Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: zgDG2jcBzvv+PVz0uwGxWO9dmVGiWJTbHj2DSx2aA2s=
Subject key identifier: 0F:FD:AD:0D:B0:25:ED:E2:C6:00:24:C8:96:9B:F4:61:45:90:59:1B
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 01A0F23152ABC0E2D8E7C9B7A7EDCE99C93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 0C50
Signing time: Wed 30 Sep 2026 12:01:53 +0000
Manifest this update: Wed 30 Sep 2026 12:01:53 +0000
Manifest next update: Thu 01 Oct 2026 12:01:53 +0000
Files and hashes: 1: G_JW6F6wHuk8xHOWEfihSql-qpI.roa (hash: DioqiN9gi012cANZP03n6UlA0P8l0ilW5rpF7qQDEm8=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: qiPOkwUK7qJvbCaTMP7kMx9zBik5d9LA5rxibV4xMu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:31:52:ab:c0:e2:d8:e7:c9:b7:a7:ed:ce:99:c9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Sep 30 12:01:53 2026 GMT
Not After : Oct 1 12:01:53 2026 GMT
Subject: CN=0ffdad0db025ede2c60024c8969bf4614590591b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9b:bc:4b:f8:f0:11:d6:bf:1f:7f:7a:b7:3b:
44:ae:ba:94:9a:35:1a:3f:4d:38:cb:e7:9d:0f:97:
4a:e8:58:8b:8d:f7:d9:00:90:ec:ad:40:fc:b2:c9:
18:eb:7e:6b:84:41:a8:d0:0e:c1:0a:8d:e7:0e:89:
3f:8a:35:62:57:bb:72:03:4b:d2:42:75:ee:4c:48:
7d:32:56:f3:71:0c:31:65:5c:fd:23:48:80:fd:31:
a4:f4:cf:69:e7:d9:0e:8e:5c:ed:ba:fe:6a:48:f8:
71:dc:07:02:97:14:c7:74:c9:27:5e:9d:74:d1:a0:
b8:5d:57:09:dc:5b:f0:7f:21:f0:87:12:d0:36:f1:
e6:9c:12:c7:7d:15:99:c5:ff:f8:cb:90:51:75:4c:
96:9e:b7:11:52:c2:e9:4c:79:36:d3:07:78:8b:34:
d5:ed:a0:9d:0c:55:e8:1c:c7:04:10:15:d8:9e:f7:
2c:70:55:a9:ae:73:cf:71:e2:7d:99:ae:35:c4:9d:
c3:21:6e:1b:c6:52:5c:2c:4e:75:d5:68:9a:ba:37:
cf:d6:0c:87:e9:81:0c:d3:30:61:9a:b2:a5:d5:31:
92:ba:47:42:8d:7a:f0:e4:39:ba:a0:5a:93:64:13:
d6:a0:56:a5:01:d8:e2:6b:1b:40:7e:a3:21:65:f0:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FD:AD:0D:B0:25:ED:E2:C6:00:24:C8:96:9B:F4:61:45:90:59:1B
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f4:6c:8d:15:3b:62:40:a4:8d:46:24:2f:46:bb:7e:2a:05:
8d:2c:cc:78:ac:05:98:8a:d2:cc:1b:77:26:5e:b0:b6:fe:5a:
5f:f8:b8:95:3d:af:90:8e:31:50:a7:ca:c8:9d:4f:e5:38:05:
f8:b4:74:4c:34:38:60:e9:43:11:7a:6c:5a:d9:fc:c2:11:84:
55:d8:0b:71:ae:02:be:48:67:c3:77:2a:e3:0d:17:80:bb:e7:
73:40:de:36:35:06:58:24:44:d3:a6:54:6f:e1:af:f8:cf:ff:
f6:7c:8d:4a:9d:dd:72:5e:6b:cc:ab:28:fa:12:42:d0:e2:1d:
dd:ae:6b:a3:bf:b6:f5:16:33:3f:77:ad:3e:b8:57:4f:e1:78:
bc:15:e4:6e:35:c8:3e:e8:27:60:8c:23:81:24:16:4e:59:a5:
73:5d:44:e0:83:ea:4f:99:43:5b:b9:e7:ca:a6:72:03:0e:5d:
d2:6b:ad:bf:6f:9e:65:72:2d:70:a4:d8:f5:e5:9a:37:1f:61:
11:64:a2:3e:ef:9a:38:be:4c:ee:3c:e5:2c:8b:b2:9e:5c:a6:
43:d4:89:d6:f4:26:83:cd:c4:bc:67:06:07:1e:c4:a7:1a:c7:
e1:42:89:c3:90:39:46:58:d5:f4:47:f0:79:76:4b:d8:30:f4:
74:64:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:54:35 2026 by rpki-client