Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: AevpS/msVrdynKTueAREA+F3qNEYnoZ4M4Gc20BNqUg=
Subject key identifier: BF:CB:83:CD:3F:F6:76:67:6E:79:E0:BB:2B:3C:47:21:36:38:A3:60
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 01A0E218DADBEF7EEE34E97C2C0D404C7495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 09BC
Signing time: Sun 27 Sep 2026 09:01:14 +0000
Manifest this update: Sun 27 Sep 2026 09:01:14 +0000
Manifest next update: Mon 28 Sep 2026 09:01:14 +0000
Files and hashes: 1: AhYsuHNUbK8a0XunNi5rUoZZd74.roa (hash: +Iz4KrzXh/10Mx5yBgfEhonyL6CqUOw7mbJ6px2LQGs=)
2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=)
3: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: PccNr6b//pgqNWxMNrGGSwQMVXX5eFreY0+quLTFU3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:18:da:db:ef:7e:ee:34:e9:7c:2c:0d:40:4c:74:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Sep 27 09:01:14 2026 GMT
Not After : Sep 28 09:01:14 2026 GMT
Subject: CN=bfcb83cd3ff676676e79e0bb2b3c47213638a360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:ed:43:85:c6:b1:5f:a7:9b:8b:c8:70:5e:
4e:d8:27:50:55:5f:21:54:ae:df:cf:6a:11:66:65:
6e:b6:af:94:58:17:f7:63:4b:76:23:7d:31:03:19:
e5:f5:1e:5a:e0:b6:7c:03:c5:fa:19:c1:0e:39:3b:
8d:e9:0c:c5:58:d3:a6:70:b5:b6:b7:e9:7b:8f:eb:
3a:1a:5f:c8:62:38:8f:65:07:08:ba:78:5c:b3:0e:
65:26:26:68:b5:30:02:ef:63:3e:7c:50:2a:ba:18:
db:9a:e1:50:6b:dc:66:fa:b4:6e:02:39:63:36:98:
51:90:11:8a:bf:76:b2:0e:01:93:ee:1f:f5:36:40:
63:96:cd:93:99:8e:91:25:c0:57:a4:e9:a3:4e:c7:
82:87:7e:4e:d2:a8:7f:13:72:9a:c3:72:ea:88:ab:
1d:cd:5b:e9:f9:66:d8:af:c2:f7:39:93:db:e1:05:
11:e8:f7:42:6b:18:e1:34:4b:b6:a7:24:c6:19:d3:
86:93:45:0c:56:0e:86:6f:b0:e1:c8:8c:3a:67:28:
0e:5e:86:68:48:c2:28:ab:e8:89:cc:48:75:67:6c:
dd:75:ce:13:40:fd:10:e6:99:0c:ba:8e:8a:ec:9b:
5b:f5:28:b6:05:ba:4a:37:6f:9b:93:fb:0e:65:34:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CB:83:CD:3F:F6:76:67:6E:79:E0:BB:2B:3C:47:21:36:38:A3:60
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3d:0a:ac:b3:62:84:c2:12:7f:61:87:27:50:65:90:27:9f:
08:d4:1f:aa:b0:65:8c:e0:67:0d:88:25:18:65:2b:aa:44:5d:
ab:f0:8c:de:56:ae:26:83:44:a3:4e:ad:72:9f:d9:ba:f3:83:
cf:87:1f:a3:d6:7a:10:9f:28:b5:f0:dd:05:be:d1:41:4c:0c:
14:f6:9b:ee:0b:0b:d4:b1:f6:7e:96:03:9a:3a:53:21:db:f1:
5d:45:68:d5:10:b3:c1:9a:3a:bf:48:cf:1d:ab:58:16:d8:fd:
f5:27:27:85:31:82:e3:f5:a2:3d:6a:7d:46:40:4c:5e:8c:d4:
79:f9:51:80:0d:17:a1:30:cc:f4:4f:e4:a4:7e:72:1e:ff:4b:
6a:44:62:1a:ce:d6:5e:20:94:48:ff:39:eb:56:3e:e0:96:c8:
1c:bb:3f:09:1a:a7:af:89:b8:3a:5d:19:01:dc:f6:43:dc:bc:
88:ca:64:38:76:56:3e:ad:90:e8:7d:ce:ce:a8:7e:1d:fd:7c:
5d:26:52:13:2c:77:44:55:71:a5:60:b4:18:1d:43:a3:e0:6a:
e3:86:9c:4d:24:71:5e:b6:91:21:79:3d:45:17:7e:76:1d:1d:
c1:f1:ba:e0:51:84:93:19:83:d8:95:4d:36:ce:97:b3:d0:9b:
96:89:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 15:01:46 2026 by rpki-client