Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: XCZFAEN5F+gFFIBDlkp+PnE9Fe10vZRh1EYcPvomXiY=
Subject key identifier: D1:0B:B9:82:5E:A0:00:D7:C1:E2:73:4E:43:A3:A7:AF:61:A4:91:59
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 01A0D201426D8671AC15E41A42C9EB272780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 162E
Signing time: Thu 24 Sep 2026 06:01:32 +0000
Manifest this update: Thu 24 Sep 2026 06:01:32 +0000
Manifest next update: Fri 25 Sep 2026 06:01:32 +0000
Files and hashes: 1: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (hash: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA=)
2: iCHozfTTxF16YGNAVt20MXzc00g.roa (hash: H989MZeJbW+NOaRo/HUuwj+zsKhP6qt0Wm1UtPVlNvk=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: YQY9f83cI2R/CCNnTLV4Ay1XVXKOluBi0C9mUNZ1/xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:42:6d:86:71:ac:15:e4:1a:42:c9:eb:27:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Sep 24 06:01:32 2026 GMT
Not After : Sep 25 06:01:32 2026 GMT
Subject: CN=d10bb9825ea000d7c1e2734e43a3a7af61a49159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a8:f9:a3:b6:b0:a8:fe:93:85:03:cc:7b:5c:
66:ae:bd:c9:21:32:4e:0d:e5:39:9f:95:9e:14:38:
25:57:36:de:7e:56:bd:8f:fa:1f:92:59:b6:ab:a4:
ab:86:3d:90:59:20:47:e4:ac:dc:1a:4d:a1:19:00:
fa:69:8a:2e:6b:98:f4:bf:80:ea:dd:8c:44:71:a0:
10:6e:8c:2c:65:2b:c4:84:10:05:8e:dc:f2:cd:53:
fe:89:ab:57:c7:80:31:fc:54:f0:4c:16:d8:e5:53:
11:d0:09:a0:5a:8c:19:60:1c:0f:a5:4d:6e:b3:be:
45:db:84:77:b0:96:08:0c:08:33:be:0f:ea:46:3a:
8a:ae:10:ea:ff:2b:85:8e:95:c3:98:ae:ea:77:28:
c7:ec:7d:16:89:46:2c:4d:ad:41:5a:79:07:70:26:
6a:93:dc:5a:fe:e2:1b:36:6a:8b:02:c1:89:a6:cf:
87:2b:3b:d1:86:c6:2a:f9:ac:1e:c1:45:9d:17:57:
fd:c7:ff:48:c7:75:26:6d:70:e0:1f:3b:37:9e:70:
29:e6:71:40:14:5c:aa:a8:e9:c5:9b:1a:7a:b3:cf:
80:20:57:d9:77:96:2f:16:9c:eb:8e:83:5b:e8:22:
e2:cf:bb:ed:c9:dc:46:99:d3:1f:0d:4a:db:50:6f:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0B:B9:82:5E:A0:00:D7:C1:E2:73:4E:43:A3:A7:AF:61:A4:91:59
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:00:34:08:3f:c1:6e:8a:ef:e5:42:b8:23:ea:8d:ba:fc:f2:
d9:9e:bf:90:02:2b:50:f7:de:c9:24:5e:de:85:91:cf:30:13:
22:66:71:10:3f:b8:ec:a9:21:d1:fc:7a:bc:df:f4:dc:a3:4f:
6b:fc:b2:30:6a:e3:ea:45:30:51:11:5b:f0:3c:73:52:91:3f:
4e:1b:8f:63:10:ba:03:32:49:46:f8:45:36:9e:fc:ea:66:3a:
0f:d0:90:41:2f:90:e0:87:72:94:02:b5:2c:e7:83:24:58:31:
af:72:b7:99:14:c6:a6:e0:d6:cb:9c:b3:26:92:01:83:b1:2e:
a3:10:67:20:a3:07:d0:de:ed:5e:f3:fd:5a:a0:ea:04:25:49:
45:4f:10:0c:17:5a:ed:da:4c:ce:e3:31:03:f6:0b:8a:ac:4a:
28:cc:83:04:9d:74:c3:28:b4:f5:2e:24:0d:e1:c5:c3:79:1e:
3d:eb:45:ee:48:f5:a7:95:84:d8:28:16:a1:0e:25:6b:d9:ad:
b1:f5:e8:13:0c:5b:72:fc:8d:c3:dd:c0:58:34:54:5f:a1:32:
24:7e:5a:0b:99:56:29:49:95:d2:44:85:2b:f5:00:aa:d2:11:
09:17:31:5a:42:99:c4:b7:aa:74:6b:be:07:97:3e:1f:6b:59:
87:df:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:44:06 2026 by rpki-client