Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: dAy8HW6kFEn5tslYUzpfiMOG5+j0JXTzZMxHE9B00Q0=
Subject key identifier: 42:58:7C:0A:D3:3C:8A:D1:72:A7:4E:60:EE:2D:57:97:E7:35:56:0F
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 01A0CF3684D15534E0F1D7944E4CAE2B5837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 1A71
Signing time: Wed 23 Sep 2026 17:00:51 +0000
Manifest this update: Wed 23 Sep 2026 17:00:51 +0000
Manifest next update: Thu 24 Sep 2026 17:00:51 +0000
Files and hashes: 1: 0iskxAKnPV1t3vVtL0ZxiR5NqDo.asa (hash: dTnlTRCOpAxkRq/1/Z4AQAvbwk3FcS0Wqrww9bcRVV4=)
2: mfvEjWb3rQFbj32_BBadoAv_Y0s.roa (hash: FGRbYmzgAXrFUwzG+mMOatKnvNqH9Ov9gtrQRgDuAmE=)
3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: cKr9DyW18trGQV7uymeaQTnfcNHckUnFNYqa4OocSwo=)
4: wvfBOreCybbt9afiUMU5R2NBdJQ.asa (hash: IVFtZ0X879D2RM6GVRG/lhLBfD0N96F/6jJoFE+cRr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:84:d1:55:34:e0:f1:d7:94:4e:4c:ae:2b:58:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Sep 23 17:00:51 2026 GMT
Not After : Sep 24 17:00:51 2026 GMT
Subject: CN=42587c0ad33c8ad172a74e60ee2d5797e735560f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:8a:e6:aa:f2:bf:b2:79:eb:ec:07:65:ce:
4a:a1:bd:b6:14:1a:1e:9c:8b:bb:0e:d3:f1:87:6a:
0d:a1:1c:53:cf:26:76:e4:27:0b:43:05:6a:3f:ba:
29:77:78:e2:d2:5f:30:7c:d3:5e:49:05:c2:a2:d3:
2d:dc:e7:e8:47:d4:e7:97:8e:37:db:fd:6a:2b:1b:
7e:2b:76:c8:5a:9f:f3:b3:33:33:98:5d:3b:2c:ce:
03:c8:8b:5a:f1:85:f2:d3:5a:b1:27:83:e4:28:2f:
d6:f5:ef:19:71:ff:ee:26:e1:a8:ed:a6:d2:0b:f0:
68:d9:1f:05:35:b0:73:11:e8:73:6a:e7:b9:15:cc:
41:75:62:27:21:f1:f0:3b:0a:42:b5:61:fa:a1:68:
76:3c:35:52:ca:24:63:be:70:97:18:59:22:b0:e3:
10:17:91:48:bb:b2:0c:78:c7:6c:e6:e6:ad:4a:e8:
66:0f:d7:92:ee:89:58:c2:9e:7e:24:0a:55:36:8a:
dc:da:7c:e1:9a:1f:ac:55:d1:c8:4f:26:9f:0c:e6:
d7:fd:e7:64:6c:25:1f:a7:db:44:3d:a3:5b:2f:33:
95:99:57:30:76:fc:e8:7e:59:d4:21:06:0e:81:f9:
d7:ea:fb:b6:09:c4:95:c3:60:77:84:25:d5:34:b1:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:58:7C:0A:D3:3C:8A:D1:72:A7:4E:60:EE:2D:57:97:E7:35:56:0F
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b9:17:3a:42:da:48:2a:42:b4:b0:37:dd:ab:0d:4f:43:4c:
6c:07:4e:29:7e:cb:44:08:cc:0f:f3:b8:1e:cc:92:ea:6b:ae:
17:0f:61:47:5e:f9:45:e6:a8:ad:18:78:09:3a:da:fc:4c:d6:
4a:42:e2:e1:99:73:3f:b5:88:94:4d:d4:f5:dd:de:7f:96:22:
03:40:0c:5d:46:4e:53:73:bf:0b:b7:ae:7d:d3:4c:4f:52:cc:
80:7a:54:7b:c4:ba:3e:84:44:da:c7:ab:a1:7e:19:3f:17:d3:
54:20:db:58:26:5e:87:cf:41:c8:f1:74:1a:29:19:07:8d:3e:
fd:c6:d3:75:bc:99:e9:6c:00:de:b6:c4:be:06:5f:58:65:a3:
52:dc:a8:3b:53:95:8f:5d:df:81:01:f1:3a:cd:c5:51:b6:bf:
e2:0a:3c:d1:a3:7b:6e:d0:9d:b3:05:ae:3c:3a:44:9f:00:2b:
bd:b7:45:77:9f:99:55:62:83:0d:f3:06:8a:d3:da:0a:54:3a:
48:5c:64:b9:79:b9:af:62:cd:25:6e:d1:5e:5f:0a:29:cc:29:
32:4c:6b:1a:78:37:62:91:95:8c:f2:3b:9b:9b:3f:76:bc:ef:
08:65:dc:34:2a:23:8f:34:e5:73:f9:dd:6a:fd:91:02:b7:5c:
2f:c7:29:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:33:13 2026 by rpki-client