Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: I97YhHU2RVSNdPt1iHP+p7KQWeAKABxbl2bEQzhp/t8=
Subject key identifier: F6:4C:39:15:50:B5:DA:72:D5:92:4A:1C:1E:16:A7:21:78:D0:E9:31
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 01A0F0E8347A9EE477806C6BF1AC96632F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 125A
Signing time: Wed 30 Sep 2026 06:02:24 +0000
Manifest this update: Wed 30 Sep 2026 06:02:24 +0000
Manifest next update: Thu 01 Oct 2026 06:02:24 +0000
Files and hashes: 1: DWNbWLKsKUbayknrkxZPm_ru1rE.roa (hash: 0OEC7qPtd3MHFAia/7IsrfByY6Mlpa/bnminYQcTx14=)
2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: 1nNxKValFzSfDoQtkt+pSVnqChKwcWgZoh94m7Hw3Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e8:34:7a:9e:e4:77:80:6c:6b:f1:ac:96:63:2f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Sep 30 06:02:24 2026 GMT
Not After : Oct 1 06:02:24 2026 GMT
Subject: CN=f64c391550b5da72d5924a1c1e16a72178d0e931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:2e:b6:3f:2e:1c:9a:da:f5:33:78:c1:54:
88:04:85:f4:3b:b0:07:64:62:af:20:50:d8:65:d6:
ee:d4:25:22:c7:1e:7a:c6:65:6a:70:88:52:84:1d:
53:f6:3b:c9:0e:47:4f:11:34:40:71:2a:0e:26:02:
5c:9a:11:05:9d:e9:a7:84:6d:23:13:07:87:09:94:
c1:b9:f0:60:74:bb:4c:a1:8f:1a:93:ad:fe:a4:ec:
8f:80:8a:ae:30:a5:8c:d7:73:0c:b6:fe:e0:82:3e:
ee:f2:74:ea:35:bb:0c:42:29:9b:46:e5:05:3b:1b:
5e:1a:29:89:82:b4:75:b4:ef:bf:46:b6:4d:5a:9d:
67:05:2d:f3:6f:dd:b4:b4:36:db:21:ba:05:f5:13:
ce:fa:b5:79:df:a6:00:59:91:3e:80:a6:b1:84:f4:
84:6c:da:36:05:60:04:5f:02:99:de:bd:0b:a7:67:
bd:ad:c3:2d:d7:07:92:9e:bd:7d:1a:8a:ad:0a:f9:
b6:fe:a5:48:fb:10:62:a8:34:c6:7c:1c:fa:28:67:
bb:18:00:83:c6:4d:3d:40:91:c3:58:19:4e:3c:bc:
b8:f0:9b:71:a4:34:bb:85:fd:1c:76:d4:c5:6d:f3:
1a:92:44:12:ae:b2:18:94:a2:ed:1d:c7:6f:ae:70:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4C:39:15:50:B5:DA:72:D5:92:4A:1C:1E:16:A7:21:78:D0:E9:31
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7f:bc:dd:34:b0:07:a2:fc:70:da:38:4a:29:35:d4:73:a9:
58:8d:46:4f:3a:16:7d:89:39:6a:94:5d:2f:db:45:ed:9b:de:
6f:8b:50:b1:4d:90:3b:ff:d1:8e:2e:93:26:bd:73:09:c8:d7:
44:96:29:ef:64:49:ec:7d:8e:54:03:09:da:cf:2b:60:48:2d:
ff:6b:17:53:d8:85:be:10:aa:c9:8e:5c:84:f8:11:03:df:45:
67:fe:5c:79:bd:4e:8b:33:20:04:9f:d5:fb:1c:14:a8:97:de:
eb:b4:cf:ae:f7:ac:44:d3:8a:c0:e2:fc:92:ab:0f:5a:28:b4:
7d:e1:13:ec:06:35:09:5b:6e:18:a1:06:c1:27:81:5e:4e:5d:
eb:ca:a5:e2:60:41:c8:34:75:d9:e7:36:de:d8:72:6c:65:2e:
79:25:09:88:87:45:e6:5a:4a:89:30:6e:a2:37:a7:72:08:67:
5a:b0:6f:2d:20:66:3b:ea:01:cc:64:78:a7:eb:7b:19:cc:5d:
68:9b:90:31:95:40:ef:44:ba:a9:a4:a3:0d:75:92:6c:56:2f:
6e:d6:07:b2:dd:ae:01:4e:55:3a:64:b2:3d:f8:22:b5:30:fd:
de:59:35:a1:63:6f:9d:d6:45:1a:b3:6d:28:e8:b8:12:db:8d:
ff:3e:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:40:11 2026 by rpki-client