Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
File: Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft (raw, json)
Hash identifier: KSIetE44YyzUF5rThNf9VzT8pD3kXpgZHRZqW+S6hCc=
Subject key identifier: A4:B4:F1:B5:7D:F3:A1:49:CB:92:E2:5A:F3:1A:C4:1A:BC:C0:03:6D
Authority key identifier: 39:A7:B4:A9:E8:91:F8:B9:B0:83:E9:80:A6:AF:AF:44:AA:6A:1C:95
Certificate issuer: /CN=39a7b4a9e891f8b9b083e980a6afaf44aa6a1c95
Certificate serial: 01A108141392BCD4154C09162D2B6C79EC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
Manifest number: 0102
Signing time: Sun 04 Oct 2026 18:01:35 +0000
Manifest this update: Sun 04 Oct 2026 18:01:35 +0000
Manifest next update: Mon 05 Oct 2026 18:01:35 +0000
Files and hashes: 1: JLnk5C74MEI_NjoEcm6PQfIFO6E.roa (hash: mjm8zSzLPcPug8icRhADhhaesrGC//QbH1Zmg7AdhiY=)
2: Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl (hash: FvFAop7sc8azpeE1jIwQcOD2HPi8MhhW+4Gx3CcMw6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 18:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:14:13:92:bc:d4:15:4c:09:16:2d:2b:6c:79:ec:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a7b4a9e891f8b9b083e980a6afaf44aa6a1c95
Validity
Not Before: Oct 4 18:01:35 2026 GMT
Not After : Oct 5 18:01:35 2026 GMT
Subject: CN=a4b4f1b57df3a149cb92e25af31ac41abcc0036d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e0:e6:cb:74:08:d7:c7:71:24:e8:a6:0e:d4:
de:8b:6a:c1:db:83:4c:c0:68:bc:d8:b0:5c:16:50:
b4:0a:4f:c0:90:67:33:86:6d:bf:ae:79:9a:dd:71:
66:ea:67:3e:82:df:19:78:01:29:b7:79:70:99:65:
a7:8e:80:2d:e2:52:8b:18:c8:f7:f0:b5:9d:c5:c2:
6f:18:26:81:34:12:e7:48:3e:75:f5:48:93:26:fb:
8a:41:3a:2d:85:5e:a8:d7:d8:a5:0c:c8:6f:76:56:
73:a9:93:10:71:c9:42:24:d3:29:95:e1:0f:ad:bf:
b5:ad:bc:f9:ea:1a:82:f2:50:09:84:0e:23:e4:d7:
fc:58:72:d9:46:35:d2:c1:dc:f6:cd:42:8e:97:04:
3e:34:09:a8:83:1a:b5:61:45:d7:e0:73:27:55:22:
5d:67:bb:90:fd:68:ab:dc:e3:84:1d:7a:ff:a1:fb:
ea:45:5a:9f:99:9a:7d:9e:a8:ca:ba:21:1b:10:fe:
ae:a9:f4:69:7f:81:78:65:fd:ba:c4:ee:93:bf:07:
7a:0e:57:4a:a5:d0:cf:e9:36:06:63:46:a8:63:7d:
23:4f:cf:7d:6d:68:0f:b6:60:58:4b:65:b7:6f:31:
9f:bf:0d:87:2b:79:04:63:c3:78:71:01:48:bb:0b:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B4:F1:B5:7D:F3:A1:49:CB:92:E2:5A:F3:1A:C4:1A:BC:C0:03:6D
X509v3 Authority Key Identifier:
keyid:39:A7:B4:A9:E8:91:F8:B9:B0:83:E9:80:A6:AF:AF:44:AA:6A:1C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3e:42:53:bc:17:2f:53:6a:25:45:53:78:76:20:f4:e3:d8:
5c:32:a9:6e:a2:54:b0:9c:a1:52:5e:ca:2f:39:a9:f2:5b:89:
c2:a1:f2:94:78:d0:2a:f0:17:97:0d:57:da:f2:93:df:bd:1b:
a5:9a:6a:54:d0:63:e0:a1:89:d1:6e:c5:9b:f6:f1:ea:35:ff:
37:d8:c7:1a:50:34:95:65:58:86:20:d8:54:11:3f:53:83:68:
3c:38:b3:73:70:79:c5:4a:40:a1:e7:e7:a5:15:31:dd:07:f7:
91:b3:d8:ab:ed:9c:7d:a1:d4:50:74:18:1f:7b:3d:51:d8:ac:
99:00:42:38:1b:7a:06:d3:55:b2:a0:df:36:c6:81:c6:25:05:
4b:10:82:19:7c:2d:80:12:3e:64:96:d4:af:44:fb:d6:ed:a6:
7c:a6:d4:3c:79:ab:5e:9c:4c:da:f7:dc:4d:24:34:91:fb:9b:
20:8e:c0:b1:c7:36:db:88:98:a0:9e:48:40:ca:bd:6f:e1:0c:
9c:f9:93:a3:4f:dc:dd:f0:d6:f5:28:75:97:e9:43:dc:b5:6c:
69:fa:ef:0d:aa:c2:09:d3:25:0e:40:1f:fd:f1:c3:32:0d:ef:
17:2b:b4:08:cc:7d:3d:7e:4e:34:4c:40:16:63:1d:03:9f:ab:
53:b6:fe:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:41:14 2026 by rpki-client