Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier: zWwD5w6l47CPFKMTuWCWFP6RYHsV5WtbY+F1teMcF7k=
Subject key identifier: AC:47:A9:BA:DC:D0:3E:EA:00:32:8C:52:61:83:B7:FD:79:F1:17:7C
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial: 01A0D9BB7D0E14DFAE0D3950A2F971CE9D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 18:02:18 +0000
Manifest this update: Fri 25 Sep 2026 18:02:18 +0000
Manifest next update: Sat 26 Sep 2026 18:02:18 +0000
Files and hashes: 1: 30VvsOLOvQSD5srWi9MnTb7-ZGM.roa (hash: jBYeosYFhoGfNSjVngOAN4aiqODSBThoz7W/c9R4k+s=)
2: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: Awri2FQaXyI1jDGHdNNuCh8+iOyn4ngrQUJg2pE9Smg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:7d:0e:14:df:ae:0d:39:50:a2:f9:71:ce:9d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Validity
Not Before: Sep 25 18:02:18 2026 GMT
Not After : Sep 26 18:02:18 2026 GMT
Subject: CN=ac47a9badcd03eea00328c526183b7fd79f1177c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6d:6e:dd:b4:96:8b:76:4e:0c:ce:c9:63:70:
1f:14:cb:6a:b9:2c:ef:df:7e:f0:1c:63:58:f4:01:
e9:ae:c1:47:ab:84:a6:fd:2f:73:e0:fd:89:0d:df:
19:8c:c5:5f:d1:f3:e9:c3:11:35:fe:25:d2:bd:be:
3f:a5:be:98:fe:4c:f9:4b:57:2e:a8:d8:43:1e:63:
21:5b:61:fe:87:86:02:a8:41:ed:da:0e:37:02:f4:
b5:d2:8e:09:65:2f:8d:94:8e:e1:da:e3:ef:be:76:
bb:fe:e4:31:ae:68:9a:11:0d:87:c4:51:70:12:a1:
85:71:b1:1c:37:e3:df:ff:2c:5e:38:fd:3e:ea:c0:
f0:a8:d0:c5:1f:b5:23:7f:4f:65:60:14:c2:d2:e1:
3f:45:67:a2:9d:d4:2a:e9:d4:3c:30:bb:73:0b:e5:
ae:20:b5:9c:15:88:94:81:b4:fd:7a:af:0d:99:87:
b8:14:01:97:f4:a2:55:64:9c:54:65:0e:d9:53:3e:
82:fe:43:98:2d:74:07:85:b5:be:63:5a:57:d1:f1:
3c:db:fc:59:06:4d:b6:74:36:73:a0:ea:08:ee:93:
bf:98:66:d8:59:d4:73:b8:db:ee:ba:d3:a8:1b:e3:
e5:37:e5:26:51:87:32:3b:65:97:43:9d:84:5a:db:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:47:A9:BA:DC:D0:3E:EA:00:32:8C:52:61:83:B7:FD:79:F1:17:7C
X509v3 Authority Key Identifier:
keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ac:66:46:c2:d8:ad:3f:8c:89:33:34:f0:ef:38:d8:aa:fe:
58:bf:e9:98:16:a1:14:aa:2f:e7:2c:67:17:f2:48:b3:7b:1a:
67:08:22:16:fc:33:f0:66:e3:f3:4f:6c:23:84:b3:d6:b6:42:
f9:ba:32:a4:92:bf:a5:58:2b:fe:88:b1:69:1a:06:48:38:35:
c8:d3:06:08:32:30:65:12:fb:61:3c:e7:db:4d:6b:ae:b3:a2:
a3:dd:ef:38:a2:30:91:64:bb:99:13:20:28:e6:53:36:a1:b1:
02:31:1e:2d:be:1e:71:d3:03:ba:ab:99:cd:eb:2e:ed:bc:b2:
48:5c:f2:ce:83:07:65:b4:83:db:ac:37:8a:96:6c:25:22:5c:
50:4d:b5:a0:31:1f:98:07:ec:06:c3:49:5c:2a:5b:85:b5:7d:
5d:d5:f1:b9:c7:06:a8:6c:b2:72:6f:41:73:47:c6:26:a0:d9:
5b:26:de:f9:94:f9:bf:18:da:3b:98:fd:d3:bf:95:5b:6e:f4:
66:df:63:df:26:0d:b5:64:9c:8e:a9:d5:cb:5f:a6:f0:b2:1d:
e6:95:c8:86:61:e6:f8:3a:d5:70:5e:51:b8:50:6b:52:2e:6c:
70:48:93:8e:50:89:20:d0:cf:8c:39:81:eb:20:a1:73:7a:1c:
36:e5:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:01:47 2026 by rpki-client