Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: kaS8i8qKI6bSKot9DFaJt8RcnS3V6AwDgDMkk8FQhxE=
Subject key identifier: B5:47:8D:BC:F9:E1:85:38:16:5E:CB:38:42:A3:27:19:60:21:3E:AE
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 01A0CCA3042837119B32C86DA1BBBBD27FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 05D9
Signing time: Wed 23 Sep 2026 05:00:30 +0000
Manifest this update: Wed 23 Sep 2026 05:00:30 +0000
Manifest next update: Thu 24 Sep 2026 05:00:30 +0000
Files and hashes: 1: JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa (hash: dzTZZeqoyGDa9h33Vh04zNMf/nJhUIIZZndFjeftfJE=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: sSH6XJ04s8hsRJ1LhutgbfotW8NSFBTV6UpRk1mInGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:04:28:37:11:9b:32:c8:6d:a1:bb:bb:d2:7f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Sep 23 05:00:30 2026 GMT
Not After : Sep 24 05:00:30 2026 GMT
Subject: CN=b5478dbcf9e18538165ecb3842a3271960213eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d8:76:d5:b9:25:08:2b:b7:5d:a8:54:5f:d4:
da:66:a7:42:f4:03:0e:23:50:83:4b:e5:08:88:72:
30:a1:e4:0d:16:e8:5b:ba:8a:99:ea:2b:22:9b:83:
70:5a:24:f1:db:72:95:91:37:29:b5:1f:35:3a:e5:
a7:62:74:8c:97:0d:54:60:55:cc:a1:b0:7a:0e:6d:
a9:e4:d3:ba:2c:9b:b4:ff:89:e6:5c:b3:0b:68:05:
3a:8c:2e:de:05:5d:8b:cb:68:af:46:aa:ec:59:df:
83:b9:f8:d0:2e:f8:9b:27:22:20:24:ea:9a:89:a5:
a4:42:ac:99:fd:a3:cb:f8:a6:fb:cf:81:19:bd:e7:
2e:3c:2f:37:c1:39:72:f4:88:52:01:06:f4:a4:7e:
54:ae:cb:ed:0c:61:5d:c3:2b:61:30:4a:81:87:fa:
b8:89:f8:14:eb:a7:5b:ca:2e:d4:68:05:5e:d9:a6:
15:d2:89:44:1a:1f:3c:ea:64:be:2b:cd:c3:ef:40:
2f:25:5c:61:26:cf:1e:5b:5c:00:56:d4:a7:67:ce:
ee:e8:38:fe:0a:cf:c4:be:03:0a:90:8b:03:76:0c:
d9:13:4b:b0:c6:ae:e9:e1:35:e9:f6:1d:c2:d4:91:
c0:eb:2b:d7:07:f1:f5:2c:4e:cb:d1:b0:10:02:45:
88:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:47:8D:BC:F9:E1:85:38:16:5E:CB:38:42:A3:27:19:60:21:3E:AE
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:09:a0:8c:67:f7:ba:1c:ad:5e:75:0c:5e:47:64:0f:be:1f:
8c:b7:bf:6f:59:9a:e0:14:93:10:c3:9b:ae:07:46:66:5b:54:
99:87:8c:e8:42:1f:cb:c4:18:f3:94:63:e8:d2:26:8f:ac:ef:
f5:d9:58:f8:c7:2f:34:69:06:6d:02:e1:6e:5d:d8:9d:74:0d:
57:90:f7:e9:4d:50:cc:96:72:c5:6c:b5:ea:3c:b2:75:35:d5:
9e:8f:2e:cf:62:76:56:13:f3:36:1c:20:1b:70:b0:a5:60:55:
32:ab:6d:38:1d:27:03:e9:86:86:aa:13:d3:84:d8:1e:0c:b7:
49:61:de:b6:82:ca:a9:1a:39:e5:ca:e9:bb:67:9b:d3:08:7e:
57:25:a0:a0:34:ae:76:5f:30:f0:80:f5:5d:a8:8b:d0:b3:ee:
b8:da:de:31:51:86:0d:8d:7c:d8:f5:67:fb:0e:88:71:90:05:
75:dc:63:8c:59:fa:fd:df:86:b8:36:58:a5:1c:33:13:d4:c1:
c3:74:2e:9a:37:82:b5:4c:93:af:57:45:72:d7:14:6c:76:24:
b0:ed:2f:77:cb:2f:ea:5b:6e:fc:e2:03:2d:be:7b:a5:60:8a:
3e:14:04:bb:4f:a1:74:d5:0d:62:a8:80:48:c8:c8:21:a0:6f:
12:91:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:57:41 2026 by rpki-client