Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: oIUv2CO9osnKHRIGYiWOr66NwmzW0NKB3fBtjPzl4qc=
Subject key identifier: F2:77:5E:2A:3C:4B:64:6B:BC:EB:AB:91:F7:EB:EF:80:DF:BD:73:6C
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 01A0E173DE73E2ACBE2DE24A5961E31EA4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 06:01:02 +0000
Manifest this update: Sun 27 Sep 2026 06:01:02 +0000
Manifest next update: Mon 28 Sep 2026 06:01:02 +0000
Files and hashes: 1: FTsdE4w9A76bc9C2_7wNecbSPNY.roa (hash: rHj2MTYxRe64SZo8LvwXUUXTxEmUO5sPExmz8iIy3Rs=)
2: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: k4nR+qs3kB5J9/B/I2NRaAnbZBkA9ijWARU34w5Awq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:73:de:73:e2:ac:be:2d:e2:4a:59:61:e3:1e:a4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Sep 27 06:01:02 2026 GMT
Not After : Sep 28 06:01:02 2026 GMT
Subject: CN=f2775e2a3c4b646bbcebab91f7ebef80dfbd736c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2e:44:3b:33:58:8a:0f:83:93:5e:6e:17:24:
ee:95:c8:b2:a2:fc:4e:4c:d2:47:5e:fa:39:39:0c:
5b:21:f0:a0:1b:6c:16:c9:ce:a4:00:a0:97:d2:fd:
22:ba:ab:06:b4:e1:db:df:11:82:d5:73:45:6c:a2:
0d:c1:a0:ea:c0:e4:ea:bf:09:c5:d6:24:b1:a1:53:
24:68:92:57:75:9c:91:44:e1:6b:0a:65:5c:18:f3:
71:01:ba:05:ee:ca:98:2b:6d:ff:0e:3d:53:be:7d:
47:df:2b:55:4b:bb:f3:4c:65:64:50:b0:9e:ea:29:
7b:91:02:f5:0f:5e:da:b2:13:a9:78:5b:34:2a:2f:
a0:32:ef:da:f0:e4:e2:cf:03:d4:66:71:ec:08:e2:
33:c4:6a:ae:4d:d8:f4:83:ad:fa:4f:93:d0:8d:03:
63:e1:33:77:de:0e:a8:73:5b:8d:0d:33:b7:56:5b:
4e:4d:b6:14:1d:a9:a6:60:83:11:5e:50:e0:cc:d5:
52:7d:b4:38:f4:7d:8a:01:67:94:92:3d:38:97:f1:
7b:e1:0f:f6:dc:f8:df:e9:7f:63:2a:37:b6:14:a0:
6c:c1:4b:29:8f:da:39:39:4c:40:41:23:83:1c:c2:
bf:8b:e1:50:e4:9d:d1:e3:80:95:fa:51:5b:f9:81:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:77:5E:2A:3C:4B:64:6B:BC:EB:AB:91:F7:EB:EF:80:DF:BD:73:6C
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5e:0d:ef:31:9c:c2:cc:9f:03:b3:5a:59:39:8e:75:94:00:
50:e1:9a:81:fd:23:c4:99:ed:99:d0:66:f0:f3:60:5a:21:83:
96:28:75:dd:1e:73:38:ea:e4:e4:64:aa:db:24:6a:99:83:15:
c9:8b:e7:00:54:d4:2a:61:5a:55:52:3f:45:a1:16:fa:87:43:
d7:26:e9:91:ea:24:a8:17:9b:b5:8d:d7:13:28:79:3a:aa:83:
77:a6:cb:38:55:e1:53:4e:2f:36:7a:6d:72:6c:69:5a:4b:0c:
ef:c1:dc:6b:85:76:ca:ba:4c:c7:a6:ae:f7:77:e8:64:a4:fb:
fc:73:84:ef:d4:60:e2:37:66:92:b8:87:4b:79:ef:d9:da:55:
1a:c0:35:f9:ac:b8:1e:b8:f9:90:4c:3f:80:38:9e:56:e0:97:
7f:5e:05:a4:f1:13:5f:d6:80:71:7f:f6:3d:fb:10:1f:a6:eb:
48:28:a1:5c:31:bd:38:d0:d1:5a:1a:55:aa:ca:c2:4c:e0:11:
af:ef:aa:32:30:7f:d2:c0:20:f1:96:cb:e8:73:b7:bb:82:e9:
47:a8:4c:5f:df:70:8a:be:67:25:04:48:89:5a:e7:c6:b7:c0:
45:d0:5d:95:76:3b:0e:c8:85:7c:de:bb:eb:92:d6:3f:22:3b:
04:f8:92:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:49:24 2026 by rpki-client