Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: 6bBr+U3Ui3aNt7AIhFyzGnu5ZUUIOHUDyFbRa6lH/Zk=
Subject key identifier: 10:3C:F7:2E:DC:F5:AE:F1:A6:19:DE:7C:4D:09:22:D7:D1:38:95:D5
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 01A11DBF21303501B91AF7C4A26E3F2925BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: 0682
Signing time: Thu 08 Oct 2026 23:00:27 +0000
Manifest this update: Thu 08 Oct 2026 23:00:27 +0000
Manifest next update: Fri 09 Oct 2026 23:00:27 +0000
Files and hashes: 1: 7lgvftt3YplOqtGKAXFKXfxxBQE.roa (hash: UMQdS0dx3gIMuyKJd19IDX0DWYOOtAEHJUPWP0Uspm8=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: kojbZG7DcoF5Gglsamr1PQWsl+1Juxgow7jHeSZNJHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:bf:21:30:35:01:b9:1a:f7:c4:a2:6e:3f:29:25:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Oct 8 23:00:27 2026 GMT
Not After : Oct 9 23:00:27 2026 GMT
Subject: CN=103cf72edcf5aef1a619de7c4d0922d7d13895d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:4d:f0:22:70:e1:4f:25:e1:2d:17:14:8b:
97:e2:9b:4c:66:1d:d2:a4:6e:89:44:bd:f6:30:c6:
32:7c:1b:27:08:b1:3a:be:fc:d8:94:cd:11:59:f2:
52:25:cb:7b:aa:9e:3b:14:b5:91:66:bc:48:d0:f2:
c8:7c:b5:b7:02:b7:71:39:70:2b:e0:96:d2:ec:08:
ee:e7:8e:cc:95:3c:ac:a9:09:72:42:b0:56:5f:fd:
cc:0a:8b:f4:18:dd:56:b2:79:4d:bc:42:39:75:0f:
85:c6:89:b7:13:b6:3a:94:ca:bc:b5:80:6d:5c:bd:
a1:ac:2c:83:d7:26:9d:1f:ff:52:80:ef:f9:bf:1f:
44:14:17:90:a1:e1:6f:b0:e1:30:06:c1:3f:f2:85:
e4:bc:07:7a:50:2f:00:f7:f7:9a:fb:4c:24:73:eb:
25:ab:d4:87:35:1b:d5:66:9b:e9:ce:e9:68:d5:57:
11:e3:b6:1a:55:b8:45:d3:08:fa:36:80:c9:71:2e:
68:3c:5e:7c:b1:18:b3:06:d4:93:7a:4c:d9:38:f0:
6f:b1:33:2d:64:77:29:60:f7:d4:ca:e8:c1:bb:c3:
8f:9b:ac:f3:88:c3:0c:48:3c:4b:30:41:4b:52:b3:
ce:59:28:45:c2:c0:02:c4:2b:8b:03:81:10:1e:f0:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3C:F7:2E:DC:F5:AE:F1:A6:19:DE:7C:4D:09:22:D7:D1:38:95:D5
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:10:69:e2:71:bc:43:38:a1:c7:a6:37:97:a9:83:39:50:ae:
e2:a7:09:47:0e:cb:e7:dc:c0:d2:6e:13:60:5d:72:fd:23:a6:
d9:0f:1c:6a:72:a1:fe:28:02:bf:74:b9:88:94:90:61:9c:9f:
37:d9:92:f3:6a:44:dc:bc:83:3d:3b:9f:59:39:31:c0:a5:cd:
4e:05:87:82:23:e8:6d:26:2e:f9:11:5b:1b:80:58:d5:cf:75:
6c:42:c1:77:12:2c:e2:e4:4f:86:86:db:74:28:c9:0a:90:9e:
79:f4:85:ff:e9:dd:c8:91:fa:bd:a5:52:4b:08:81:7b:93:dd:
d7:68:03:92:07:de:f9:fc:ed:46:6b:13:f1:a7:e1:5f:54:f8:
b8:7c:fb:66:70:e2:90:04:75:1e:d4:19:87:9b:2d:45:36:fe:
7a:32:29:c8:f4:8d:34:6d:b3:be:ca:9e:dd:15:dd:c8:1a:17:
37:a1:fc:7d:2d:42:cc:2d:7b:5e:e7:b3:30:d5:af:df:10:d8:
8f:28:31:a2:9e:a8:4d:b3:e8:aa:ad:a9:c2:b0:ae:b3:90:bd:
20:3c:7d:ab:60:f9:0c:86:96:cc:a7:cd:5c:ad:f7:1a:be:dc:
34:85:ca:d3:d4:86:ce:33:f2:8a:6a:d9:05:e1:45:8c:61:4f:
5c:c6:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:26:15 2026 by rpki-client