Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: c6rM2GEHhGnBA5ae7FEb9pyw8shchENsNj3ZOOwA5uo=
Subject key identifier: 38:8C:F8:0B:1F:D6:CC:B4:8D:52:F4:26:78:E3:8F:09:87:43:88:D3
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 01A0EB89BC412BA0C502E0A7D99E13F25EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 19D2
Signing time: Tue 29 Sep 2026 05:01:07 +0000
Manifest this update: Tue 29 Sep 2026 05:01:07 +0000
Manifest next update: Wed 30 Sep 2026 05:01:07 +0000
Files and hashes: 1: baIq0BCiBz3PcJlSkOIxGUjevrQ.roa (hash: CeBScbn4OcxM8onOF7lmNXHa9tIqH0Nd/sjn3RSNRVM=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: A9YdByuda0mqYKYMPaB33hVbhBcChGXye5FIMzkzl2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:89:bc:41:2b:a0:c5:02:e0:a7:d9:9e:13:f2:5e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Sep 29 05:01:07 2026 GMT
Not After : Sep 30 05:01:07 2026 GMT
Subject: CN=388cf80b1fd6ccb48d52f42678e38f09874388d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:b2:44:36:75:f4:dc:c5:c8:6f:b5:b0:f4:
1f:5a:b4:0b:f2:80:32:af:ba:d0:aa:00:dc:2b:76:
5f:ab:f2:6e:0d:71:0f:8f:39:c4:e3:c4:88:3c:b4:
c9:20:94:f7:41:66:e1:f8:84:93:24:27:13:86:f3:
66:a6:94:c3:05:e8:71:7b:75:31:8b:af:79:07:d1:
29:d1:9d:7c:fc:f6:b4:23:4c:68:16:b7:c3:fc:4e:
18:5a:64:e3:0a:ad:15:2b:91:d5:10:3e:c3:ae:32:
b8:a7:d0:24:18:8c:59:18:55:36:84:fc:d6:b3:b8:
09:8a:5b:44:29:a5:8b:f3:d4:04:04:46:82:43:6a:
e2:86:76:df:f3:c8:30:8f:c0:98:d7:0c:6f:2e:ac:
1d:93:3e:cc:f0:b9:ed:07:0c:6f:7d:c0:0e:dd:bf:
8f:01:50:9f:20:15:26:5c:b3:48:2a:4d:41:a0:e6:
89:30:e3:d4:0b:63:fe:d5:3c:eb:1a:ec:4b:49:37:
7c:b1:d9:0d:fc:21:51:98:4a:87:1b:27:0d:2b:3d:
9c:3a:92:a2:11:98:5c:8d:e7:75:d9:9d:ec:32:0d:
ba:b0:86:10:84:ef:3f:21:40:32:98:c5:df:ee:5e:
f6:a7:91:d9:3f:06:4b:57:7f:5e:1d:a6:07:42:02:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8C:F8:0B:1F:D6:CC:B4:8D:52:F4:26:78:E3:8F:09:87:43:88:D3
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b0:a2:61:90:37:56:4a:1b:fb:81:87:8a:d0:67:20:7e:70:
f2:31:48:73:a1:0c:15:ba:8a:73:63:8b:76:7e:2b:6e:7a:40:
bb:cb:34:8b:24:58:e4:61:89:a5:e9:53:bc:06:a2:25:e5:df:
3f:3c:19:02:22:25:52:83:f5:89:10:aa:14:42:2d:87:93:e2:
8f:87:41:45:9e:0d:63:ae:4c:a9:77:68:7b:fc:cb:7b:fb:a0:
95:04:c1:13:a9:e0:ef:9c:51:20:5a:b0:25:9b:7f:f1:1b:64:
a9:33:8d:81:52:71:18:a5:23:ce:c8:a1:68:a4:42:18:3a:2c:
53:f9:28:60:dc:f4:21:5d:3b:ed:2d:26:6f:d2:3f:9a:87:93:
8f:25:e7:52:70:16:38:be:08:cc:e0:78:a4:b0:17:c8:a2:d5:
66:be:1e:9d:e5:f0:98:22:8e:45:62:71:d3:80:b5:d7:92:90:
ff:59:e5:f5:88:fd:e7:c3:83:cc:d0:45:fd:e0:26:2f:8a:35:
68:a2:37:c4:8b:6d:12:90:66:80:05:b7:61:49:08:5e:23:2c:
3e:96:ea:a0:43:c2:3e:65:2b:be:28:52:f7:65:9a:30:c6:d8:
65:c2:19:72:63:ad:77:19:4b:57:3a:ea:95:49:dc:89:85:dc:
fc:89:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:38:02 2026 by rpki-client