
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: CyDTQ413f7pUntTPVqSr9Q4eRfYrmwDjnfSZj53b6tw=
Subject key identifier: D8:35:95:A1:5C:13:D6:05:3B:20:55:05:F4:DB:96:D6:D6:C2:57:02
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 01A0C1B14430A15893A7E70CD5F8985A6324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 132A
Signing time: Mon 21 Sep 2026 02:00:15 +0000
Manifest this update: Mon 21 Sep 2026 02:00:15 +0000
Manifest next update: Tue 22 Sep 2026 02:00:15 +0000
Files and hashes: 1: E1QbVJAayOHXybvvykh2_z_eoYk.roa (hash: Ne00sRp1K+wq4QIkqT2qcjKHyHlHGzP3FNyY8RockCE=)
2: JYQlbQJEy0sPqACuaQ0ZNKP0_kA.roa (hash: 9Mf/IBP/vEnvOsH8GvnEXV1QapAzMWJM6lph3xsak/E=)
3: Ov83ySv3sFV7M88SSWflw9--a-0.roa (hash: SVhdkcQVattKFVMXSZeL1xJo615LAy5BBiDbcYL9ck8=)
4: We9JlhRC7AnuKdXNeDiRVJR3cSQ.roa (hash: aCm3hVdiPu8wrcYehfXy6dGkmo0BNiZb3dnL5cg7bd0=)
5: dNqWn8LLbtUjse_iEIk0LyE_w9U.roa (hash: pyT41frLnr8b4Y4mOhVh340WexYxDekl72v7q/1e+g4=)
6: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: G0vrEbi+LbGBUlqWC1dzHxSqp0gUfeojuiQWcnzDb1I=)
7: pzkAsevaRgjEYyiE9vP5vLFmiuQ.roa (hash: nO/grxvmKZkvhDphy8GQW/Icm/R4FkLHljLabsv3llQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:44:30:a1:58:93:a7:e7:0c:d5:f8:98:5a:63:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Sep 21 02:00:15 2026 GMT
Not After : Sep 22 02:00:15 2026 GMT
Subject: CN=d83595a15c13d6053b205505f4db96d6d6c25702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:7a:72:12:97:5b:cc:47:43:55:12:44:fa:
b7:07:d4:69:db:b8:2b:3b:dd:b4:d0:16:ab:e1:a0:
8b:90:63:01:42:c1:a8:c3:51:7e:94:3f:0b:af:1b:
01:bd:7e:d2:03:96:61:89:47:d1:be:0d:86:5e:29:
f8:89:39:b3:51:fa:a2:bf:4c:fc:f7:1f:7a:0e:fd:
2e:b4:f9:67:6a:a0:58:cf:79:03:7e:f7:01:84:d6:
44:b4:56:b6:fd:61:6f:3b:bc:55:cd:3b:f9:c7:75:
e2:a5:8b:66:64:28:02:3b:ed:bb:c7:0b:00:2f:9f:
50:d6:42:16:92:19:42:45:6a:4a:ae:ba:9e:57:d8:
6e:a1:80:eb:96:e9:73:5a:28:1e:05:57:31:66:56:
20:00:b9:17:05:8c:9a:4f:1e:60:b7:45:f7:80:5f:
64:f0:db:6a:a9:d6:a8:95:fa:66:85:4a:ab:a4:7f:
8f:b8:96:6e:59:0b:55:2d:62:6b:0f:cd:01:27:0d:
27:7a:e4:68:a7:bc:44:9b:ed:f1:3f:6c:58:9d:64:
80:27:ba:73:95:52:3a:12:29:b4:2a:42:55:da:97:
ea:60:25:11:0f:ff:81:b4:cc:e0:68:73:d8:03:4c:
4e:ce:44:27:65:6b:8b:08:b1:02:22:67:4a:c1:a2:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:35:95:A1:5C:13:D6:05:3B:20:55:05:F4:DB:96:D6:D6:C2:57:02
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cf:11:a9:6e:21:c1:12:10:a7:c8:35:61:a2:62:95:fb:cf:
37:2b:03:35:00:03:85:3f:7c:b7:f7:5c:36:83:02:63:dc:07:
fa:9f:7a:cf:5e:2d:09:8a:31:4e:ee:63:d2:47:37:76:19:00:
82:d5:7e:65:c3:c9:ec:6f:9c:dd:70:f0:21:23:d0:77:67:4c:
1e:b9:d1:74:d5:71:8d:64:a0:1b:86:84:26:90:81:7e:28:91:
c5:f4:a4:cd:1c:4d:05:b6:79:20:f9:58:f8:2d:9f:b1:74:ee:
dc:7a:f2:ee:45:31:77:4a:14:87:eb:3a:af:e2:e9:ac:90:99:
ff:1b:f2:6e:f4:96:ae:fd:0b:18:da:2e:23:e3:f5:96:5e:b5:
78:38:d5:af:1f:7e:1f:2c:17:4f:58:3c:76:82:5f:4f:db:d6:
a1:e5:6b:26:6a:0c:8e:8a:21:f5:79:99:22:d1:ff:fe:ad:e8:
08:3b:c8:1b:ec:16:d1:79:00:de:8b:8b:f2:4a:55:6c:38:9d:
a5:b6:cc:b6:15:ef:b4:28:ee:47:21:9f:d5:0c:f5:8d:03:34:
27:d2:4b:83:78:61:72:1e:f3:dd:da:3b:0b:cc:77:05:85:2e:
03:28:13:8b:e8:ac:62:59:b6:90:df:dc:75:b6:85:a0:b8:53:
46:b7:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:53:50 2026 by rpki-client