d:bc:87:17:8c:32:45:2b:47:a5:db:09:79:a3:84:
eb:a3:35:ed:e2:f3:92:19:44:41:0b:0f:7f:be:cd:a8:6a:47:
32:fb:d0:f1:3c:0e:51:64:31:4d:8c:7d:b2:b5:58:15:09:46:
8f:e5:0b:74:8e:47:8e:4c:e6:17:6a:c7:ad:c6:14:db:c5:4b:
3c:95:c3:ca:9a:c6:4b:36:ac:fb:52:13:90:e8:83:d0:66:2e:
41:90:45:b9:01:b5:7d:97:c9:60:ec:80:2a:9d:5b:70:13:69:
53:6f:f9:40:3f:be:39:e8:f8:3a:4f:a8:60:da:98:ae:ee:ac:
0a:be:b8:fd:ee:7b:76:5a:f7:f0:25:3c:a8:6c:57:66:ad:1c:
11:fb:3b:58:ff:ce:1d:22:4b:c0:a2:94:60:81:d5:b7:ca:8c:
ab:77:fb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:16:53 2026 by rpki-client