Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: 7542iO134HfdHq//6gkWamBWFEgIKEo2CVcLrfNvx0w=
Subject key identifier: B8:63:D0:AF:91:26:61:99:BF:4F:B2:9B:C4:3B:EE:6B:FA:3D:31:01
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 01A11AF4EFC9BEEEF9D933FD0E2E002C802A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 1AA3
Signing time: Thu 08 Oct 2026 10:00:22 +0000
Manifest this update: Thu 08 Oct 2026 10:00:22 +0000
Manifest next update: Fri 09 Oct 2026 10:00:22 +0000
Files and hashes: 1: C53oCg7kRoBXocgajR_ZpGWJqn4.roa (hash: PkakGt0bbQY/2tn/r6YJVwwmAKETiXnq03+IjFLAZQs=)
2: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: xXIks/yNxPUbVl3MiufFV8A2g4lkAKdNfPqWK3DIuzs=)
3: SNyntTwsIIpefS6otR0nRSZTl0M.roa (hash: 7Q0juJOhLraTf25d8amnxUBMIjfjOKD/x6SVvjGWFnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f4:ef:c9:be:ee:f9:d9:33:fd:0e:2e:00:2c:80:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Oct 8 10:00:22 2026 GMT
Not After : Oct 9 10:00:22 2026 GMT
Subject: CN=b863d0af91266199bf4fb29bc43bee6bfa3d3101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:c9:d0:ff:6b:9e:17:0c:0e:a0:ff:3c:8a:
df:28:cf:73:67:a7:c9:eb:ce:9a:77:1a:90:b2:d4:
83:d2:c5:32:2a:bd:20:92:63:23:21:5f:bd:e0:6e:
fe:2c:ad:d9:f0:8a:0f:85:7b:ba:b9:18:f8:40:cd:
1f:bc:8e:73:bc:31:bf:3f:30:29:7e:b4:09:a4:5d:
4d:e7:93:e1:75:35:43:4c:2b:10:c7:de:ec:12:c8:
8b:6e:9c:c1:f1:98:ed:64:53:c8:ed:8d:fa:7a:8c:
ad:99:9b:c8:a6:32:e1:1f:81:b3:59:20:3f:9f:15:
21:88:a7:17:78:b4:d2:37:d8:06:8e:b3:3a:4f:dd:
db:fe:70:f2:40:ad:3c:67:bc:56:92:4f:dc:eb:fa:
66:a5:ba:b8:f7:d7:44:55:dc:bc:f4:95:b8:52:52:
38:0d:42:a5:0f:00:62:d7:cc:64:27:ad:d1:14:0d:
ff:93:40:fb:6a:bd:90:a7:e2:f1:54:03:31:b8:7b:
26:bd:6d:fd:c3:5e:cf:dd:18:2f:b0:85:dd:4f:40:
be:f8:85:dd:ad:de:05:42:e2:74:0b:42:ec:12:cc:
2d:f4:0d:48:8f:d0:ec:b1:52:1b:5b:95:ea:4b:f2:
39:b9:f9:30:84:79:93:ca:59:1f:39:0a:5b:04:f8:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:63:D0:AF:91:26:61:99:BF:4F:B2:9B:C4:3B:EE:6B:FA:3D:31:01
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c5:f0:45:f4:77:0d:8f:55:98:e6:0a:52:54:bc:6c:e2:38:
03:b8:f6:7f:1b:f5:3a:d2:a0:95:4b:e7:6a:5f:bf:b5:a4:07:
22:1b:94:b9:e3:e6:c8:8b:3e:84:6e:72:1c:6e:0b:fa:a2:2a:
92:41:02:8a:40:6b:c5:c2:ed:60:64:e6:82:ee:8f:f8:24:1c:
58:ee:99:57:8f:9a:26:8f:76:b2:58:58:2b:00:cf:cb:aa:d4:
66:e1:07:91:50:40:17:ed:92:05:34:80:c2:38:53:97:54:1a:
93:20:bb:79:6e:67:ad:7f:52:d8:78:07:cb:51:a3:00:ce:fa:
ed:7d:8b:a1:df:e6:7e:fd:db:c5:6b:51:10:d2:b4:7f:2a:35:
b9:b3:df:c5:8d:27:a0:64:97:80:fe:81:1e:9e:40:ef:d8:5e:
b2:e3:44:46:f4:5f:97:63:02:84:f9:3a:64:c5:6e:c4:2d:3d:
f6:1d:3a:1a:a4:b4:56:3d:1b:f1:0f:99:bd:6d:70:07:2c:07:
0c:78:4a:33:f5:0b:fc:fb:46:3f:7d:8b:10:ae:a1:c5:9e:ff:
1e:02:e8:40:d1:8a:8b:e2:55:b7:6f:ad:0b:d8:ea:da:4c:77:
c4:7d:2f:e8:eb:bc:f0:0d:ad:7d:63:90:bc:32:bb:24:3f:2a:
00:80:40:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:43:18 2026 by rpki-client