Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier: sOszZS9JcdFtDKjBWvsAlP/yz5RQemARGuz0+YdjTeM=
Subject key identifier: DA:36:B1:48:EE:48:06:21:5D:56:9F:FE:9F:A8:66:12:79:F3:2A:B7
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial: 01A0D26DFAA246E8FE962C04F9B8DCA88C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number: 0E4C
Signing time: Thu 24 Sep 2026 08:00:18 +0000
Manifest this update: Thu 24 Sep 2026 08:00:18 +0000
Manifest next update: Fri 25 Sep 2026 08:00:18 +0000
Files and hashes: 1: 04FbY6kBRpqiGP3AkiBuCWu5Bes.roa (hash: HoNtS+1Oc+MT8EGjXP3z2c8KS6IAUrdzH1rtxmawMCg=)
2: FD9UserVnd9g-B97_3OHBh6hGow.roa (hash: alF7jO0INJ/TLd2wbZJoqP534uCICHCvkQ7BKchM5M0=)
3: cbaJKNAhgJAhFE_4zoZbKJm5V5s.roa (hash: Rcxed2Cw/y7WBNPlRsNkcmXlhqGDs0w++1hNx6Mbo5U=)
4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: zkkZmxg59UExYC15+RXrjrc1gAmuc5ncED6NjaQnPMw=)
5: uUoKvpcOk1MN1N-RCShYaCzs_Ms.roa (hash: kQd1YigGHb1xiD3rBDQj/Z4qQiqNkv9K2U3Hpfudh9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6d:fa:a2:46:e8:fe:96:2c:04:f9:b8:dc:a8:8c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
Validity
Not Before: Sep 24 08:00:18 2026 GMT
Not After : Sep 25 08:00:18 2026 GMT
Subject: CN=da36b148ee4806215d569ffe9fa8661279f32ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:d0:3d:56:2e:ca:9a:75:ef:60:11:b7:1e:
99:19:dd:f1:bc:b1:5c:b1:90:c5:c2:cd:91:ca:51:
76:eb:45:39:75:a2:d2:ae:d9:28:9e:2b:bb:d2:1d:
22:71:69:66:ad:73:2e:a1:7f:ff:df:68:67:27:d7:
89:5f:d6:e3:44:0f:00:93:57:9a:5f:16:b9:57:00:
a0:72:4d:8d:fc:32:c0:be:90:bc:9e:5d:cc:ae:67:
f6:c9:09:7d:af:3f:ab:fa:55:86:9d:ae:ad:27:cd:
21:be:eb:03:d5:68:45:17:bf:84:e8:70:9f:04:1f:
24:84:23:24:c1:e9:37:30:cd:0d:fa:54:6b:d2:13:
50:f8:52:46:19:69:c1:89:38:96:8f:64:b9:90:c8:
58:b5:ea:7a:a0:e4:62:2b:d4:c7:02:d1:9b:c9:f4:
f9:35:cc:47:a8:b6:3e:e1:61:26:f5:d2:63:d7:ec:
26:98:6f:eb:ef:18:ed:ed:f7:6d:77:08:e1:77:23:
f3:ba:a0:4d:8b:39:ac:cd:c8:3a:55:b7:22:06:73:
67:fb:59:9f:eb:b0:97:bc:5f:02:e3:a1:55:a4:d9:
4a:dc:71:d6:f8:6d:33:58:6c:ad:86:5a:dd:d2:d5:
ee:54:5d:72:fc:2d:d5:64:53:c8:5f:12:cb:5d:af:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:36:B1:48:EE:48:06:21:5D:56:9F:FE:9F:A8:66:12:79:F3:2A:B7
X509v3 Authority Key Identifier:
keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8e:f3:d4:50:23:37:04:2d:42:d9:84:8e:1f:0d:b5:a6:d9:
90:75:a1:d0:da:66:3f:40:fc:d6:0f:1f:e1:1d:58:47:1d:6d:
e7:d6:d7:4a:6d:c0:50:9f:d0:21:f6:84:4b:c0:a1:85:b4:76:
e7:64:46:01:91:9a:7f:08:5a:63:ee:bb:d8:57:1e:7b:62:18:
fd:dd:b0:2a:4b:1e:89:fd:5f:21:d2:d3:f6:b0:3a:a9:d1:f1:
0b:c6:cb:45:85:aa:9b:bd:5c:c5:59:3b:e6:4c:aa:db:5f:0c:
d6:44:79:f4:f4:f0:0e:eb:6c:e7:4b:74:3a:85:50:77:24:e8:
46:b6:a9:45:77:8b:74:64:32:07:c6:97:53:b0:5e:73:71:14:
95:79:73:ec:5f:77:21:b6:c5:b6:21:5f:a7:f9:b8:12:1d:63:
03:6d:3d:a5:a5:37:16:34:c5:0b:81:b8:07:06:da:9f:6e:04:
65:0a:cf:21:0e:39:76:4c:c7:f6:4b:8d:d7:60:76:df:a7:e6:
e6:8b:5a:7d:b6:46:cd:b2:f8:22:8c:0f:95:2a:75:f5:af:aa:
72:32:40:20:95:bd:75:ce:a2:0d:b3:55:f0:9b:ee:bc:05:d5:
20:0f:97:fb:9a:e7:c4:d1:9c:b2:3d:e0:79:0f:20:1e:b8:87:
49:32:e5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:58:25 2026 by rpki-client