Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: x62j84VUUnqFuS9mSkQsVxmBNdkvxu105uyO2bDi5lw=
Subject key identifier: F7:69:BA:F8:3C:2E:32:CD:35:F0:F0:0C:BC:8C:89:45:BC:B2:FD:19
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 01A119E263C3CB60E883450634B6EDA49513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 19EA
Signing time: Thu 08 Oct 2026 05:00:29 +0000
Manifest this update: Thu 08 Oct 2026 05:00:29 +0000
Manifest next update: Fri 09 Oct 2026 05:00:29 +0000
Files and hashes: 1: baIq0BCiBz3PcJlSkOIxGUjevrQ.roa (hash: CeBScbn4OcxM8onOF7lmNXHa9tIqH0Nd/sjn3RSNRVM=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: n9uoEQnZehYvBg8z29YK6DKTLRO2Z2b/5kl6cN6Qtuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:63:c3:cb:60:e8:83:45:06:34:b6:ed:a4:95:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Oct 8 05:00:29 2026 GMT
Not After : Oct 9 05:00:29 2026 GMT
Subject: CN=f769baf83c2e32cd35f0f00cbc8c8945bcb2fd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:6b:07:87:c0:19:fc:ee:32:c2:6a:76:25:
f6:cf:5f:b7:ea:21:f1:4c:f3:67:fb:f3:74:63:96:
0d:70:e4:9a:5f:c4:b3:b6:d6:85:a7:4d:6f:0f:34:
28:d0:b2:87:cf:49:a1:fc:58:dc:7d:f5:f8:63:a1:
5d:0d:72:5b:06:29:7e:85:b7:8d:ce:08:68:cd:1c:
48:ca:98:47:94:42:96:21:5a:b8:db:23:86:c4:3d:
67:e8:a7:ba:39:60:bb:ff:63:77:d8:09:27:84:b1:
f2:d3:31:9f:3a:e9:44:d7:f3:8c:38:41:f7:c2:16:
1e:14:a2:87:85:f4:36:d1:c8:d5:ab:21:ef:c1:bd:
5b:65:24:bb:da:62:67:38:9a:97:93:d8:85:5c:4c:
51:f2:7c:de:48:cf:fe:0f:81:b1:45:c2:40:09:38:
40:96:7c:b2:1e:0c:c3:f1:2f:e9:ff:fe:a3:7a:20:
9b:b1:88:71:71:7c:fc:81:d1:e6:42:47:12:fa:0b:
77:70:c9:54:62:3b:03:1d:e4:a7:0a:28:7a:21:da:
2e:f0:c4:0d:5c:ae:63:e6:8c:8b:81:cc:f2:fb:31:
83:6d:bc:f9:6f:82:b0:94:ed:5e:63:e2:12:e9:0d:
74:93:c1:5e:c3:e9:cf:16:06:12:61:ce:cd:ac:d7:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:69:BA:F8:3C:2E:32:CD:35:F0:F0:0C:BC:8C:89:45:BC:B2:FD:19
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d8:bd:c7:ba:17:ef:cd:7a:43:cf:50:dd:2e:48:fc:d4:9f:
a5:11:91:05:47:cc:a9:8d:93:ce:83:ba:d6:21:b4:31:fd:33:
5f:bf:40:95:1b:26:2e:af:ac:2a:09:65:fd:5c:ce:be:86:05:
91:a4:44:0c:57:c2:6e:75:85:79:81:b2:ef:28:07:ad:92:20:
d2:4e:1e:b3:21:25:0f:4c:c2:dd:ba:25:d5:35:31:81:56:bd:
7d:bf:93:8d:2e:01:c9:80:91:21:13:c0:4a:bc:ee:30:0f:3c:
26:60:6d:15:c6:d7:e2:bf:05:b0:7d:05:10:23:0c:b9:48:66:
e5:fd:97:db:d5:02:01:b7:90:ad:ea:f0:6f:ba:e0:83:90:31:
e7:71:c4:a2:71:d4:32:3a:7a:30:48:89:60:d6:7b:e4:c1:1b:
e5:a3:28:06:ab:3f:9d:47:14:f1:20:18:a8:86:a9:b8:c7:54:
34:b7:eb:d7:8d:c9:cf:f3:b9:64:fe:b7:55:40:0e:90:a0:89:
b8:ea:ce:26:05:3b:cf:bb:8f:5b:65:b2:c3:77:88:86:6f:9d:
72:4a:03:1b:ff:12:b1:9d:45:2d:57:a2:97:13:b9:8c:51:bc:
29:e3:8a:19:3b:f8:7d:95:44:d1:60:5f:5c:4b:0a:13:a6:07:
15:e1:88:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:12:49 2026 by rpki-client