Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json)
Hash identifier: wQK7HbQXOrUrEy1Z51mspR2KrwZlP+n1wLDHDFg5r28=
Subject key identifier: 54:96:70:F5:2D:8B:14:40:1D:5F:2D:90:22:6E:B7:26:AE:AB:44:09
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 01A0DB04016E45A8F0FE9986A27174F8FB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
Manifest number: 19A3
Signing time: Sat 26 Sep 2026 00:01:07 +0000
Manifest this update: Sat 26 Sep 2026 00:01:07 +0000
Manifest next update: Sun 27 Sep 2026 00:01:07 +0000
Files and hashes: 1: 2zvlLx0eZAbOYhxgIyqrlDoVC1g.roa (hash: KQYOWqTXbXwvtekOLsVc2rxud/hR8A87QDGRubzzTXw=)
2: 4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa (hash: Cbb+P8Z0r4y6AjDJgLqHTENuD/Go8wmcnnMVwTktU/4=)
3: D757pdeWdoida8GHOUdKTXVzQLA.roa (hash: 9oAemx2TPMquAep4lORrFPAoBV6BakfDEYxe+lt7IJE=)
4: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: tYBFeT7J/ZkVVrO5WjmDUY7wQ5O77ns7Nqf4Udt3x0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:01:6e:45:a8:f0:fe:99:86:a2:71:74:f8:fb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Sep 26 00:01:07 2026 GMT
Not After : Sep 27 00:01:07 2026 GMT
Subject: CN=549670f52d8b14401d5f2d90226eb726aeab4409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:06:57:cf:03:51:98:b2:20:16:66:34:90:71:
b8:48:20:b6:d1:33:da:5c:6e:13:06:32:8d:c2:b7:
e1:9b:76:2f:6c:c4:d1:b6:1e:65:f7:b1:3b:72:78:
a3:33:27:f6:4c:b2:2c:d9:2e:65:c0:1f:b2:af:a8:
93:5e:d9:b9:f4:e8:ee:d6:0a:41:dc:f0:4e:f7:1d:
af:46:5e:ea:7c:82:e8:6b:36:12:37:a9:19:1b:65:
cf:36:79:d6:4a:0e:eb:ec:71:98:c0:04:7b:13:40:
ff:f4:5e:17:59:72:0c:86:0b:99:ed:e4:90:c3:8d:
35:1e:ea:85:6e:c9:3b:12:e0:f4:64:aa:b9:cf:b2:
13:ed:cf:00:4a:f1:e5:bd:19:96:2f:67:70:ab:2b:
d9:e5:65:d9:26:89:01:a2:7d:1b:ff:c1:18:d4:43:
88:ee:7f:9d:92:4a:9c:06:d7:8b:bd:9e:20:64:67:
1f:3c:bd:21:66:3c:6b:52:06:2d:b4:83:cf:4d:fb:
c9:f8:27:88:bc:5d:1d:ac:a6:92:7e:40:1a:27:d8:
21:58:b7:0c:13:4e:47:1d:97:e4:01:45:23:3d:6b:
e1:e6:8d:fd:88:e9:2b:75:c0:fb:20:65:0f:06:11:
91:80:ac:78:a7:65:fc:c4:ec:86:15:c5:bc:93:dc:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:96:70:F5:2D:8B:14:40:1D:5F:2D:90:22:6E:B7:26:AE:AB:44:09
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cf:13:63:70:8d:0c:91:4a:a2:32:92:8d:41:0b:b2:14:5f:
69:e2:d9:b9:34:51:87:f9:50:ba:c0:8f:ce:12:df:3c:73:6c:
39:e3:19:fb:80:13:fc:5d:12:a5:88:f5:f8:a9:ac:e4:e5:47:
2c:f2:06:92:ff:ce:30:65:c8:75:67:df:59:5a:41:3d:69:81:
31:bf:4c:de:29:5e:f3:2d:c5:21:bd:03:5c:1f:3a:89:97:1f:
2c:1b:27:0f:a3:a7:bb:dd:31:28:ba:f7:de:f5:2e:3c:6b:4e:
67:46:8b:07:7a:69:df:49:d3:3a:79:cc:49:95:6d:e9:69:66:
44:fc:a6:ed:68:82:23:f7:e5:9d:8d:53:36:85:c1:ce:9d:9a:
fe:b3:d8:92:cf:6b:12:9b:b9:f0:42:1b:85:d5:c4:b7:6e:a7:
f9:32:26:60:85:c8:fc:16:2a:77:55:bd:54:29:09:ca:9d:4d:
f1:42:29:f8:b6:d6:3f:a5:be:2e:12:b5:62:3a:15:85:05:e8:
2a:0d:59:42:42:c2:80:e2:32:85:c0:e6:1b:a7:24:6f:5f:81:
e3:a0:92:e0:62:68:2c:25:5e:08:64:ca:f6:27:e7:ec:61:d0:
c9:4f:bc:7c:0b:e5:b7:11:42:c7:58:e7:7c:55:6b:f3:99:b7:
f0:34:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:16:18 2026 by rpki-client