Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: 0ZoxxOdaT9gXntHBRUPGtZWeWkycV6i/nz3StTr0fhw=
Subject key identifier: 8A:FA:6F:36:50:60:A6:07:C6:40:EC:1F:57:99:FA:6D:28:CC:35:FF
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 01A0D8045EE223B78D7D52C69C40FD469B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 10:02:40 +0000
Manifest this update: Fri 25 Sep 2026 10:02:40 +0000
Manifest next update: Sat 26 Sep 2026 10:02:40 +0000
Files and hashes: 1: 1-A4EU1ApAufBvEjd-muSLr7ANu8.roa (hash: RnoopnV8A6AgkKLGp6MuOa3nwgjKcYP0z+JNGgWdgZU=)
2: 9ahtSN9XLjXuAR5XQRQMSvAfggs.asa (hash: wf77PGlmiZZODXFzLO6ccUs8zaq7f7VnJ0py4/asRek=)
3: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: 9EsURxUUrlHdQAf8pW65GfKzP0mM+XlTjbs0iyQrUTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:5e:e2:23:b7:8d:7d:52:c6:9c:40:fd:46:9b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Sep 25 10:02:40 2026 GMT
Not After : Sep 26 10:02:40 2026 GMT
Subject: CN=8afa6f365060a607c640ec1f5799fa6d28cc35ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:87:5e:81:b8:92:3a:21:ce:c7:54:21:9f:
29:01:20:5a:d2:c6:2f:7a:ab:72:d6:af:50:5f:e7:
51:03:ad:7a:8a:36:ae:91:5c:82:a4:fb:68:7d:c2:
2e:95:d4:60:be:86:f4:92:03:84:b5:5b:80:17:bb:
0e:04:c6:49:10:40:6d:2d:e7:0a:04:75:fd:52:fe:
7e:02:ee:33:b7:bf:b9:b0:9e:2f:99:59:ce:08:c5:
d6:cd:a0:2e:9a:24:35:7a:75:7a:38:25:3f:29:a9:
09:d5:4a:2d:59:eb:16:fe:ed:e9:39:0e:44:30:af:
7e:37:04:28:79:5c:99:4d:0b:b5:16:80:6d:02:38:
30:11:d0:89:c9:ab:0c:45:3c:3d:6c:1c:a7:65:72:
c1:ec:8f:4b:99:b8:83:cd:0a:8c:9c:3a:11:16:3f:
38:2c:ff:a7:6e:f2:2d:96:76:40:65:b1:b7:db:46:
22:ac:c5:fb:bf:c0:4f:78:d3:77:d6:4e:51:e0:e2:
09:2e:c2:b3:6d:2b:4c:b0:0a:aa:97:90:54:65:07:
22:87:77:ed:75:ff:01:e2:2a:0e:fc:de:9e:c2:fb:
92:80:1b:4e:c1:37:e3:98:43:75:9e:0b:d1:c0:f3:
3c:63:6b:ae:6d:84:a4:ed:9e:41:43:2f:80:27:37:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FA:6F:36:50:60:A6:07:C6:40:EC:1F:57:99:FA:6D:28:CC:35:FF
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:39:ab:51:72:77:4f:12:a2:f1:20:21:76:30:12:57:ad:ab:
1b:74:67:2d:3e:88:58:96:ff:ad:4f:ff:35:cf:82:9f:fe:af:
8e:ec:56:ec:7f:99:67:57:fa:2a:c7:64:fd:bc:8c:e9:a2:9a:
e3:39:17:52:17:14:7c:0a:3f:cb:bf:b2:bb:8f:72:65:1a:bc:
f3:4c:66:0c:f2:3f:5a:37:7b:4d:9d:e2:2b:3b:e6:96:6a:eb:
29:61:2d:0d:0e:06:47:d7:c2:2a:3d:f9:4d:1f:55:ee:f2:b4:
89:ff:12:a0:f7:38:b0:79:82:55:4a:19:d5:63:8c:37:e6:ac:
27:1e:10:5e:35:3c:b7:b6:60:d0:c1:9c:18:91:59:b7:91:43:
3a:fd:b6:e4:6c:cd:c6:32:79:7c:51:02:1d:eb:d7:b1:7f:c4:
0b:16:0c:23:ec:58:93:b6:88:7d:6e:11:d7:34:ff:f5:5a:6c:
b6:72:e3:90:f3:f6:07:b8:ae:26:1b:1a:e1:c1:2c:46:b5:4d:
ef:5a:fc:34:a4:9c:d5:29:79:20:4e:20:03:0f:db:1a:38:7c:
cc:ae:5f:af:e4:d7:34:d3:08:ae:e5:06:b5:b8:dc:3f:85:cc:
07:6a:2b:40:a7:8f:3e:11:bb:4c:2c:80:cf:25:d4:f3:49:4d:
d2:12:84:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:59:47 2026 by rpki-client