Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: HQNzDmCc4aHyXv7YcTOx2J6mGfqlEwWmWjkACbZB22k=
Subject key identifier: 0B:81:AF:6C:60:4B:1C:1B:8A:D6:6B:9D:3C:EF:92:59:8A:34:5F:F0
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 01A16C7FD8B01DF60D58A360A20A47F85FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 167E
Signing time: Sat 24 Oct 2026 06:01:20 +0000
Manifest this update: Sat 24 Oct 2026 06:01:20 +0000
Manifest next update: Sun 25 Oct 2026 06:01:20 +0000
Files and hashes: 1: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (hash: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA=)
2: iCHozfTTxF16YGNAVt20MXzc00g.roa (hash: H989MZeJbW+NOaRo/HUuwj+zsKhP6qt0Wm1UtPVlNvk=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: RBWABgE59M4uwV7J7+lwOEzu6JUIgp40StSsK+NOp54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:7f:d8:b0:1d:f6:0d:58:a3:60:a2:0a:47:f8:5f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Oct 24 06:01:20 2026 GMT
Not After : Oct 25 06:01:20 2026 GMT
Subject: CN=0b81af6c604b1c1b8ad66b9d3cef92598a345ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:4f:f9:44:37:4a:7d:49:88:3e:e1:12:98:
e6:bc:7a:d0:8f:a6:f2:a0:8f:c8:06:36:96:c4:34:
ec:24:9b:08:ab:8c:f9:f1:e6:cf:4c:f9:96:27:0a:
e3:69:1b:fb:8c:7b:25:3a:65:d1:bc:4b:ce:a2:57:
63:49:2e:66:50:2d:30:ec:ba:90:20:35:87:1e:77:
18:74:f7:7f:a9:a5:4b:36:b1:59:d1:07:89:b0:b1:
46:4c:18:46:28:81:7e:80:8e:a6:4e:78:98:84:ca:
dd:84:1c:f2:79:91:fe:13:d7:12:ab:2d:b9:ad:cf:
b3:56:5d:e6:f5:b4:59:c5:7c:57:48:1a:06:45:df:
b5:b1:6b:ae:82:7a:33:d1:d2:20:fd:8e:f7:e9:38:
5d:16:da:0f:23:17:50:92:1c:47:1f:8d:5a:56:c8:
ff:29:5e:6c:c7:28:ee:9f:eb:34:20:03:6e:71:d3:
06:a2:92:0c:d3:38:3b:a6:36:8b:de:8c:ad:cb:b2:
90:3d:77:c6:8d:72:e8:c3:96:db:3f:2e:3b:5f:35:
a0:aa:de:ea:76:3f:18:cf:d5:35:6a:c7:5a:e4:76:
f8:f3:ca:34:6d:c5:c9:cc:98:c0:6f:3c:70:fe:5a:
72:40:ca:04:42:e2:be:c9:3b:88:ff:04:e8:05:5c:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:81:AF:6C:60:4B:1C:1B:8A:D6:6B:9D:3C:EF:92:59:8A:34:5F:F0
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:12:28:6d:65:55:e0:5c:c2:e8:e5:aa:4c:82:82:00:09:05:
90:fe:cd:9a:74:b1:ab:35:2f:5d:c6:e0:98:f6:c3:b3:44:52:
b8:cb:40:2f:93:38:98:77:67:7c:73:9d:62:b2:d2:e9:63:57:
64:ba:9b:82:59:12:60:27:db:30:a4:a9:f3:13:0c:69:b7:2d:
6d:ab:7b:b0:4d:b5:d6:45:36:aa:48:21:ee:67:14:aa:9b:a5:
1b:9d:84:a7:33:38:ee:28:e6:67:61:e2:b6:7e:bf:c2:cf:fc:
e6:83:11:eb:66:c2:71:25:dc:26:61:8e:d1:2b:e4:0d:97:73:
46:0c:cb:5f:76:80:66:1a:f3:c1:06:f2:00:57:f6:14:13:15:
fd:5c:c5:3e:4a:ee:85:f7:05:3c:63:a2:dc:10:3b:9e:42:2c:
b9:78:cd:81:e5:c8:08:07:01:52:10:57:1a:ae:a2:cc:76:2c:
d1:0c:35:66:1d:93:97:74:4c:f2:ee:60:6d:b7:6c:ce:e5:e6:
a8:35:a1:40:1b:2a:12:7d:c6:ef:d3:eb:cc:cf:8f:ff:f7:c4:
6c:fc:ec:33:1b:2d:6d:eb:84:5f:fa:e4:3e:1b:96:ab:43:c3:
61:0b:84:b6:53:31:08:4d:2d:ac:60:38:43:39:ae:ab:dd:56:
94:39:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:14:14 2026 by rpki-client