Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File: oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier: oT7MaQNQXgDE64uoOt1oZ06tDO67eecux8Pogl2Wc+A=
Subject key identifier: 8E:79:53:1F:67:31:93:E4:4E:E8:0A:6F:3C:BE:0D:B8:1D:79:61:EB
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 01A0DD2980196E31B00B7D105AF29250D7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number: 1A80
Signing time: Sat 26 Sep 2026 10:01:19 +0000
Manifest this update: Sat 26 Sep 2026 10:01:19 +0000
Manifest next update: Sun 27 Sep 2026 10:01:19 +0000
Files and hashes: 1: eH9pN3T8uZtfjzNIHm2QIWz86JU.roa (hash: 6WTiCPJHOrzizrSNq8riDUFegfS58h7BM9hToFWx7eQ=)
2: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: CIHQGxByuKbbIyXwMTlVQ1iXaWo5/e+GkdP+ACpNp6Y=)
3: rrDoPtBcmYrtFsSBQoQOi4LhCEs.roa (hash: 6GGMw5jhv2E0iY7GXeItoH474mvVadIlFXmHfEnSu/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:80:19:6e:31:b0:0b:7d:10:5a:f2:92:50:d7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Sep 26 10:01:19 2026 GMT
Not After : Sep 27 10:01:19 2026 GMT
Subject: CN=8e79531f673193e44ee80a6f3cbe0db81d7961eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:cc:ee:78:6c:a4:8a:b2:06:19:ab:29:80:
89:99:9c:fe:f1:d3:b6:bc:79:ee:7d:85:c6:6b:dc:
e1:d1:aa:bf:b7:8a:54:8d:68:b3:a5:2b:ab:4a:33:
28:bc:22:e2:e0:22:81:ba:ad:db:40:a4:dd:6d:e4:
c5:5b:9e:60:47:a1:d6:ce:e9:52:a3:97:b6:13:52:
1d:46:97:cb:60:4f:e0:3d:ac:e5:8c:b2:e2:37:f9:
5c:e9:10:18:10:f5:1b:fd:0c:5f:f1:b6:e7:22:8b:
77:19:f5:4f:6b:f9:bf:4f:94:14:d0:2b:7b:a5:df:
be:b5:f4:ca:75:9a:e4:c6:2e:62:fe:61:d4:13:38:
1e:8e:4d:27:ec:6a:81:33:03:a0:51:00:2a:e1:34:
6f:33:d2:43:7e:a1:1b:4a:cb:e2:e3:06:0c:d6:7f:
35:36:e1:fc:73:18:4c:83:17:99:58:34:4b:5d:bb:
96:76:0e:63:17:8d:8e:d9:f8:40:d0:2b:cb:5c:ae:
dc:3e:2d:db:72:80:7f:20:76:64:f6:18:0e:72:82:
4b:85:64:08:f4:11:9a:f5:35:a2:1b:e8:ca:ab:05:
45:b4:5c:3c:e4:e0:63:15:93:10:c6:93:9c:6b:2f:
01:9b:bf:4a:f5:96:a0:90:49:b3:22:ea:70:5a:a1:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:79:53:1F:67:31:93:E4:4E:E8:0A:6F:3C:BE:0D:B8:1D:79:61:EB
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:80:b8:c6:08:b4:b4:8c:42:9d:29:e0:4d:6e:de:9c:74:2f:
cf:75:f4:39:fb:be:0b:87:ff:31:fc:b3:6a:c6:40:92:6b:67:
0d:ad:4f:4e:98:fe:b5:79:09:8b:37:2f:93:a1:99:09:5f:f9:
aa:90:d3:84:00:42:08:e1:57:59:32:b9:cf:f3:13:4e:b7:59:
bb:f6:d3:7f:84:60:50:a8:33:69:c4:08:80:f9:06:c2:8d:82:
cd:51:f1:d6:22:25:a0:27:0f:c8:3e:61:0b:55:ed:18:a6:1c:
b6:ed:18:9b:02:af:55:6f:3d:5a:03:91:c4:e5:5f:14:0b:4b:
bf:ae:b5:31:e4:b2:c8:af:6a:72:99:e0:1b:4b:b0:48:dc:74:
d2:d5:d4:54:6c:e5:63:18:d8:5b:bd:5e:3d:06:36:eb:09:ca:
b7:a1:34:0c:29:fc:96:4b:a4:97:01:76:21:ef:c7:75:11:07:
e7:84:e4:50:85:89:dd:1c:a3:a4:eb:5f:3b:85:24:f9:0f:30:
fa:19:3f:af:ff:9f:0d:55:8c:a2:af:f4:53:06:01:b6:17:64:
50:42:68:48:73:96:bc:34:8f:34:5d:b9:bf:d6:7f:6b:58:bc:
7c:7a:4d:6d:a5:e5:0e:dc:ce:24:85:cb:4e:81:d3:10:06:95:
19:fe:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:52:44 2026 by rpki-client