Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: +CYqz5NG8YOZTmU2f7FXWZWUPoW6/owPIXQe+pHvz7k=
Subject key identifier: E7:EC:75:1B:4C:30:79:6D:F9:AA:95:D8:7F:3A:FE:40:54:B5:87:65
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 01A0DC8480571FC818B119CC22D06AF92C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 1A79
Signing time: Sat 26 Sep 2026 07:01:06 +0000
Manifest this update: Sat 26 Sep 2026 07:01:06 +0000
Manifest next update: Sun 27 Sep 2026 07:01:06 +0000
Files and hashes: 1: D6zgSHbiztj7O2I1DW60de0ptBk.roa (hash: B8D0W1X4lmeoQhtBDBRUB/VyUa2Mld6fBfnDVCoTkMo=)
2: Ed9sbxyb8jvrhvxZjbOv3NsPiaQ.roa (hash: qKAq59OeZGLNvwwrou6DkFU90K39DNnEvwuBkqrbCks=)
3: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: fxNwpzXa5ZEJa+dKv5H4jKv1C2WwoqXfO6bKxJ4lBsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:80:57:1f:c8:18:b1:19:cc:22:d0:6a:f9:2c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Sep 26 07:01:06 2026 GMT
Not After : Sep 27 07:01:06 2026 GMT
Subject: CN=e7ec751b4c30796df9aa95d87f3afe4054b58765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:cc:fb:80:b4:2f:be:a8:c2:f1:e5:e0:6b:
6e:37:44:8b:fc:4b:af:49:77:5b:1e:73:1e:55:43:
d5:eb:60:3c:82:44:9f:a4:94:e7:5f:e1:27:6e:a2:
52:a1:3c:1c:38:e1:0d:67:83:08:c4:82:c6:a1:21:
4a:3b:da:f6:40:ed:b7:dc:a9:e9:99:bc:69:ed:c7:
18:8f:ba:90:41:b8:23:79:a2:18:1a:f3:54:49:02:
fd:71:9a:e5:bb:71:e3:e1:27:10:f0:d7:f0:f3:2a:
fd:13:ff:8a:af:be:84:b8:82:fe:86:d3:7e:f7:f4:
29:69:0b:4d:f6:d9:8a:a7:1c:87:ba:9b:6a:ed:16:
4c:08:05:b4:4f:f5:ed:77:18:5b:c3:09:c5:27:db:
0a:db:da:7a:a7:df:d1:31:04:14:a0:78:45:ea:02:
de:3b:75:4d:8c:ce:0b:8c:06:7d:9a:3a:30:bd:b0:
fa:8f:16:2c:67:98:cd:2b:10:b7:92:f2:88:1c:78:
de:d2:40:da:da:fb:a4:41:73:7b:35:6a:c2:c5:ce:
d0:75:f7:0f:f0:70:d3:0e:9f:1d:c2:43:b0:1e:24:
c5:55:67:5c:89:78:dd:23:89:30:13:4b:94:36:c7:
4f:0c:7e:73:b2:28:87:ce:55:1d:8b:ca:ab:1d:bb:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EC:75:1B:4C:30:79:6D:F9:AA:95:D8:7F:3A:FE:40:54:B5:87:65
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:29:02:17:19:e5:5e:18:ef:cf:01:aa:ef:60:64:5d:f8:c3:
52:e1:53:03:c0:42:ab:9c:0e:4f:9d:ac:f7:96:ae:04:d9:c0:
5f:77:c8:fb:88:30:f9:16:07:b5:24:e1:03:44:07:f4:59:71:
6e:7b:f9:10:4d:ba:32:65:af:d0:90:32:29:e5:11:5f:0e:be:
bd:a1:ab:ce:ba:26:67:25:70:36:ed:89:72:39:67:00:43:59:
58:93:87:e1:cf:a5:c8:ca:74:e7:ea:6f:f0:6f:9e:2e:43:89:
2b:c0:34:73:77:ff:6b:7c:49:c7:45:c7:54:f7:12:74:3b:ee:
45:e6:fe:7a:f7:86:eb:10:cf:42:0c:78:71:87:de:7e:e2:8a:
cb:4d:3c:df:f6:67:27:7a:5f:79:81:d9:3e:4d:b5:c9:37:c3:
06:e3:4b:57:b1:93:b9:86:be:4d:80:5f:7e:f1:83:ea:17:fe:
57:cc:9f:d1:66:e9:a3:91:8e:e7:1e:04:2a:92:41:64:6f:72:
eb:3f:1b:f3:d8:12:60:0b:bc:8e:e7:71:b6:46:74:5f:4c:2c:
2c:0b:9e:74:00:bd:72:9b:28:a0:33:c2:f7:64:58:bd:19:d7:
c9:0f:96:b7:25:8e:1c:da:5e:70:46:33:0e:1e:15:f6:fc:a9:
f3:fe:6f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:41:17 2026 by rpki-client