Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier: PJtgjyi5q/F3yX7Vy/qmZ33Z9EhiwRBRbjNKxp6S4x0=
Subject key identifier: CA:55:0A:79:44:CF:A2:CB:F2:4C:3B:12:0F:06:13:7F:A9:E4:BF:F7
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial: 01A0D3F099F1F4E468A9CA24E25C4D7390E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 15:02:35 +0000
Manifest this update: Thu 24 Sep 2026 15:02:35 +0000
Manifest next update: Fri 25 Sep 2026 15:02:35 +0000
Files and hashes: 1: 30VvsOLOvQSD5srWi9MnTb7-ZGM.roa (hash: jBYeosYFhoGfNSjVngOAN4aiqODSBThoz7W/c9R4k+s=)
2: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: 3h1sxcNFrUGcBLk893PMRnmb587TKKVkeV546YYfToQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:99:f1:f4:e4:68:a9:ca:24:e2:5c:4d:73:90:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Validity
Not Before: Sep 24 15:02:35 2026 GMT
Not After : Sep 25 15:02:35 2026 GMT
Subject: CN=ca550a7944cfa2cbf24c3b120f06137fa9e4bff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:27:11:28:7a:03:b3:e0:af:b7:14:40:df:
5d:dc:92:f7:8a:bd:33:33:a6:a0:4a:2f:f6:7e:aa:
73:d3:41:9e:ef:30:60:f9:72:2a:59:91:5d:fe:12:
5a:c4:cb:df:e5:bd:e6:a7:d4:13:54:04:fe:fe:be:
46:c1:df:cc:39:40:da:2d:24:df:15:4d:b1:01:e1:
c1:4a:39:63:46:96:9b:e9:a7:8a:6e:06:21:47:91:
f3:58:b5:c5:54:bd:af:eb:74:a9:02:60:2d:b2:ef:
b2:bc:31:61:da:3d:be:7d:e7:eb:b5:66:52:95:c9:
98:fa:af:c0:f3:f7:af:44:b3:f7:db:ce:c2:b9:4e:
fb:61:b8:79:37:57:d7:71:db:14:d8:79:6f:e4:f9:
43:ab:5e:5c:ad:de:79:90:e8:aa:b1:d4:77:3a:0a:
1a:a4:73:7e:8a:c2:67:1e:92:2b:5e:2d:f3:cc:80:
4e:25:dc:19:a0:3a:89:6a:b8:68:5f:4b:a4:b6:57:
fc:43:ee:e0:76:0d:e6:e4:00:2d:c4:04:3f:6f:15:
3a:2e:44:94:d8:c8:bf:d5:23:b7:6a:95:2d:3b:a6:
fb:78:8c:16:b1:3b:40:0e:37:fc:36:ac:49:c0:e2:
c8:3b:a4:1f:db:30:48:39:34:85:8a:bc:02:27:33:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:55:0A:79:44:CF:A2:CB:F2:4C:3B:12:0F:06:13:7F:A9:E4:BF:F7
X509v3 Authority Key Identifier:
keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f8:26:03:0e:db:6d:d2:21:c4:70:66:70:6f:47:c9:57:9d:
93:37:0d:08:29:ac:52:f2:c5:0c:5b:25:98:d7:52:7a:8b:6a:
51:0f:ff:28:55:8d:e9:fa:5d:56:9c:cf:83:92:b7:7e:94:05:
7a:b2:39:f0:cc:dd:96:22:25:70:1e:e4:28:a7:12:69:6c:0f:
9d:70:84:4b:f3:8b:a1:21:67:6a:96:29:ad:fa:13:ea:b6:28:
d9:7d:a6:62:e7:d0:08:77:0e:d7:33:39:1a:cd:cb:6c:86:99:
d3:21:7b:64:c6:5a:db:17:0e:a0:09:3c:85:4c:78:21:52:76:
85:c4:fe:ee:17:0d:3f:25:f9:67:3c:01:3c:13:ca:e5:f9:37:
6f:ce:38:14:61:81:76:ea:4f:2b:20:4b:f1:75:29:26:e4:40:
bd:20:dd:b4:29:15:f7:4c:b4:50:93:7a:b6:62:f5:fa:2b:21:
fe:24:03:47:60:4b:7f:09:68:be:1b:6f:e1:27:40:0e:eb:38:
41:1d:ce:1b:48:9a:df:be:5f:d8:ab:77:ce:e5:86:0b:fc:59:
56:c0:f7:c3:01:71:d5:ef:c5:bd:3d:54:9c:26:8e:a7:d7:02:
d9:c6:fd:19:95:ac:ef:18:96:24:31:aa:50:eb:81:0c:12:05:
0a:bf:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:21:29 2026 by rpki-client