Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: 5cKIlLh73x9y5RVzW3V7y/RmB/wM9p9nq4ztq0BchPo=
Subject key identifier: D0:A2:64:89:2E:BA:64:41:06:41:77:EC:DC:A8:B1:3C:0B:6D:D5:49
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 01A0D42679CCA24734C78779095453E220BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 1A7D
Signing time: Thu 24 Sep 2026 16:01:26 +0000
Manifest this update: Thu 24 Sep 2026 16:01:26 +0000
Manifest next update: Fri 25 Sep 2026 16:01:26 +0000
Files and hashes: 1: 4F0qq7jfLgA4RD6gA7xmoqFDdAQ.roa (hash: 9eu4ch/L8yFJeyFrLuDangAXcD7SJ7FBYBZ7Pt6AAHE=)
2: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
3: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
4: IcJ3NkApy3ZuH6zT14y3NRctQTs.roa (hash: YF8uwCi6VEOuzkntI7vmvok4914x30Fr6OxRnIaMfhE=)
5: JPCCmHU8ahX1DiUwh62NrS-GovE.roa (hash: DSN9B+i7KCMrZdm0LMRFnAUtEcKLHOT2ja1tLaLHNkQ=)
6: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: ok0Unhk2Mu3uygTx8vUscXU+ZJ0BlLvbdILBZMUtsEo=)
7: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
8: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
9: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:79:cc:a2:47:34:c7:87:79:09:54:53:e2:20:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Sep 24 16:01:26 2026 GMT
Not After : Sep 25 16:01:26 2026 GMT
Subject: CN=d0a264892eba6441064177ecdca8b13c0b6dd549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:8e:a4:18:6b:c2:97:1f:15:13:10:3f:cb:
9e:d5:b8:ee:66:19:d4:cc:c9:9a:7b:e6:50:be:6e:
1c:34:69:3a:ff:84:a0:4e:e4:28:09:3e:be:f3:51:
76:d7:93:af:22:8d:53:7e:64:8c:20:b9:dd:bc:ab:
bd:46:01:de:2f:db:58:5b:80:9a:e1:b5:fe:d4:ad:
4a:26:19:f4:13:66:46:9d:42:20:4a:0b:91:14:db:
c7:75:b5:b9:60:db:1b:3a:96:70:f1:8d:4a:3a:17:
59:59:3e:bc:9a:3b:d1:4f:e5:7c:e1:94:e9:c0:3b:
d7:fd:2b:04:5e:9f:b7:22:e8:d4:b6:16:b7:75:2b:
fe:f0:b5:46:c3:8e:c4:7b:ce:0c:0a:7a:57:7c:9e:
ec:10:27:b1:b9:00:fe:88:2a:b8:70:6b:39:a8:40:
0d:00:b0:f0:39:b7:42:37:18:45:b5:61:7f:40:c3:
03:12:d8:39:1b:56:5a:50:4f:8a:51:35:51:73:d9:
3c:38:3a:ef:6e:c4:34:54:70:0e:61:7f:b0:ea:20:
c3:8a:58:2c:3b:57:9f:18:ac:3b:97:ab:28:ae:2c:
f8:b5:29:99:6d:74:90:b9:c3:40:2f:0d:ce:a9:39:
94:d6:bd:0c:23:7f:ea:c5:22:2b:20:e1:0e:52:6a:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A2:64:89:2E:BA:64:41:06:41:77:EC:DC:A8:B1:3C:0B:6D:D5:49
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bd:e5:58:6b:76:c0:ec:fa:7c:5c:a9:d9:cc:af:58:9d:61:
2b:de:f1:a2:5e:ab:a7:16:4e:51:b0:3a:bc:42:52:b3:2b:54:
0a:d8:a7:7e:21:bb:d1:51:a9:0b:ef:03:8f:0e:29:5d:81:f8:
c8:08:f0:b7:fa:6c:63:03:dc:76:0a:8f:13:99:67:fc:3c:f3:
a5:d9:30:f1:5f:7b:50:aa:0a:14:1a:22:c5:48:67:ff:39:0c:
8e:aa:b8:55:10:5c:64:6c:12:df:30:ef:3e:cf:96:78:e8:df:
9f:fe:a3:03:fa:11:de:23:95:f8:50:99:94:17:2f:e2:8b:bb:
0b:70:a5:a1:1f:1c:e7:7e:96:a5:34:ba:3c:e5:d9:2d:d3:44:
ab:05:40:76:08:25:16:87:a2:88:aa:c3:19:e2:3a:4e:eb:8a:
a2:e0:07:b8:41:78:ca:6b:bd:10:c3:e5:33:20:5f:89:e1:08:
a9:ab:af:87:0f:81:ca:76:09:37:9e:9a:fc:1c:ac:65:89:ac:
22:e0:21:16:1e:27:4c:d7:a1:b5:6e:2c:b5:63:a2:a3:b8:3b:
db:9c:99:e7:65:fa:b3:22:3b:dc:9f:35:03:72:31:fc:6c:59:
ff:7d:0d:08:07:fd:86:ed:f4:52:f8:f7:18:1c:fe:c4:d7:25:
72:ff:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:57:18 2026 by rpki-client