Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File: oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier: hd+9jK5UJyz2dy8x34WwGUV5MjZvhP1flvz6EJ3swIg=
Subject key identifier: 5A:0A:84:16:79:81:C7:B3:CB:0A:E7:F8:F1:1F:63:81:1F:C7:DF:FA
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 01A13259361D6881312CB30FC44301312514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number: 176C
Signing time: Mon 12 Oct 2026 23:01:09 +0000
Manifest this update: Mon 12 Oct 2026 23:01:09 +0000
Manifest next update: Tue 13 Oct 2026 23:01:09 +0000
Files and hashes: 1: oSEjLh7tE7vzCV32cKgJCqIbOfQ.roa (hash: ok2Rd/dHH1xrcTOxIJkwbkzjT9nJscBwgfvl/QmA4kw=)
2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: tDxz9Gq103zlKKp/Mx7LVF7W1vPRiWvFjPEsm9LXK3Q=)
3: qp2csbkacIhcPOH3gt72Onkgy-g.roa (hash: ryu959Oek09C+3HvM+qc6pJhm8EK7Sp/xMy1J1sbAYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:59:36:1d:68:81:31:2c:b3:0f:c4:43:01:31:25:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Oct 12 23:01:09 2026 GMT
Not After : Oct 13 23:01:09 2026 GMT
Subject: CN=5a0a84167981c7b3cb0ae7f8f11f63811fc7dffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:29:bc:a5:46:bc:d0:64:98:43:c9:e1:f5:
60:df:18:d1:8a:5c:a3:a6:a1:e0:3c:70:25:77:c0:
9d:6a:9f:63:f1:a7:92:4b:07:48:2a:48:15:c4:fb:
58:67:ad:6a:56:d0:67:21:64:32:e2:c5:9f:1f:d6:
bd:5c:01:a5:dd:25:cf:cd:17:4b:6b:63:84:90:f3:
55:62:73:94:37:64:38:73:91:de:3d:8e:64:e2:a0:
1a:5b:53:0d:f9:31:5d:4d:51:93:e8:ef:d0:28:d1:
2e:57:c2:52:ab:92:6c:ed:6e:8d:15:b7:3f:28:72:
69:81:55:9f:7f:6a:de:63:77:13:f2:a5:c9:fc:26:
cd:9a:cb:fc:74:a9:5f:e0:cd:5f:fd:ab:7a:a1:4a:
52:97:56:76:c8:3e:93:c2:74:bb:c5:67:59:d5:54:
b3:2f:51:a6:cd:17:7b:bf:c2:8b:31:cf:bb:d7:b6:
46:16:7f:cd:cd:a4:ef:92:b7:7b:b6:ee:bf:cd:34:
28:cc:b6:a1:13:dd:fb:f9:b7:b9:6a:3a:72:52:ed:
04:b3:68:f7:fa:dd:d1:ec:fb:8b:65:bd:f4:5a:0e:
81:4f:93:b0:e5:bc:c5:6a:08:e8:02:f4:7a:67:09:
4d:96:83:be:0c:e0:77:1b:6d:95:76:bd:46:a2:b6:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0A:84:16:79:81:C7:B3:CB:0A:E7:F8:F1:1F:63:81:1F:C7:DF:FA
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e0:5b:81:34:40:18:51:f6:af:a1:e0:b1:ff:7f:c2:f5:ae:
ac:0a:60:ee:a7:c1:9b:eb:7e:53:e5:74:cf:b9:f8:83:d8:57:
8c:59:92:8f:27:cf:c6:ff:48:f8:ab:4b:15:fb:67:74:16:0d:
9b:40:3a:e2:5d:62:f3:33:39:fe:5f:50:14:80:e4:33:98:b6:
89:c2:a3:3b:74:e6:3b:fe:17:4c:56:b6:b5:0b:f8:a8:ff:79:
ea:36:6e:73:75:b4:34:e1:27:1e:41:2d:df:72:43:74:4a:72:
dd:3d:1f:ed:6e:e5:e0:b4:40:68:0a:f7:a5:28:a5:e2:e3:96:
5d:0b:e3:b5:1a:f3:33:71:ad:fa:46:f3:d8:f5:b8:a9:09:55:
bb:57:cd:4b:e5:4b:49:f5:b6:8c:c4:d3:10:21:89:3e:cc:c7:
40:2d:e9:91:40:40:13:cf:36:14:b6:31:1c:bf:b8:91:d7:ee:
42:50:c5:09:6d:d9:7b:f8:ea:fc:05:12:cb:a7:c0:47:3e:52:
73:12:e1:d7:2f:83:25:76:9d:86:43:38:a6:0f:bb:64:31:d8:
19:57:ee:c0:1c:02:69:79:3d:af:a8:24:49:75:69:88:d6:76:
6e:d5:c0:dd:f9:c3:7a:d6:11:24:44:7f:2a:04:c9:2a:2d:6e:
67:fb:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:44:20 2026 by rpki-client