Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: 7Tq1yZ2xqeVVLpN4lbjV/ScE+6TO5458UZquWaexaHw=
Subject key identifier: AD:A4:89:A9:33:41:7B:40:1F:99:32:94:73:87:DC:6C:60:67:6F:FB
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 01A0DBA972898EC6634FFE3CDC51CC9C8644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 124F
Signing time: Sat 26 Sep 2026 03:01:49 +0000
Manifest this update: Sat 26 Sep 2026 03:01:49 +0000
Manifest next update: Sun 27 Sep 2026 03:01:49 +0000
Files and hashes: 1: DWNbWLKsKUbayknrkxZPm_ru1rE.roa (hash: 0OEC7qPtd3MHFAia/7IsrfByY6Mlpa/bnminYQcTx14=)
2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: P/vyba069MoNa01dmU5XF+HM4matpFEWzR5Niir6d/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:72:89:8e:c6:63:4f:fe:3c:dc:51:cc:9c:86:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Sep 26 03:01:49 2026 GMT
Not After : Sep 27 03:01:49 2026 GMT
Subject: CN=ada489a933417b401f9932947387dc6c60676ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:0a:40:eb:75:cd:08:c2:d5:d8:ca:4c:db:
6f:1a:c7:af:e4:76:c2:c6:3a:de:bd:25:c2:d4:7d:
4a:b0:dc:18:18:1f:de:80:4c:7c:21:3a:8d:7e:ea:
37:46:14:ba:cd:e4:a8:2a:18:cb:ab:c3:33:cc:24:
eb:ad:66:f1:f7:17:62:75:ec:1f:4c:6c:82:79:73:
75:47:bf:af:22:7b:75:ac:82:92:8b:00:01:91:ca:
69:50:43:ed:f0:df:ca:44:5a:81:86:31:a9:bb:50:
57:18:51:e5:73:f8:6f:91:0f:9d:89:be:d4:a1:62:
ab:1c:69:e7:0a:d3:5f:c7:d2:c1:c1:21:5e:0c:8b:
c3:f3:06:7f:36:f1:fe:a4:ec:b1:f0:5c:bb:65:f3:
15:85:a8:b8:d2:a1:67:f2:de:f8:18:a6:e2:f6:ca:
20:fb:97:68:23:7e:c3:4a:79:51:38:87:25:21:c0:
5f:ea:81:67:f2:37:82:9e:15:a3:b6:6a:e6:98:82:
75:5d:13:81:9a:41:9f:8a:61:ba:f3:35:f3:43:a2:
18:69:60:b0:e4:a1:ee:7a:ca:05:7f:7b:c5:02:1b:
49:ee:bf:f0:e1:df:72:a2:9f:95:9f:3b:f6:a2:42:
d3:d2:79:53:c4:c4:6d:57:4b:b6:64:52:d1:c3:d6:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A4:89:A9:33:41:7B:40:1F:99:32:94:73:87:DC:6C:60:67:6F:FB
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d1:3c:9f:93:65:97:72:7a:7a:0d:f5:89:a1:30:bd:19:d0:
81:cf:e8:69:1b:18:5a:6c:0b:e6:37:21:b7:cc:e8:49:3e:bd:
c7:0b:be:95:0b:79:1e:f9:b1:6b:c5:07:b3:68:bd:a9:2b:ce:
48:02:3a:cc:10:c8:2f:07:89:27:70:77:63:17:67:f8:fc:c7:
44:d6:42:a2:8a:cf:a5:69:5f:2f:b9:75:3f:b7:1f:00:2d:59:
4d:a6:23:d0:a3:6e:55:77:5c:e0:20:1e:d6:9f:87:55:81:63:
01:d8:ea:53:e4:0d:32:3a:bb:22:12:8d:c8:92:5b:be:be:08:
d0:da:92:a6:f3:f0:0a:ba:76:0b:dd:69:f0:12:0a:ee:11:b9:
68:73:fa:41:82:62:eb:57:ca:02:74:fa:8d:fa:24:f5:0b:68:
c9:7a:65:4d:5c:90:9a:4f:23:5e:80:dc:63:35:b3:4c:6d:aa:
a1:25:8a:d2:e5:36:47:5d:c7:cd:2f:a4:d5:19:57:c0:c9:ad:
7a:72:87:2f:e6:fc:17:d8:19:b4:26:f1:c3:cf:8f:c9:78:23:
e4:14:f8:3b:42:f6:18:24:66:00:bc:36:cb:42:45:31:68:3c:
6f:57:d7:90:d1:9b:6d:f5:d7:af:3f:75:71:bc:92:17:49:3b:
7d:12:80:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:14:01 2026 by rpki-client