Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: JqGUXlyXYWu2wqaPKGn2THmhZNOlIKrkp0NCz8EgYUw=
Subject key identifier: 6C:96:E6:17:75:C2:8D:A4:DF:2E:79:59:1C:87:4F:8C:B3:43:58:E2
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 01A0C7B386B9CF19A05DD1854914BF6A5DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0F8A
Signing time: Tue 22 Sep 2026 06:00:26 +0000
Manifest this update: Tue 22 Sep 2026 06:00:26 +0000
Manifest next update: Wed 23 Sep 2026 06:00:26 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: Ei9hmjOiiuZTSJclwdp4Xx9DEoFfxnLqcaOfZpg5tkc=)
2: UFBgy25q3CguK3nxfqwvatepW1g.roa (hash: m6Q6Vl1NfvutDppfODeVLNYdAatkJRM43X4ANyU2Y1Q=)
3: opow8uP9IKSNWNqVgii4cTwADfA.roa (hash: +b/EweslPo3iR9ssvZX7aiO4HVHajEP37IxcMi09yZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:86:b9:cf:19:a0:5d:d1:85:49:14:bf:6a:5d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Sep 22 06:00:26 2026 GMT
Not After : Sep 23 06:00:26 2026 GMT
Subject: CN=6c96e61775c28da4df2e79591c874f8cb34358e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:a5:72:7e:34:99:df:19:c5:5e:4c:05:b0:
d0:cc:93:c7:b6:0f:73:b0:a1:2c:80:7a:cb:b7:08:
42:3c:a5:67:87:4b:6b:e9:9d:d7:ba:8f:a5:2d:98:
3a:91:ae:2e:45:8f:81:3d:22:0d:62:a2:5f:36:b4:
e2:80:17:8f:64:ab:40:df:8e:e6:29:a4:a5:99:2e:
64:d8:96:0c:1a:34:37:cd:c8:1d:17:a4:e1:55:c3:
23:e5:58:84:e9:1f:c3:b6:db:8b:b2:28:2b:bb:54:
ca:49:64:f4:9f:08:d1:88:ff:d9:ae:c2:cf:7b:74:
41:24:c5:da:55:67:87:d4:76:2a:ce:01:9e:ba:e9:
fe:0e:86:0b:0f:9b:9c:a0:f3:c7:0a:d4:9c:0b:c1:
92:00:d8:89:80:ea:18:87:d1:2c:31:a0:cc:87:80:
24:11:d2:68:49:57:a0:5a:a3:b0:74:b9:0d:d2:7b:
4f:a8:a2:88:61:8d:f1:07:ff:b8:ae:64:55:e5:bc:
fb:f6:86:83:12:31:57:7c:10:fb:1c:5a:f7:21:61:
be:61:2d:8d:10:5e:42:a3:30:9f:d9:ef:73:ff:0a:
80:29:09:51:46:5f:e8:86:ea:8f:4c:60:43:c2:f8:
ca:fc:dd:dc:6e:a2:e4:4c:e1:b6:9f:d4:96:8e:6e:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:96:E6:17:75:C2:8D:A4:DF:2E:79:59:1C:87:4F:8C:B3:43:58:E2
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ab:88:b9:3d:a3:5c:c5:19:75:45:97:b2:0a:c7:bd:90:bc:
57:ca:05:f5:c7:b4:cc:fd:ab:11:76:ac:02:67:2f:3b:84:f3:
fc:40:e8:45:d1:3f:9d:8c:e2:fe:55:96:0b:14:71:13:c7:6f:
0c:c0:18:c2:f2:61:7e:e4:98:59:50:43:ce:d7:a6:6b:ba:af:
d1:1a:b5:7a:cf:78:e8:da:bd:27:08:a3:97:1a:ef:ea:22:4d:
8a:0e:03:1a:21:e7:b3:af:40:f6:dd:84:a5:fb:ca:c4:c2:0c:
d0:35:8c:3b:e0:2b:8c:09:0c:fe:04:c2:4c:8e:f1:34:76:10:
69:ff:f3:11:f8:85:be:96:2b:1f:1f:b0:a7:dd:30:d6:a3:4d:
c7:90:eb:f6:e4:5a:3b:c8:4d:86:0d:f5:1d:bd:5f:7c:80:c9:
4a:3d:9e:1c:e6:a0:7f:af:f8:a4:7d:79:58:85:6a:04:75:f1:
e3:9c:bd:93:2e:26:9c:f3:5e:a4:54:a5:18:d3:12:fb:15:42:
ad:33:df:27:fc:5a:01:11:a9:c6:73:bd:03:62:e6:05:0b:f4:
dc:4f:f8:f5:24:c4:69:2f:8d:77:8c:31:fb:a3:73:73:d0:01:
75:e7:5b:4d:07:06:7d:55:a6:dc:3e:19:7e:b3:73:d3:53:3a:
20:d4:14:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:51:45 2026 by rpki-client