Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier: SeCP/UsrF93VozDlyceT/I2pS82aZp0VJ4KP31D0gek=
Subject key identifier: DB:58:1C:23:7E:AB:D9:36:30:28:4D:CB:C6:C0:47:74:A2:78:40:92
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01A0CF6D0FA3C78C44973ABDB53228FC1DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number: 1944
Signing time: Wed 23 Sep 2026 18:00:26 +0000
Manifest this update: Wed 23 Sep 2026 18:00:26 +0000
Manifest next update: Thu 24 Sep 2026 18:00:26 +0000
Files and hashes: 1: 0XVL1DRx75lawy_xFW5mJsQGHSU.roa (hash: BELOWMUZ3k/HbcEYsajsYqC3iV1ihvP6qfT8um9x+wM=)
2: GpsXVdWfTVrTw1I71qKjHAi-OwY.roa (hash: 37jMyQ9qnFLk9VNqPb2W6JdCqnsDuBdiD0ur3v/oEEw=)
3: NGPMuWiFeknKXkwM3nxouEoeXyk.roa (hash: /tIDGmKeCM03QTIplLTQuWQW/TuDx6K9okVMkl68do8=)
4: XwluJi7gd_3bLnOhsXiaCK78UGQ.roa (hash: Vg2POX67iN2CB7gqcNW3j2zG6gzZxQs5uZV1T7iRkdU=)
5: hl3Yd95fQNxwoRIo3-4kn7W_Dcs.roa (hash: bf3A6eur16fDQenvn2mn0EiiLqdDCmb0v7sPr8NzgvI=)
6: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: ojNty+hn1nHfw2Z5qAiPav047K96FaY5vENPY0ijQkk=)
7: sgQIBkFFp9Zlr_0nrRPVgJN0CEQ.roa (hash: S9CdDbT1ld2vusmvuJyBIT32yXTScPbapiKiAqKYB1k=)
8: tBE2DXCg9mo6HQNSmwQwa4AaEKw.roa (hash: /Uu7Wfq1cKcIhIObzC72sU7ALGmExyntY4syvrkFG/U=)
9: vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa (hash: /W94YDKehwEOG4IGpuPHROQ+73Ocm3mWSD9qbK70W14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:0f:a3:c7:8c:44:97:3a:bd:b5:32:28:fc:1d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Sep 23 18:00:26 2026 GMT
Not After : Sep 24 18:00:26 2026 GMT
Subject: CN=db581c237eabd93630284dcbc6c04774a2784092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:33:13:07:e1:22:74:66:f2:6e:15:1b:45:
25:bb:fd:b9:68:e5:98:c9:1d:5c:41:77:02:56:18:
8e:ec:36:5f:d5:da:d9:fd:74:50:65:d4:db:cf:6b:
5c:af:7a:0c:59:14:39:21:06:f1:7b:c4:c1:5c:47:
2f:21:a0:bf:ff:cc:e2:dc:65:6a:91:bb:77:e7:bf:
45:be:7b:9a:c0:5f:03:7c:56:7f:ad:90:23:09:15:
e8:e1:24:84:02:2e:52:06:a4:55:55:71:8b:7e:11:
c6:c1:97:41:8a:7f:a6:fa:ba:b3:fb:93:ea:3a:41:
28:f2:4f:3c:cc:8a:76:f9:84:ce:94:bd:75:48:22:
f5:41:ca:50:28:7a:a9:c1:94:e0:39:20:16:0b:03:
76:6a:49:89:6f:96:23:a8:b3:48:b7:00:81:ee:dc:
a1:d1:0c:24:75:78:d3:13:15:f9:55:dc:bf:45:b5:
fe:37:d4:22:ba:4b:6d:49:52:ec:72:d7:3c:e8:83:
c3:61:65:35:f4:80:a0:91:1c:68:18:dc:63:17:2d:
e6:e5:fb:c4:74:5b:17:2b:17:8e:4b:78:98:21:d1:
ec:64:66:8d:9f:fd:93:d7:bb:45:f5:75:6f:a2:55:
67:9b:1e:b4:fe:8b:7b:3e:93:f0:74:14:a2:1a:8e:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:58:1C:23:7E:AB:D9:36:30:28:4D:CB:C6:C0:47:74:A2:78:40:92
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8d:12:e1:98:b3:bc:69:16:f9:10:7b:53:c6:a0:61:b7:ff:
99:95:ef:03:68:3f:23:2c:74:98:71:12:ae:2c:a7:fe:06:b6:
1e:79:4a:49:fc:62:b5:0d:a5:c6:75:47:6f:be:cb:bd:72:94:
84:c1:a4:8a:1e:63:8d:b8:7b:44:3a:d7:c8:3e:4b:e5:e8:10:
1b:0c:c3:50:4a:01:19:6f:a6:5b:68:c7:58:09:a8:2b:a6:a4:
f3:d1:f8:6b:6c:c2:b8:d5:0d:0a:25:1d:a3:e8:03:18:09:3e:
8d:65:15:36:5f:f1:34:9f:9e:79:72:d6:93:ad:b5:5e:ce:77:
0b:8c:58:88:c8:0e:1f:79:26:d0:5c:a3:b0:69:51:5b:48:ae:
cd:dc:ee:ad:2a:6e:db:c6:57:33:92:a7:58:e5:21:e7:43:9a:
b7:c5:95:bd:fe:6a:dc:10:27:d2:ec:05:95:40:ce:03:9c:60:
dc:b3:65:ed:b5:f4:07:d1:a9:e5:ae:a4:8f:44:db:3b:f7:35:
61:91:06:4f:cd:fd:c3:a3:a3:11:69:eb:74:1e:d4:73:a5:e9:
8b:0c:a4:f3:c2:4d:e0:28:44:55:6a:9b:05:23:ec:78:4b:32:
44:c5:78:58:b1:13:30:c3:a5:04:38:11:29:85:b4:86:c1:a5:
7b:da:bf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:42:10 2026 by rpki-client