Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier: CPNRvzzodySCwzal2XZLbL/FcejpmU1eJN96JBQ5HUA=
Subject key identifier: 7A:90:D8:2C:6C:7E:02:83:83:4E:83:61:33:DA:D4:1E:5A:77:31:3E
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial: 01A0DA96071693E16A6BFD487FB4F1BC7444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number: 0C44
Signing time: Fri 25 Sep 2026 22:01:00 +0000
Manifest this update: Fri 25 Sep 2026 22:01:00 +0000
Manifest next update: Sat 26 Sep 2026 22:01:00 +0000
Files and hashes: 1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: l507Y72D5EPU9rWfvy+z/lH83JPaxHuO4/qPEPLKzcg=)
2: rTTUeShcOXNB_38gPBfANBYb9Rg.roa (hash: SNHTIMM1yFWrTxfEjv177J1xrcwVvQjJHLgNi04rw5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:07:16:93:e1:6a:6b:fd:48:7f:b4:f1:bc:74:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Validity
Not Before: Sep 25 22:01:00 2026 GMT
Not After : Sep 26 22:01:00 2026 GMT
Subject: CN=7a90d82c6c7e0283834e836133dad41e5a77313e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:68:bf:bd:fd:ca:4f:4b:8d:a6:79:ea:f9:
b6:ef:c5:1e:6b:78:fe:d3:0f:e5:fc:41:57:1f:cc:
9a:01:6c:c7:11:cd:c8:af:76:84:12:23:87:a5:20:
92:d6:3d:ae:74:03:a5:8b:dd:2c:95:44:fc:1f:3b:
22:74:be:c2:9f:26:93:f7:03:22:0d:e1:52:e3:81:
c6:d0:15:c0:bb:59:d2:67:25:84:30:c1:11:b0:95:
36:cf:44:dd:89:b9:c4:d7:7e:93:cb:ef:ef:73:25:
87:50:d7:8d:2f:67:7d:d2:55:0a:84:38:0f:55:52:
21:ac:39:54:ae:01:fa:8f:79:39:2b:8d:c2:28:ec:
ab:32:32:ce:a6:4c:71:d1:4f:8c:d9:51:de:be:43:
cf:59:05:e8:f5:2e:90:9c:9e:bd:71:67:5b:2b:12:
d7:c0:dc:1d:4d:48:2c:e4:cb:0f:a3:e7:5d:c4:a5:
c6:3c:30:b4:22:2a:ba:17:40:ca:85:9f:7b:df:cb:
12:27:12:d8:50:d1:d3:50:02:0b:75:6b:5e:cc:60:
8a:52:31:8c:c2:6e:5e:2b:f4:68:c0:a5:59:70:85:
a8:e9:20:0b:86:e9:8f:8e:ba:31:5b:81:db:75:84:
d6:b7:c6:28:3e:8c:62:73:2f:fe:bb:3b:26:33:5c:
a3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:90:D8:2C:6C:7E:02:83:83:4E:83:61:33:DA:D4:1E:5A:77:31:3E
X509v3 Authority Key Identifier:
keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:28:99:52:79:80:93:1a:a9:5e:40:c5:3d:c9:14:fb:67:81:
21:7c:66:6d:4b:e4:7d:b1:be:c1:2f:af:9e:fe:8e:4f:a0:e9:
a1:5f:a3:c3:ca:df:39:70:ad:51:3e:73:5b:5b:85:b2:de:97:
ba:40:7b:b7:e5:e5:ff:fa:07:df:ff:3c:ad:18:ca:09:7f:78:
33:44:54:b7:36:d7:a6:97:89:90:22:eb:9f:cb:a4:42:cd:19:
18:d3:0d:30:75:5b:71:91:1d:68:0d:38:d3:3f:64:f3:1f:ba:
dd:bc:1e:51:c4:06:9a:83:2e:85:50:e5:b6:58:13:b2:51:5d:
f6:6f:18:af:71:b7:ec:74:e2:77:c8:fa:d0:63:9a:e1:9e:37:
89:40:21:51:21:98:5c:22:2f:2c:e2:49:95:1b:a7:c2:35:3b:
3d:ca:ec:5e:49:32:3c:c3:5c:3e:ce:21:9b:ba:92:9d:98:62:
f7:95:5f:44:13:c2:6a:ee:29:5e:87:b0:32:66:9b:40:63:cb:
35:ca:d5:00:f8:18:ce:9a:8b:e0:18:aa:86:0d:65:51:a4:53:
cf:4e:ec:9c:09:1a:e4:05:bc:53:b0:1b:ef:6e:a4:0e:b8:d2:
a5:6a:72:e9:5a:57:2a:f7:f7:27:2d:55:af:0b:de:4c:db:52:
c2:8d:8f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:59:08 2026 by rpki-client