Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: D+Qat3hVlJBetEHUqbfNCkHglrhTqpC278WfVUnzu48=
Subject key identifier: E9:6C:A1:93:A2:D0:DD:C6:F4:CA:94:8E:18:F9:80:66:9E:14:E7:33
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 01A0D5DD836AB6FFDEC646448EEE1F8477C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 00:00:59 +0000
Manifest this update: Fri 25 Sep 2026 00:00:59 +0000
Manifest next update: Sat 26 Sep 2026 00:00:59 +0000
Files and hashes: 1: FTsdE4w9A76bc9C2_7wNecbSPNY.roa (hash: rHj2MTYxRe64SZo8LvwXUUXTxEmUO5sPExmz8iIy3Rs=)
2: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: X+433JeCqY6XycrDLPmZB/xhgiK069eZ93YYSM9sPn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:83:6a:b6:ff:de:c6:46:44:8e:ee:1f:84:77:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Sep 25 00:00:59 2026 GMT
Not After : Sep 26 00:00:59 2026 GMT
Subject: CN=e96ca193a2d0ddc6f4ca948e18f980669e14e733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:8d:75:b2:87:73:86:41:91:f2:2e:85:51:
38:ff:51:0c:a8:f8:9b:f5:03:d4:45:0a:44:ab:8b:
07:99:4d:e9:f7:7e:c8:d9:b3:05:a8:fe:f6:a4:c1:
94:00:df:ad:2d:49:5c:08:9b:70:01:a7:80:71:d0:
e8:73:25:fc:57:73:cf:84:1f:95:58:d4:ea:1c:56:
87:0f:50:53:7b:5a:b3:54:10:4e:0c:55:f2:2b:7b:
19:c8:ed:1a:64:9a:15:de:66:34:b2:9a:5d:c1:e9:
e8:8b:9d:ef:52:fc:7d:b6:81:d9:66:20:96:12:8d:
13:70:30:98:11:77:17:97:f9:c1:8a:58:c4:33:62:
0d:f9:e8:71:17:91:0f:1a:47:5b:97:a2:3d:d4:3f:
99:ab:e2:39:c5:a8:67:41:07:86:11:f5:df:90:2a:
72:98:a5:80:37:a0:67:1c:79:2e:04:68:9a:af:a1:
7c:17:98:bb:2e:cc:c3:79:7c:b8:68:80:67:b4:22:
94:be:01:9e:b7:9f:ad:a1:cd:b0:ea:40:cd:aa:a2:
f1:06:34:54:66:d2:a5:63:99:28:82:e0:c3:a0:9f:
52:7b:b4:53:97:0c:49:cb:ff:eb:00:f1:71:2c:24:
c6:75:2d:d3:ed:85:ac:a7:7f:f7:21:7e:fc:c1:bc:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6C:A1:93:A2:D0:DD:C6:F4:CA:94:8E:18:F9:80:66:9E:14:E7:33
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e9:2b:6a:64:c9:cb:a8:61:f7:2d:03:d7:1c:03:c2:51:b5:
63:bc:a7:08:49:5d:7c:40:12:67:0f:88:31:02:18:63:99:38:
90:11:fe:1e:01:07:37:68:51:a0:b8:13:c2:53:70:a4:cf:13:
a3:ca:c3:9e:bf:d1:3f:62:68:97:7d:08:dd:69:df:20:e5:f0:
7a:c8:f5:d7:94:36:c4:43:65:ce:33:24:1f:91:14:b8:98:d4:
8c:cd:32:d4:b8:de:2d:c1:3f:b9:1f:f6:22:23:4e:24:98:23:
46:b7:55:16:48:a0:b6:a4:99:0c:5c:e9:69:8a:11:7a:3d:35:
6e:0e:62:3e:6c:98:2c:a0:f8:58:16:7a:37:b4:b7:4f:67:c5:
7e:fe:4e:32:fa:35:4a:2f:24:03:75:d4:e0:3c:08:76:bd:08:
51:01:a6:01:99:a1:2d:5f:0f:47:56:79:4e:6d:2e:14:39:97:
f4:a3:bd:bc:48:e0:35:50:7e:53:88:fb:54:42:5e:6f:60:a1:
3f:42:04:d6:a0:3d:59:84:cf:97:55:80:17:c5:ff:77:43:6b:
9b:c7:ac:cc:cc:ad:66:ce:58:da:99:22:98:4b:da:82:bb:da:
fa:72:93:c9:9c:78:2e:da:ad:48:0a:c5:0e:2b:a5:c9:8a:cd:
11:24:e1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:10:51 2026 by rpki-client