Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: ekV4sP+D+actl3jC4Nh/3UYMa7sW46we46JHTLILEUo=
Subject key identifier: E9:94:CB:A0:4C:D5:88:35:A8:34:6C:F5:C5:58:5C:EE:BD:B0:1F:0F
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 01A12E0E274089F475CFA596AF1020A56C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 0C6F
Signing time: Mon 12 Oct 2026 03:00:41 +0000
Manifest this update: Mon 12 Oct 2026 03:00:41 +0000
Manifest next update: Tue 13 Oct 2026 03:00:41 +0000
Files and hashes: 1: G_JW6F6wHuk8xHOWEfihSql-qpI.roa (hash: DioqiN9gi012cANZP03n6UlA0P8l0ilW5rpF7qQDEm8=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: OThGav2waJtv+jb0j7gn2pNZOydcad1eeQRkxYs/gmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:0e:27:40:89:f4:75:cf:a5:96:af:10:20:a5:6c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Oct 12 03:00:41 2026 GMT
Not After : Oct 13 03:00:41 2026 GMT
Subject: CN=e994cba04cd58835a8346cf5c5585ceebdb01f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:c5:20:9c:52:03:4b:c8:e4:26:62:09:aa:
b8:6c:ee:07:da:47:4c:b5:27:7e:6e:2a:cf:2d:34:
29:6d:dd:b6:b5:df:74:76:f5:0e:ab:6c:89:6e:bf:
b9:ab:21:66:0b:26:b5:3c:79:69:a2:78:d6:d6:ef:
4d:b2:3e:14:5f:94:74:b2:49:c3:d6:07:96:2e:89:
a8:83:8b:30:e7:32:af:a5:f1:1e:a0:51:d1:ba:f9:
26:94:66:34:89:5c:0c:49:b5:87:0b:ca:2b:4e:5f:
8b:be:7e:24:7b:ba:27:65:68:87:66:63:ec:39:8d:
55:fc:32:c8:58:4b:a9:fb:a8:6f:b6:27:ba:bf:f4:
b9:db:09:49:0a:33:77:55:a7:20:e6:0e:6a:92:e8:
33:d9:5c:4d:4f:48:8f:61:be:a9:f3:79:bd:2d:d8:
74:39:33:c3:db:dd:50:57:43:07:f1:f3:b9:75:66:
33:ac:b5:3f:c2:f7:a9:6c:d2:c9:8a:51:cc:2a:e2:
ac:f6:95:5b:8f:83:76:50:fb:0e:fe:9e:a9:88:c6:
91:ac:34:03:be:9c:a5:a3:cd:93:56:06:c6:62:31:
12:5a:58:38:9b:92:72:01:98:f6:82:0e:63:be:8e:
bf:eb:de:14:80:c4:90:df:0d:49:8b:9b:7b:ac:b4:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:94:CB:A0:4C:D5:88:35:A8:34:6C:F5:C5:58:5C:EE:BD:B0:1F:0F
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f3:8c:be:d5:96:2e:0c:fc:48:e5:31:fa:6b:2f:d2:f7:0d:
da:83:f8:be:76:16:4f:b7:81:1f:2a:ec:3b:cf:5a:b8:a3:1c:
eb:44:62:dd:49:3d:dc:c7:13:6d:5c:fc:cd:44:a3:25:8c:41:
92:9a:d7:58:14:c4:53:22:5d:eb:9e:63:05:ea:28:c4:c4:41:
5e:28:d5:7c:d4:22:3c:51:70:cb:e5:0a:31:3f:ef:6e:8d:e5:
c1:a4:74:d9:68:ba:7e:65:8e:db:98:53:7b:9e:a9:a6:a2:6f:
5c:54:71:fa:20:ed:07:58:c7:f4:73:fb:1d:39:7e:9b:69:77:
bf:78:36:92:b6:e6:33:42:ab:b7:59:fb:67:ef:c4:a2:f3:13:
95:c7:ea:cb:b4:1f:7a:04:51:63:a8:d3:21:c3:91:14:d3:cf:
13:55:cc:bc:40:d2:82:2c:6e:6d:e2:b6:87:0d:df:13:25:93:
e3:53:6f:15:b3:00:26:18:aa:f5:bc:5c:17:6a:4a:f3:f5:a1:
5b:b6:6e:fa:24:a0:14:09:be:93:43:da:16:61:18:52:59:4b:
a2:82:54:ce:59:11:7f:36:c4:35:84:75:e1:53:cd:86:16:6f:
17:60:61:87:c6:ac:d0:97:c4:71:13:f1:82:55:61:73:8b:31:
e4:7e:b2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 14:58:52 2026 by rpki-client