Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: WUQC04van3UZW4aOY/ABfuPYs67j1SNExom7V4KlhWc=
Subject key identifier: 37:63:72:71:93:86:AE:4A:E5:71:7B:36:45:83:2C:EF:5A:29:BC:FD
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 01A0E73F6DEC459F9046F92D2B254C84BCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 1639
Signing time: Mon 28 Sep 2026 09:01:28 +0000
Manifest this update: Mon 28 Sep 2026 09:01:28 +0000
Manifest next update: Tue 29 Sep 2026 09:01:28 +0000
Files and hashes: 1: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (hash: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA=)
2: iCHozfTTxF16YGNAVt20MXzc00g.roa (hash: H989MZeJbW+NOaRo/HUuwj+zsKhP6qt0Wm1UtPVlNvk=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: IsOq/RnIZrRMQ+5Wzggf/5jV+vBPMFj/z0dYDMaMNXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:6d:ec:45:9f:90:46:f9:2d:2b:25:4c:84:bc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Sep 28 09:01:28 2026 GMT
Not After : Sep 29 09:01:28 2026 GMT
Subject: CN=376372719386ae4ae5717b3645832cef5a29bcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:38:29:de:6f:d8:cf:d1:89:17:ba:13:11:
09:a2:7a:84:7f:59:3a:c1:cd:24:16:b4:4e:11:a9:
fa:63:e4:3e:45:7a:93:b5:ae:66:7b:96:48:58:ab:
69:17:ee:ce:9c:cd:b7:84:6b:b2:12:38:09:62:90:
66:0c:8e:af:36:b3:b4:61:38:c6:9d:20:97:56:b8:
d1:41:7d:bf:ea:cb:ec:8a:36:2a:17:d4:85:d9:64:
b9:f1:0c:b2:87:39:81:1b:a7:88:89:4b:81:c2:fc:
07:d5:d1:9c:a6:f9:a6:dc:4f:db:bf:7b:d4:37:1b:
df:50:cf:fa:ab:1d:05:c8:76:e3:c9:75:ea:36:b7:
f1:63:76:99:ca:0b:0c:88:78:f2:b0:7d:63:fb:f1:
e6:aa:c1:9b:62:39:e0:66:93:1d:ee:27:a5:cc:90:
41:e0:5f:b6:2a:e7:8a:f9:62:32:53:f9:cc:fc:1c:
1a:2b:aa:68:04:b5:ce:db:c5:76:af:cc:ad:aa:67:
02:3f:a5:1f:75:11:06:27:81:2a:eb:d3:14:b0:ac:
56:e5:d0:cd:c4:97:cb:1a:5d:79:10:43:66:2e:a7:
bc:c6:f5:e4:78:da:c2:f1:15:3c:aa:3d:c9:b8:22:
46:cc:8b:7a:02:33:b0:45:6a:9d:7f:e0:4c:3c:b6:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:63:72:71:93:86:AE:4A:E5:71:7B:36:45:83:2C:EF:5A:29:BC:FD
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f7:59:fe:80:95:84:9a:1e:08:7d:35:bc:78:76:5c:e2:21:
bf:c6:78:0d:81:dc:5a:b1:73:54:90:ce:f8:4c:20:51:14:70:
b3:c9:f9:cb:78:a6:20:08:45:ee:84:36:84:e4:4e:3d:d7:a2:
98:11:b2:5d:84:db:17:74:74:93:87:c9:f1:73:a9:cc:b4:bb:
51:2e:6c:e2:9e:31:86:37:17:02:2e:c0:20:5e:dd:53:d7:99:
b5:9b:4a:07:c0:4a:b1:38:77:22:43:42:24:40:9c:fc:58:f2:
e6:6b:1c:c1:d1:83:08:96:ee:5f:50:e7:ed:aa:fb:f7:19:8f:
bf:a9:0f:3c:e2:93:30:dc:62:35:34:b3:ab:e7:d2:54:02:f9:
c4:83:ca:5e:bb:d3:d0:74:5b:ec:9a:db:c6:58:4c:a7:61:2a:
c6:c5:3a:e7:0a:11:96:1a:ae:f7:87:e0:30:20:b4:c5:9f:0c:
b6:e0:84:9d:cd:ba:4e:d1:c9:b0:c0:70:d2:95:35:ef:41:b5:
09:cb:53:91:d6:92:ea:93:4b:a1:c4:e1:3b:ae:d5:61:eb:01:
8c:19:e0:1a:41:c6:07:ee:e5:b2:93:d6:a2:63:f5:53:ff:be:
fd:20:01:4e:9d:25:87:0d:b5:65:c4:1d:af:7c:0f:10:27:05:
6a:34:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:37:07 2026 by rpki-client