Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: tatQGgPAX0MrLuwJ89cVVbP6+1i2A2CCpA9Zw8V/Mqw=
Subject key identifier: CF:92:42:11:03:05:A3:EB:87:4E:A3:F3:43:DC:A1:9E:EE:B1:DE:7F
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 01A0C2203251B2647A7C638283AB9371913B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 1085
Signing time: Mon 21 Sep 2026 04:01:24 +0000
Manifest this update: Mon 21 Sep 2026 04:01:24 +0000
Manifest next update: Tue 22 Sep 2026 04:01:24 +0000
Files and hashes: 1: OxlIMVmAsJoaXxdeH-zRm0aZJmY.roa (hash: Ip5Y0NJgcptDCnlNShnY7k1XbFcnH0s1uGDobJEDi+g=)
2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: apIMgGbTiXi+zLGkVaIqeEXFf+HOg8TbDBf6jwOsoeA=)
4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:20:32:51:b2:64:7a:7c:63:82:83:ab:93:71:91:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Sep 21 04:01:24 2026 GMT
Not After : Sep 22 04:01:24 2026 GMT
Subject: CN=cf9242110305a3eb874ea3f343dca19eeeb1de7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:44:8f:87:c1:e0:fb:8d:a4:10:73:ab:f7:
5a:61:13:49:e0:5b:d2:42:86:31:94:73:cf:b6:f5:
73:64:8b:43:8c:b6:55:32:e8:9a:c2:41:a7:fd:83:
47:c0:24:0a:21:e6:98:44:15:13:bd:f6:51:0c:be:
8d:f8:c5:20:14:72:82:24:ef:74:96:e6:de:28:50:
3a:3b:62:63:47:92:e0:47:32:04:a0:62:92:87:bc:
72:c1:90:c1:1d:0a:f1:94:9f:fe:28:ca:ae:59:6b:
c6:f7:85:ec:3d:27:3b:c0:30:3c:43:75:24:3b:c2:
6f:9b:88:ae:93:6b:94:03:7d:8d:c1:3a:b9:b7:f2:
e9:dd:d7:5e:75:dd:b2:ae:68:5f:0b:dc:36:3d:75:
18:9e:a4:3f:37:04:89:a2:f6:34:14:c8:57:96:a6:
98:1c:df:4c:cd:10:40:03:85:40:41:99:f5:20:e3:
21:f1:27:6f:79:18:1c:2c:78:03:1f:30:80:24:b4:
8b:05:19:c1:04:c3:85:15:bb:df:5f:9a:d0:2c:3a:
3c:38:6a:2f:0d:ac:9d:7e:ff:e1:95:9d:84:5f:f9:
51:a8:79:14:93:66:c5:11:e8:bd:7a:14:4f:9f:49:
41:f1:8b:f9:a4:d4:c8:9d:c0:75:c9:d1:73:ca:ed:
80:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:92:42:11:03:05:A3:EB:87:4E:A3:F3:43:DC:A1:9E:EE:B1:DE:7F
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:23:74:1b:3c:c0:4c:d0:98:d2:a5:f0:2a:b6:32:de:04:85:
39:78:4f:48:7b:5c:16:fc:d3:76:71:40:17:08:c0:0a:5c:ac:
16:17:18:c5:f0:77:21:fe:a5:9d:38:00:c7:38:23:ad:d4:c7:
ea:6a:5d:8b:63:8d:e3:9d:25:1d:ca:69:fe:00:07:4a:18:f9:
37:e4:c0:75:54:b3:32:09:b8:3a:00:a2:78:f6:a5:06:64:77:
51:42:a6:00:f7:9e:83:93:76:42:2a:20:71:6a:bc:7f:a6:46:
e9:35:11:25:fd:42:27:a6:2f:21:12:e2:f5:8f:2b:27:68:fd:
66:cb:9f:6e:0f:d1:4d:10:b9:c7:e7:29:7b:47:65:10:77:4d:
da:69:e4:1e:4f:0e:74:0b:9f:4b:7b:1b:14:3f:b4:ff:04:5f:
27:65:f8:4b:a6:85:46:03:80:2d:7b:21:94:26:bb:7e:d3:e8:
dd:18:45:8f:d8:c3:63:dd:cb:98:db:24:da:1c:f8:13:d6:b7:
ed:ca:3a:ef:d7:9f:11:47:61:d2:71:41:af:c9:d4:79:64:85:
c8:7f:10:c7:8d:8a:75:d0:f4:b4:02:93:74:b5:ae:92:2a:2e:
6a:54:53:ec:d8:f1:3f:0e:c4:81:10:6f:d4:19:8a:76:c9:e9:
c9:a5:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:53:32 2026 by rpki-client