Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
File: oikngd9NLEc3PD_fY_u8mSdL2ds.mft (raw, json)
Hash identifier: cVCry6uzupVIJmNvgvaWk1mbHvQ/pCFRWOR9dpxUVvE=
Subject key identifier: 4B:2B:67:5A:C1:07:28:B5:15:3A:F7:C8:67:6C:44:B3:61:36:7C:3B
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 01A1046E4FDB49AAAA58B66025E657F0ADDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
Manifest number: 024B
Signing time: Sun 04 Oct 2026 01:01:40 +0000
Manifest this update: Sun 04 Oct 2026 01:01:40 +0000
Manifest next update: Mon 05 Oct 2026 01:01:40 +0000
Files and hashes: 1: 8IaNzILRluMfhJGh9Sp2iK5EyEM.roa (hash: 3vEUGcIacC6NznoAP1opqDvHOyB7wnzG3LAD/dsWwPU=)
2: gD1shI7_ncKmAHHzuQDRToVphgs.roa (hash: b21XJdYw0N5m8mPRwkbYiHzi3HRna1r0I2/FnRhaR68=)
3: oikngd9NLEc3PD_fY_u8mSdL2ds.crl (hash: 8nfGj2kF1kCZGJUL4MozWFg1wNKToLrTQDM0efgXI00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6e:4f:db:49:aa:aa:58:b6:60:25:e6:57:f0:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: Oct 4 01:01:40 2026 GMT
Not After : Oct 5 01:01:40 2026 GMT
Subject: CN=4b2b675ac10728b5153af7c8676c44b361367c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:db:1a:1d:8a:d1:87:73:7c:7f:ee:73:f9:
10:8c:34:4c:eb:8f:97:72:23:d2:94:5e:31:f3:4b:
3c:0a:9b:66:7d:1c:e1:e1:ad:52:43:47:3c:de:7d:
61:27:e3:0e:a3:69:1f:68:54:9f:23:87:e5:96:4e:
07:a9:ab:e9:9b:6a:32:81:45:51:6c:0d:47:74:a5:
d5:c8:44:29:4f:ea:ed:57:54:41:2b:ae:6f:f5:fb:
59:44:81:1b:db:ce:3d:4c:22:4a:89:a8:b0:d5:46:
a9:91:ff:02:01:d3:a5:2f:86:46:43:5b:20:26:42:
c2:9a:aa:eb:8e:7f:99:ef:ba:16:43:b8:4b:e9:6c:
a9:e6:3e:1e:57:2a:ec:15:25:96:dc:ee:0c:59:f3:
2b:95:75:cd:fc:af:c1:8b:f1:15:4d:96:f3:a8:d1:
8d:d5:f5:6b:f2:7e:64:00:45:a5:23:c3:8c:aa:f8:
af:a7:a2:27:5c:7b:77:32:bd:fa:66:78:c7:24:85:
c5:9f:a1:f3:31:fd:d1:b2:df:9e:62:ec:e4:7a:28:
e8:4c:5d:08:46:2d:14:ff:02:b9:9b:9b:fe:ee:16:
df:95:f6:9a:79:5d:75:85:43:09:e6:ab:f4:43:55:
ae:9d:c7:f8:9d:40:f1:94:b8:5f:83:4c:5b:62:f1:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2B:67:5A:C1:07:28:B5:15:3A:F7:C8:67:6C:44:B3:61:36:7C:3B
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8d:fe:a8:64:12:e2:db:ee:c2:4a:6c:de:3f:0a:60:42:77:
db:84:32:b3:0a:4f:1f:e9:20:c7:45:2b:ec:86:b7:a0:73:25:
c4:f0:eb:68:0a:83:c0:fe:be:47:b7:9b:7c:ab:cd:f0:71:4a:
12:79:3f:0c:cc:f4:31:ed:bc:5e:f2:60:15:9c:9c:06:d2:52:
c7:16:dd:f4:57:22:89:05:20:34:63:46:42:de:6b:1d:fa:32:
53:7d:f1:ff:fc:00:0a:66:4f:57:ea:ca:ee:4f:0b:e7:5c:d8:
1f:eb:3e:85:ad:6f:75:51:78:a8:cf:c2:89:3b:04:58:59:f6:
0e:ce:75:51:f0:3d:ed:da:cd:e1:24:9b:aa:cb:67:fe:b8:50:
84:33:3d:96:2f:d6:ee:c4:e7:aa:b2:d2:05:91:e9:07:ab:f0:
35:c8:8e:8a:dd:35:9c:26:05:f8:f9:8e:11:c7:74:45:fd:ca:
01:1e:6a:54:92:ce:2c:ea:09:b2:fe:5b:71:a6:90:99:47:37:
72:fe:12:a6:52:2b:f9:ee:a5:e5:2b:2e:f4:3d:34:39:a0:29:
79:fe:9a:82:31:94:2d:ab:22:9c:47:9d:23:81:8b:08:41:da:
92:95:34:a7:c8:dd:a3:18:59:33:e8:37:08:f5:2a:c4:cc:65:
6e:e9:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:54:55 2026 by rpki-client