Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier: RV9YvOAuWLEzur8M411Km/BUnaUoaSc5HV69Bg+7sms=
Subject key identifier: 21:FC:65:6E:6E:60:72:8A:36:80:A1:74:2F:73:4E:0B:31:3D:11:EE
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer: /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial: 01A0D4CB721B09BA08E62B958DBF9D3FB983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 19:01:37 +0000
Manifest this update: Thu 24 Sep 2026 19:01:37 +0000
Manifest next update: Fri 25 Sep 2026 19:01:37 +0000
Files and hashes: 1: 7YFanazp_Hk_jwwFignJKO3DKAI.roa (hash: nBudYXC1l0ZOKMta9ie5NuhQi7PKlNbLGiH6NUxthx8=)
2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: 6MVnT1AtJW6OiQdZsLMW8kt2x2qI0ZVEdOBBaAUV1cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:72:1b:09:ba:08:e6:2b:95:8d:bf:9d:3f:b9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Validity
Not Before: Sep 24 19:01:37 2026 GMT
Not After : Sep 25 19:01:37 2026 GMT
Subject: CN=21fc656e6e60728a3680a1742f734e0b313d11ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:d6:4b:7e:20:46:5a:36:7c:40:62:65:0c:
bc:a7:4b:22:8c:b6:f7:2f:6e:50:5a:aa:5d:16:b6:
d0:2c:7b:c0:30:fa:0f:f3:b1:91:db:8f:0d:ee:02:
2d:e8:da:53:f0:24:1e:3f:00:e3:41:38:33:5d:87:
1d:9b:2a:ee:8d:51:37:77:79:db:f5:a1:fc:52:c8:
70:0e:47:d7:19:b0:b6:ed:c0:15:a5:8e:f2:4b:80:
f5:1c:d6:fc:1c:6d:7e:a1:f2:d1:e6:b3:18:4d:89:
e0:2e:b1:b8:25:e7:78:07:3a:33:2f:41:c2:7d:c0:
5d:fa:c9:b1:2e:5c:1a:bb:81:4a:5c:1f:6c:5f:a8:
fb:48:1d:7c:0f:b0:b2:06:cf:b7:d2:6f:18:cf:a9:
69:68:06:6d:81:94:ac:39:66:9d:a9:8b:f3:c2:28:
e9:91:7a:87:1c:2f:d2:8d:75:86:e8:28:1c:ee:21:
5a:ed:e2:03:57:c6:a6:e0:f2:6a:fa:8c:49:9a:3e:
9b:69:9d:b5:fd:e7:83:97:42:cd:d8:97:74:3f:48:
5e:b8:1f:43:97:da:6e:70:93:b8:3d:d6:45:ae:15:
32:96:5d:b0:04:27:22:f1:7b:6b:cc:5d:f3:65:a7:
fd:cf:6e:ea:fd:45:2c:24:b0:d3:6d:fb:2b:f7:21:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FC:65:6E:6E:60:72:8A:36:80:A1:74:2F:73:4E:0B:31:3D:11:EE
X509v3 Authority Key Identifier:
keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:25:3e:ac:71:8c:ef:9d:dd:15:91:9a:77:e3:b0:5f:2b:b8:
d2:df:5c:b2:e8:40:65:0c:68:a5:20:42:66:a1:88:ca:e3:e5:
11:fd:f1:6c:69:ae:d0:a9:4d:14:72:71:0b:7a:60:b9:25:d8:
81:09:91:60:ad:87:23:4b:60:ba:ba:e5:52:40:98:9f:9a:70:
04:c8:27:18:98:53:81:a8:06:ae:7a:68:df:86:9e:94:25:52:
6c:33:b8:7c:49:c3:b0:42:fa:61:6b:4d:fa:e9:ba:86:76:13:
37:3a:6a:2d:7d:59:13:6a:86:7a:dc:c7:de:55:0b:e4:9a:c6:
6f:c0:92:1d:67:69:7a:43:f9:9a:c1:b6:3a:83:9b:d9:74:25:
9f:1b:24:82:a3:4d:da:1c:67:86:d8:52:f9:c1:ed:92:5e:ca:
e4:42:ca:f2:eb:49:c1:27:26:ca:ba:8a:ce:23:a8:f7:27:f1:
31:de:b1:4d:f0:16:ed:74:f2:6c:33:81:63:b9:af:37:b7:c7:
cc:e2:20:67:ac:d9:02:6e:65:70:5f:b8:f1:62:35:8e:42:8a:
3e:64:44:d9:e5:cb:22:2a:f0:eb:69:45:22:23:08:75:27:19:
0a:35:ec:f1:f2:07:0a:2d:07:1e:d2:74:76:26:38:cd:cd:9f:
45:64:b5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:28:07 2026 by rpki-client