Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
File: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft (raw, json)
Hash identifier: NEdpem+K5pXE4sBFOpxMDfLpzWogZBpY1aVQEXukAc0=
Subject key identifier: D9:52:3C:6F:F4:5E:8F:6A:B0:97:7D:54:E3:74:10:52:D9:25:F3:95
Authority key identifier: A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
Certificate issuer: /CN=a231d7b97a07676122f72e465091d23606ae66a2
Certificate serial: 01A0F2315054BC1FD66D9DBE2EEF64456252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
Manifest number: 01C0
Signing time: Wed 30 Sep 2026 12:01:53 +0000
Manifest this update: Wed 30 Sep 2026 12:01:53 +0000
Manifest next update: Thu 01 Oct 2026 12:01:53 +0000
Files and hashes: 1: duR9uQ1SsCstwHLOlmLoUwdbMns.roa (hash: yA4AsbUZ49Idd1b6bOSpb8V75FCHwuh/putB9VxYleY=)
2: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl (hash: nPKGIYTA+l1gipszPzxYG0W7mB15OuSt4kuNYAZaPQs=)
3: yMLrlgL_4XGQv4PkP0fKel7Uqa0.roa (hash: WADJFfyNdRhdPfPcKnXU061md0h/PkE/qV2H2/38MPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:31:50:54:bc:1f:d6:6d:9d:be:2e:ef:64:45:62:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a231d7b97a07676122f72e465091d23606ae66a2
Validity
Not Before: Sep 30 12:01:53 2026 GMT
Not After : Oct 1 12:01:53 2026 GMT
Subject: CN=d9523c6ff45e8f6ab0977d54e3741052d925f395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:8d:cd:f7:8a:e1:9f:51:a5:fa:e2:6e:a2:
79:42:d3:bf:16:37:4b:99:42:07:26:87:21:24:b1:
0c:cf:c6:c1:aa:c0:3a:7a:c9:95:8f:2b:1d:6a:e8:
0c:9c:55:fd:ef:e8:52:27:5f:ea:86:56:90:6f:3e:
9c:97:c7:67:8d:be:9c:df:b1:30:d7:bc:4c:d4:f6:
c3:af:8c:c3:42:19:af:3f:38:4f:ff:0f:2c:92:19:
09:2a:25:46:87:58:7f:a9:bf:18:45:76:a3:33:22:
a4:16:ed:03:41:62:05:09:a2:04:3d:b1:0b:72:8e:
24:7f:d0:9e:af:08:98:6e:d7:3a:f7:d3:33:bb:a2:
a5:6f:21:3a:1b:a8:6e:4d:a4:a9:30:af:04:2b:b7:
22:93:e9:6e:ed:fd:b9:43:d1:f0:af:0d:cd:30:c7:
f9:f0:00:a6:21:fe:0f:62:52:13:9d:c9:3e:ef:8e:
15:4f:d6:c2:36:61:5f:57:0f:5a:9d:74:f3:c3:4c:
4d:08:42:8e:1e:d8:ce:99:96:b0:35:e0:c7:d9:c4:
f8:4a:67:e0:78:8e:66:f1:cf:08:dd:a3:6e:af:4e:
fd:51:58:18:e2:22:6d:09:d0:90:f2:92:18:0c:fa:
9c:d4:ff:4c:55:6c:cc:9f:ec:c2:9a:23:93:83:86:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:52:3C:6F:F4:5E:8F:6A:B0:97:7D:54:E3:74:10:52:D9:25:F3:95
X509v3 Authority Key Identifier:
keyid:A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:89:12:ca:5f:f8:05:57:96:c2:dc:dc:7d:48:6e:f6:59:24:
45:0c:e7:99:8b:79:10:ce:1b:21:8d:67:97:16:4a:dc:23:b4:
c5:fe:22:1c:a1:6e:9c:d4:35:d7:ce:20:96:79:6c:49:cc:ed:
30:24:d2:8d:18:84:0b:1d:9b:34:27:d9:7d:d0:59:5b:bc:51:
69:cd:74:93:43:8f:89:01:01:3d:41:c8:2c:a7:95:36:1c:63:
33:dd:3f:2f:e2:9f:18:d1:d0:4f:b4:18:dc:fd:fe:53:01:9e:
52:e2:25:df:93:72:10:6f:00:69:ab:5c:b8:cd:27:fd:fc:61:
c1:39:d6:50:1d:21:11:22:b9:92:60:e7:bd:09:4a:a3:fc:c6:
f9:64:fb:63:ed:33:16:35:4f:b6:fc:f2:ae:fe:5a:a7:8d:65:
2b:70:eb:a4:be:94:88:ca:c5:e1:50:5c:b9:0d:88:1c:53:0f:
09:c9:73:67:c4:16:60:04:dc:68:80:2a:40:2b:f0:9f:01:c1:
36:d8:58:f5:ce:69:ac:74:a6:15:3b:2b:71:7e:57:f1:dc:91:
21:b2:88:79:6a:6d:ae:93:1e:3e:5d:c1:f2:87:6f:67:8d:5a:
ac:d5:f7:70:74:74:4b:8e:53:41:b4:c3:da:72:91:55:e0:3d:
6f:a4:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:01:29 2026 by rpki-client