Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier: 3Hh880YmK13JAWPV6GW946SGdMKBqtblX/S6dN3YBMI=
Subject key identifier: 51:33:41:A0:70:4A:F4:18:0A:D4:C7:A2:74:F6:40:AA:99:9D:3E:9E
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01A1D9EF3FDD5A72DCE9C0F4D0C6CC170265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number: 19CE
Signing time: Sat 14 Nov 2026 12:01:37 +0000
Manifest this update: Sat 14 Nov 2026 12:01:37 +0000
Manifest next update: Sun 15 Nov 2026 12:01:37 +0000
Files and hashes: 1: 0XVL1DRx75lawy_xFW5mJsQGHSU.roa (hash: BELOWMUZ3k/HbcEYsajsYqC3iV1ihvP6qfT8um9x+wM=)
2: GpsXVdWfTVrTw1I71qKjHAi-OwY.roa (hash: 37jMyQ9qnFLk9VNqPb2W6JdCqnsDuBdiD0ur3v/oEEw=)
3: NGPMuWiFeknKXkwM3nxouEoeXyk.roa (hash: /tIDGmKeCM03QTIplLTQuWQW/TuDx6K9okVMkl68do8=)
4: XwluJi7gd_3bLnOhsXiaCK78UGQ.roa (hash: Vg2POX67iN2CB7gqcNW3j2zG6gzZxQs5uZV1T7iRkdU=)
5: hl3Yd95fQNxwoRIo3-4kn7W_Dcs.roa (hash: bf3A6eur16fDQenvn2mn0EiiLqdDCmb0v7sPr8NzgvI=)
6: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: d2Jrn3op9oICJilPhhvK27aIOw9ijCptyKuiEhfDY94=)
7: sgQIBkFFp9Zlr_0nrRPVgJN0CEQ.roa (hash: S9CdDbT1ld2vusmvuJyBIT32yXTScPbapiKiAqKYB1k=)
8: tBE2DXCg9mo6HQNSmwQwa4AaEKw.roa (hash: /Uu7Wfq1cKcIhIObzC72sU7ALGmExyntY4syvrkFG/U=)
9: vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa (hash: /W94YDKehwEOG4IGpuPHROQ+73Ocm3mWSD9qbK70W14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ef:3f:dd:5a:72:dc:e9:c0:f4:d0:c6:cc:17:02:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Nov 14 12:01:37 2026 GMT
Not After : Nov 15 12:01:37 2026 GMT
Subject: CN=513341a0704af4180ad4c7a274f640aa999d3e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:21:60:b4:6b:31:e5:29:e8:e3:be:79:c0:
14:d8:4d:59:91:6a:00:70:b2:bd:31:25:b7:04:b6:
c8:ae:27:d2:7f:0b:ac:61:d4:79:59:3d:f5:aa:70:
fa:85:db:57:17:00:1c:86:7f:5c:f7:71:c6:e0:4b:
94:3a:7d:1f:99:49:22:2c:a7:92:59:a8:6a:6c:9e:
a4:5c:e9:c1:73:84:02:fb:f3:1c:95:c3:f7:55:04:
8f:2d:f0:f8:f5:ad:f1:4a:d5:2a:08:39:b0:c9:40:
af:b7:ff:01:c2:20:50:4b:a9:97:dc:80:c9:95:30:
5e:38:2c:aa:bb:1b:31:a6:50:4d:0e:86:b9:f1:09:
c0:08:65:cd:6f:4b:88:d3:0d:ad:e7:d1:72:3c:08:
4d:49:ae:64:03:b0:89:a9:a3:e8:d3:47:f0:e3:82:
0c:a1:0e:4d:41:92:3c:73:34:2d:01:6c:a9:e6:2d:
78:36:32:3c:e4:33:b2:5f:fb:a7:87:77:f6:83:1c:
b2:dd:6c:f3:5f:12:d2:d4:99:bd:43:89:0f:46:e1:
f7:66:d9:cb:a0:94:31:8a:0b:fb:18:f4:e0:ed:5a:
55:ec:75:27:be:f6:f5:ba:eb:e5:ae:81:a3:41:fd:
04:98:15:c6:92:75:cc:e9:57:15:93:63:1d:ab:35:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:33:41:A0:70:4A:F4:18:0A:D4:C7:A2:74:F6:40:AA:99:9D:3E:9E
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6f:5d:19:ba:01:f4:95:ee:a7:0c:ca:5d:c0:98:0d:9a:41:
6d:2c:1c:1c:2f:69:08:50:4a:87:36:c8:ea:d6:41:0c:97:2b:
10:cd:70:5c:75:85:75:1b:dc:68:ce:3c:f3:31:4b:6a:8e:59:
ee:77:62:a1:93:18:ce:77:f1:ff:34:74:32:e4:57:4b:d5:89:
5a:de:3b:d0:27:19:32:69:43:5b:4a:51:d7:d1:b1:d0:08:9f:
eb:31:d2:94:8d:ce:5e:ac:f3:ca:3b:c7:25:a8:fd:b7:c8:16:
65:a7:96:15:c6:17:ec:38:bf:8b:71:82:44:66:d7:03:b9:63:
ce:82:b3:29:04:67:f2:cf:0c:c2:ff:24:c8:de:65:13:e2:49:
3e:4d:3d:b8:a3:99:df:7d:7c:b3:62:c3:0b:53:dd:66:0c:b7:
08:f9:29:f5:9f:ec:06:61:05:b9:e1:76:9b:c0:ad:7b:4d:31:
d3:82:6d:c0:14:26:56:b8:bf:6a:8a:c3:5c:9b:db:50:66:fd:
7d:dd:ec:76:f5:04:89:13:46:96:d9:08:25:ad:04:24:64:1f:
42:90:97:01:25:ee:f4:cf:e8:05:a6:fb:65:3d:17:5b:9e:93:
fc:b6:80:5d:14:b0:4f:e5:89:9a:0b:e3:aa:df:34:35:28:72:
37:bf:bf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:37:06 2026 by rpki-client