Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: 6AjFr+JZVfkpZvnrC5EntLuyO9miIzdmDdT6PQ7kx2U=
Subject key identifier: 2D:EB:C4:BC:5E:69:57:5B:70:64:09:53:E6:C9:18:4F:B2:80:EF:AD
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 01A0D315157D0EEEF02C4FEF608FC7CC20F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 1A89
Signing time: Thu 24 Sep 2026 11:02:49 +0000
Manifest this update: Thu 24 Sep 2026 11:02:49 +0000
Manifest next update: Fri 25 Sep 2026 11:02:49 +0000
Files and hashes: 1: McIHeSgScebcIpkPT4THS1jto5Q.roa (hash: fdb99PeEhGhn7zMv+ymuqGVl1nC5qV/Bm2pOoVJfRTc=)
2: QOOLONPw0mL0zRM6xNCnZ8lu_HA.roa (hash: t5PPKx70RsbnvkvxFWuFNiVu0RY4KKSyPrpAVr06jsQ=)
3: lfZvGuublTghs87OLe3YBrTz9rw.roa (hash: 33L3jHKPnMn4vOjKfAOLDS9PGwe/ZxS6Z/D2j8Yjgis=)
4: mBsIhxGKE9P1VcdBmaDVaq-y2yg.roa (hash: FjrD6MxlebN9aOC6ecpbIK3eMGRCmF4PugIT8px8qes=)
5: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: JrAJ7BAtSxW6P1cM/GXgYQvhReIbqVqk4jp+xRt+aIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:15:7d:0e:ee:f0:2c:4f:ef:60:8f:c7:cc:20:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Sep 24 11:02:49 2026 GMT
Not After : Sep 25 11:02:49 2026 GMT
Subject: CN=2debc4bc5e69575b70640953e6c9184fb280efad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:d1:f3:01:a0:8f:07:3f:56:6b:c9:e1:cf:
7a:28:38:f6:4e:3d:db:7f:c1:02:c2:96:d4:4a:45:
d5:4c:32:01:23:4d:76:cb:ba:34:52:86:3c:b3:83:
58:90:ce:39:83:89:6c:a5:48:d8:3d:98:9d:3a:89:
20:6b:bc:8d:a4:06:63:34:27:e9:a3:0c:86:ca:38:
55:8c:c8:9f:b9:0a:4a:25:29:a7:1b:8e:ba:cf:17:
42:dc:1b:05:1b:3c:97:66:39:40:71:96:00:99:a3:
8a:a6:58:40:58:fa:09:fc:88:34:54:03:21:81:60:
54:52:b3:09:f2:00:c0:3f:d0:10:38:0d:3f:c1:1e:
7c:d5:b0:81:46:ae:6c:72:08:59:09:ab:d3:a3:b7:
a6:f2:50:6e:5c:c2:bd:6f:ba:dd:07:12:2d:26:62:
90:cb:78:3d:2e:ad:32:1b:c1:db:a7:53:d6:94:a0:
b8:40:a4:3e:bf:74:b8:e5:dd:2b:45:7e:4f:a8:eb:
2c:58:be:15:a8:1b:dc:6b:2b:aa:97:cc:8f:ac:5b:
03:03:d8:99:5a:54:12:50:2d:62:61:53:2b:5d:4c:
82:58:31:b8:bd:64:73:6e:1c:fd:f0:ab:ba:30:02:
f0:8e:70:3e:9b:80:dc:89:f1:be:5b:3d:43:e1:73:
58:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EB:C4:BC:5E:69:57:5B:70:64:09:53:E6:C9:18:4F:B2:80:EF:AD
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ee:bd:bd:86:69:90:86:e4:0c:b4:44:d3:3e:3f:91:3e:a2:
2d:a2:2f:be:fd:dd:92:41:d9:95:f5:f8:6d:ab:98:06:bd:c3:
e8:0e:fb:f5:67:46:92:df:19:a1:0c:b3:bb:6b:f2:ec:e8:73:
65:d4:3c:3f:af:6e:84:f2:49:ce:83:5a:4a:37:b7:83:d8:cf:
0c:25:1c:35:31:ad:88:2f:89:64:2c:cb:58:dd:25:f6:48:68:
0c:22:50:7e:77:54:ff:fc:2f:dd:24:5b:16:e1:23:84:4f:51:
41:f4:20:4a:a7:db:c3:12:a4:83:42:a9:07:1c:15:4b:3a:dd:
e4:fd:ba:28:aa:3c:c6:a3:e1:29:a3:ef:00:69:01:27:84:96:
83:8f:b6:6d:38:b0:f9:f0:6d:1c:53:7b:66:cd:42:6b:a6:8a:
1c:fe:b4:d9:72:b3:27:93:6a:a8:1b:02:b7:4d:45:a7:9f:54:
21:c8:73:36:b2:bd:33:99:f1:db:39:05:15:13:a6:4c:f8:20:
a0:75:e6:02:ad:e3:30:ca:5b:1c:68:ec:0c:35:6f:97:af:20:
bc:37:b6:89:cf:91:6a:a5:5a:33:83:03:cf:2d:d2:cc:2d:a5:
9e:38:62:d2:5c:73:f2:fb:48:a5:78:dc:aa:f8:9b:5d:8e:18:
0c:8a:cd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:13:32 2026 by rpki-client