
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: +ViabrzVei67j7BCHOkPcMH7/+ohPiXFqvSvgrBY1LU=
Subject key identifier: 97:9F:73:F1:89:5C:C7:75:6B:E2:02:27:87:2E:D9:3E:AE:F6:A0:69
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 01A0DC178808531669766B7C3C9421AC9988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 05:02:04 +0000
Manifest this update: Sat 26 Sep 2026 05:02:04 +0000
Manifest next update: Sun 27 Sep 2026 05:02:04 +0000
Files and hashes: 1: 9qy5igh9qX4Uci7bRZZV_psOu7w.roa (hash: Tnhc5d5aGwpLgFhdFa9P4ZDIL3T2P5zMzH6turPE6uU=)
2: fOlQP3-PfpjSE6EMsORwi3KiU_0.roa (hash: 9xJNvssU8LW9KKQFyieBw8RskBII5JpvnR6eOew6NAc=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: ezgDK94iIMYCnYMajsIG0oeSrBD+bU8MiwqCzZdl3lA=)
4: y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa (hash: 1lKjAhubbXr/HU27nWYgH1iiL0s0e2dhdfsbjU73q04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:88:08:53:16:69:76:6b:7c:3c:94:21:ac:99:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Sep 26 05:02:04 2026 GMT
Not After : Sep 27 05:02:04 2026 GMT
Subject: CN=979f73f1895cc7756be20227872ed93eaef6a069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:f2:92:df:3b:6b:4c:6e:b0:94:d6:11:0a:
aa:8c:7d:a7:86:26:81:c9:4b:a7:de:16:0e:e0:d6:
a4:75:a3:6d:12:55:f8:4b:b1:3d:43:b3:75:12:f2:
18:c5:02:a3:94:fb:4b:2c:66:05:dd:10:78:0f:bf:
64:56:19:58:1b:32:58:0d:16:bb:fe:ce:ee:da:37:
f8:36:a0:76:f3:e8:a6:83:aa:66:e9:36:82:ed:cf:
d4:b0:27:f7:a5:a9:f9:e2:9f:c5:0f:53:43:84:83:
f0:07:20:74:08:57:79:3c:da:e5:7c:27:a7:71:ca:
42:99:fa:c4:b8:9f:5a:d9:b0:3f:97:df:93:48:8d:
97:d2:0b:e6:c4:b8:91:fb:2b:e7:2f:44:f9:a6:d3:
77:af:97:c4:01:0d:7a:af:cc:60:9b:28:07:47:ea:
47:68:6d:ac:ab:f7:14:88:5a:51:9c:cf:ad:95:f9:
6b:fa:79:e0:31:1d:83:ae:ce:15:f2:33:67:4a:20:
5f:bb:76:f0:c8:36:80:8d:9b:ee:d9:4d:79:b7:20:
2f:53:ff:c5:68:0e:9d:ea:6d:b7:09:95:ed:fe:dd:
b1:98:6b:64:78:64:70:13:d4:7a:b0:da:c7:65:83:
48:a4:66:f7:08:30:5c:d8:6c:40:9f:81:d3:a5:1f:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9F:73:F1:89:5C:C7:75:6B:E2:02:27:87:2E:D9:3E:AE:F6:A0:69
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9a:1e:a6:7d:1a:9d:01:bb:5b:38:9c:f8:37:04:c1:32:1a:
da:6b:b5:36:e8:74:a6:2e:4a:40:bb:62:07:15:c7:da:58:7e:
a0:bd:c4:07:d1:b2:8e:10:6d:4b:cb:53:e9:cf:18:d9:7d:98:
af:fa:66:ab:73:da:cb:26:47:f9:04:d4:dd:b2:23:8d:db:6b:
29:9d:0c:01:7b:42:58:c4:be:d4:de:bb:c5:8c:f1:ef:14:79:
f4:a9:93:53:2a:b8:44:b6:37:0d:14:46:19:d5:bb:d9:57:b1:
3a:e3:0b:34:7d:b2:55:5b:43:dc:42:81:14:3c:77:27:63:c9:
7f:41:33:32:a5:b6:1d:4a:62:47:45:27:90:c8:c3:0b:22:1c:
3d:7b:0d:f7:b8:ae:c4:a4:10:4e:0e:58:c2:63:b5:44:27:10:
24:c2:85:ad:c1:95:2e:15:71:ad:3d:b4:f7:9b:f6:96:43:75:
5d:f0:17:dc:87:9e:36:14:58:f9:d6:1d:3f:13:12:e2:48:ee:
a1:73:b5:a8:09:39:89:04:c7:12:fc:9d:c2:63:35:eb:c2:32:
71:1f:fe:1a:43:6a:cf:71:95:1e:4e:c3:b7:97:8b:d5:3d:c3:
8a:ba:b6:20:ba:aa:cb:38:23:e7:b8:3a:02:9a:17:ae:d7:fc:
e3:86:8c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:51:19 2026 by rpki-client