Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
File: mOUyD4Vr6C6odOktbYC8b5l4MA4.mft (raw, json)
Hash identifier: B1t7zSA3Jkh6d9egtFozojhwynpEz0n/dZddMcYzfOc=
Subject key identifier: 08:EA:30:E4:2F:C1:37:37:05:3A:20:07:C9:98:DC:B2:10:D4:6A:30
Authority key identifier: 98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
Certificate issuer: /CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Certificate serial: 01A0D3EF415E3381E80F198A08C5E0FCE3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
Manifest number: 0422
Signing time: Thu 24 Sep 2026 15:01:07 +0000
Manifest this update: Thu 24 Sep 2026 15:01:07 +0000
Manifest next update: Fri 25 Sep 2026 15:01:07 +0000
Files and hashes: 1: 46CB3rmq7ghb0IOigVJMslc8LZI.roa (hash: iNpxmitmZCNCk+8flAyzDSyitulva1I3mwpI1j7ulR8=)
2: cXM4klbaacUguvuXRN4gU4Cio9A.roa (hash: TvSKvxbQqZ/2OHUvXcP+0jqJAZh3aKDn2NH8HHVBK/A=)
3: mOUyD4Vr6C6odOktbYC8b5l4MA4.crl (hash: wXNpyBbcWvueQTXG2mMcr8CY3dFWs/Jpc6EqpZRlMF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:41:5e:33:81:e8:0f:19:8a:08:c5:e0:fc:e3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Validity
Not Before: Sep 24 15:01:07 2026 GMT
Not After : Sep 25 15:01:07 2026 GMT
Subject: CN=08ea30e42fc13737053a2007c998dcb210d46a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:64:27:8d:87:3a:e0:84:14:ee:e0:33:87:8a:
81:56:85:77:d7:f7:1d:f2:8a:39:2d:19:8e:c4:94:
cc:66:59:f2:48:fa:f1:5a:91:9e:cf:82:a3:88:07:
1c:9a:6e:15:c0:6b:39:62:2e:59:ca:7a:69:38:ca:
40:6d:bf:d3:2e:73:dd:f7:09:ec:8d:a9:49:99:fc:
fd:6e:b4:56:34:97:e9:c4:ea:54:82:81:74:74:72:
fa:11:a3:ec:1a:74:7f:22:af:75:e7:ec:75:bc:68:
89:3f:24:da:54:55:49:92:df:2e:f6:09:a0:02:60:
e1:31:73:2d:2b:7d:58:85:e4:e1:db:5b:5f:3f:d3:
91:eb:53:ab:24:8a:41:15:3b:77:a3:2d:27:13:9e:
68:09:ee:d4:30:20:78:19:9d:cd:6c:5c:a6:3a:5a:
a9:4d:b9:13:83:18:ca:19:94:6c:5e:51:c8:ac:ed:
57:7e:7c:cf:5a:2b:3c:aa:67:b4:bb:91:f7:f5:c8:
50:03:cd:1d:57:b3:43:3d:98:ec:57:a0:1a:dc:bd:
42:7f:6e:32:60:17:88:ba:55:78:71:6a:b5:44:d5:
7e:f5:3c:3c:2b:a7:db:5e:1c:cc:c2:10:8f:83:66:
47:08:8b:38:16:f3:c4:ee:1e:e0:5f:ca:b4:18:12:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EA:30:E4:2F:C1:37:37:05:3A:20:07:C9:98:DC:B2:10:D4:6A:30
X509v3 Authority Key Identifier:
keyid:98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:07:5b:6b:a5:72:63:87:f3:41:7d:0a:9f:a7:68:20:c8:61:
60:70:c2:ad:46:6e:54:ec:27:d1:bb:6e:f3:ff:fe:d2:f0:79:
5b:9e:e4:b1:e5:76:51:1c:ec:95:ae:28:22:36:74:4a:5c:9a:
82:50:53:64:27:f6:02:33:77:06:05:47:37:fe:b8:84:6a:ac:
5d:29:79:9a:59:a8:81:bb:b0:7c:95:3c:57:9d:9a:ac:60:58:
3b:ba:03:dd:87:74:d5:01:cf:0f:3d:2d:5d:82:8f:6c:e1:b3:
2b:c5:69:6c:db:5c:f5:d3:f8:3f:36:52:cb:a4:4c:c5:89:fd:
29:05:d1:4a:3b:79:24:c1:fa:7c:70:61:48:5a:fe:f3:4d:a7:
76:3e:42:6a:f9:33:00:2e:cf:0c:a0:c0:37:5b:8b:37:a7:dd:
3e:3f:fa:c2:70:32:9a:30:c4:33:b3:f2:ca:d0:be:9a:3a:c8:
5d:5c:1f:ce:8e:c3:ad:56:3d:17:21:83:94:77:0b:ec:89:4f:
0c:c8:a0:51:fb:6c:15:e8:ef:de:f6:bc:36:62:0d:b8:49:96:
7c:bc:ce:bc:9f:8f:b5:c6:22:b5:45:41:54:0f:f8:a1:aa:82:
25:45:47:fc:41:eb:40:8b:c4:37:ac:60:35:68:b9:e0:c8:8f:
44:41:9e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:55:36 2026 by rpki-client