Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.mft
File: oIJZpB2ckMhxpKQIHurJjpIcnJY.mft (raw, json)
Hash identifier: 0zI3qMLpock/M7JZHJSs9KEjmWM7PvfrRNe9skHm460=
Subject key identifier: 31:40:70:F1:95:F4:A5:45:FA:BE:39:C2:27:AA:43:F8:1B:C4:5F:F2
Authority key identifier: A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
Certificate issuer: /CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Certificate serial: 01A0CE238F40CA50D57B91A18E47D3863902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:00:31 +0000
Manifest this update: Wed 23 Sep 2026 12:00:31 +0000
Manifest next update: Thu 24 Sep 2026 12:00:31 +0000
Files and hashes: 1: UsfSb8kbVMR3V5PLMt6PJ3rLgiQ.roa (hash: UVQiOpULaEZcLrQvc6D5QZ9BzS1vMwC2aKzYqyaPovk=)
2: cbz2LvC72XNqrvx7XIcWfWQcJGs.roa (hash: 6ZyBifFEMpLFq8cT3rfhVYcBqGdapM5Y/Vio3GKuQSM=)
3: dEvu91UmCs0KOahRTi9ldOs_snU.roa (hash: 01+Ykcd+Kg1UdyAjLCxw5OYxXPvuKRq7ssrgwvHhlWc=)
4: fWQwN5A2pk_zpdVGoglnMqrxJhE.roa (hash: AF/+uKeoOpEWcWNlzj3E6bJVrdwq6cPfuT9ci9RsNlI=)
5: gQc_Jr2mC9IFhdByVUINcQAR45c.roa (hash: htYakuw8JTIu6V7ktOpNOESYVw0hvP719d9K+XTocK0=)
6: oIJZpB2ckMhxpKQIHurJjpIcnJY.crl (hash: ZYO89ue5hh0RL3+pYwTWs9UIISd/eOFwQzpJGTGoH30=)
7: sD-XmFZxnF3KQNSTeL1WXh57yJ0.roa (hash: /pI8J0CBcmzbJWtFqWwLQ4amYWb7bBCiIspDscGiplc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:8f:40:ca:50:d5:7b:91:a1:8e:47:d3:86:39:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Validity
Not Before: Sep 23 12:00:31 2026 GMT
Not After : Sep 24 12:00:31 2026 GMT
Subject: CN=314070f195f4a545fabe39c227aa43f81bc45ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:0b:67:ec:c4:07:7f:58:7e:f8:fb:f7:36:
4f:20:c3:b4:86:33:39:fa:d4:ea:71:28:c7:45:24:
3b:56:e9:52:92:04:f8:ae:3c:7f:1e:0c:e2:94:ae:
71:00:f2:39:bb:6d:47:5b:93:3e:28:cc:c0:ff:7f:
99:a2:7d:94:b8:dd:e6:fd:70:24:fc:d6:2c:ab:b9:
be:f4:51:b8:d8:8f:c2:5c:d4:7c:43:65:d2:ed:59:
77:d6:90:34:be:d4:02:fd:ab:38:18:00:fb:43:da:
2c:9f:40:1d:d1:7b:66:8b:73:24:04:94:95:20:29:
71:ff:61:56:6a:4b:8b:6e:4f:df:eb:67:3f:e5:28:
58:94:bb:24:eb:a5:39:5c:1d:c6:a6:5a:44:48:5b:
81:28:72:c9:be:fe:af:03:af:99:b8:e7:08:aa:47:
32:5b:d3:6b:92:1b:e8:8d:54:24:7f:ef:9b:5c:26:
70:c5:84:03:b5:15:cc:54:ec:f3:c9:5e:b3:bf:09:
59:9c:f9:fc:8f:16:20:cf:94:f4:30:33:4d:a2:f0:
0a:9d:d4:64:c2:73:a3:05:4d:69:e1:99:7a:80:27:
5f:58:3b:1b:cb:f1:fc:46:f4:b5:5c:62:dc:21:01:
f4:54:a7:85:81:60:ff:32:d1:24:21:7d:10:05:99:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:40:70:F1:95:F4:A5:45:FA:BE:39:C2:27:AA:43:F8:1B:C4:5F:F2
X509v3 Authority Key Identifier:
keyid:A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2c:1c:fc:7f:ab:e4:5d:da:ed:85:a8:e6:e8:07:de:c6:8e:
fa:c6:ae:51:da:a1:c1:87:72:84:2f:65:71:75:79:67:e7:8a:
3c:0d:af:ca:bb:c5:d2:f6:5d:db:67:c9:1e:19:2b:29:1d:96:
eb:34:9f:52:c7:ca:6b:c4:a6:dc:4c:c3:77:01:28:f2:c8:5c:
4d:63:19:01:a6:88:69:c5:95:26:bf:88:ed:c7:27:5b:6b:7a:
cc:07:00:06:ef:ea:06:45:b3:6c:5b:10:23:24:bd:ef:13:a1:
7c:3c:bb:52:0a:e2:c0:70:1d:28:b7:e2:fb:9f:fc:b6:d2:b0:
24:ac:1d:5e:ed:63:35:81:dc:d0:3c:73:a5:ed:e7:dc:b1:43:
b7:74:5b:39:29:2a:33:05:cb:93:79:8f:e0:3a:bf:d2:d1:f9:
f9:82:e9:96:b6:77:09:c7:41:a4:b9:cb:82:bd:9f:31:25:55:
e4:1a:7f:e7:93:fa:8a:0d:db:f3:71:63:2a:5c:d2:42:35:45:
39:7f:95:f1:04:31:33:7f:ff:78:a7:e4:0a:12:78:b6:a5:fc:
7a:bd:89:33:75:51:2b:55:d2:ee:e3:94:fc:a6:46:51:af:9b:
16:f4:60:e6:98:dd:6f:e2:a1:e3:38:a3:03:11:80:34:8f:c5:
2f:d6:b8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:51:48 2026 by rpki-client