Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: k29WLdRRE7fdOQXK8BlA5JWgViWXC/IhUihO3TRv3JQ=
Subject key identifier: 9E:CB:B4:9E:5F:A4:4A:AF:5B:FD:93:D5:37:65:1A:68:A6:8A:E7:B3
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 01A06D274CEB258FEBFE4A6AF23490E27A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 0FA5
Signing time: Fri 04 Sep 2026 16:01:27 +0000
Manifest this update: Fri 04 Sep 2026 16:01:27 +0000
Manifest next update: Sat 05 Sep 2026 16:01:27 +0000
Files and hashes: 1: 3hMHIVOHYf4xHOB_QIaghE5RKyU.roa (hash: iiTzIP6NLT0/sC8FwGaVheusdiRxnlTvSAKBPuTjCdI=)
2: YxnXBjJdRLAw11Wdm9rEm7FDgfo.asa (hash: HUVAVch0tpB2Eafp8Rpcw9ARFWadeMwT0krWeIBPrQo=)
3: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: p3oQ8bkLkPdRgiuZBGhAl7Alo8bzTP0wJ0hGpIoifFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:27:4c:eb:25:8f:eb:fe:4a:6a:f2:34:90:e2:7a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Sep 4 16:01:27 2026 GMT
Not After : Sep 5 16:01:27 2026 GMT
Subject: CN=9ecbb49e5fa44aaf5bfd93d537651a68a68ae7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:dc:6b:77:6e:75:d3:93:28:2f:ce:ec:63:
d6:2e:a1:fc:4f:ab:50:ac:9a:32:51:98:68:6f:32:
d6:ae:eb:05:d2:e5:11:42:ca:fb:6f:26:bc:ac:24:
73:31:97:54:52:2b:6a:ca:0e:d9:52:5e:61:91:73:
dc:91:e2:52:87:bf:00:72:ae:c3:55:c5:62:1c:c1:
f2:40:38:83:28:0d:f2:5d:bf:39:6e:71:e1:e1:b4:
98:c4:79:47:fa:6f:1e:16:c6:0d:3d:4d:8f:b3:8b:
0e:a5:aa:87:f4:0a:54:18:46:18:1c:36:90:84:68:
bc:be:e1:76:b7:e5:bf:76:98:0a:58:73:fa:cc:c6:
00:86:5b:9d:63:37:b1:c7:b5:b5:34:60:f1:9e:25:
9b:9d:e8:d6:c2:6a:1f:0c:0d:b0:36:5a:69:23:c4:
4f:55:5a:7d:95:04:5c:4f:50:21:2f:18:ce:66:09:
9c:11:4e:6f:8a:28:ed:56:55:a4:b6:fd:2b:d3:3b:
57:cc:b2:05:39:ae:26:5b:f3:45:a8:5b:7d:73:f2:
ab:fe:5b:1f:0a:bb:a1:9e:4d:81:41:c8:fe:1c:5e:
96:4c:bc:0b:c1:a4:62:14:17:18:0b:23:bc:6f:43:
da:bb:58:1c:fd:13:54:3c:44:71:38:60:7d:4e:49:
fc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CB:B4:9E:5F:A4:4A:AF:5B:FD:93:D5:37:65:1A:68:A6:8A:E7:B3
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c1:c6:40:8b:cb:f3:ec:da:51:9f:7a:38:a5:7a:41:d8:af:
23:24:8b:3e:a5:ca:6c:ee:94:33:7c:32:d9:9a:af:83:2b:9e:
1b:bb:90:e0:00:19:fc:e5:90:84:68:7f:3a:e5:75:3b:bf:30:
ff:22:4d:05:76:15:bb:39:c3:51:f4:df:75:60:9b:57:6e:6d:
c6:36:29:86:0d:a1:77:5f:d0:85:56:24:31:e5:68:e6:6e:5c:
13:64:77:02:55:50:83:59:d3:33:b0:24:05:ce:9f:cf:ac:bd:
d4:ac:9e:16:ca:79:32:0a:f4:9b:50:0f:6d:28:a0:55:0a:46:
81:9b:0e:c5:8f:4b:57:ff:a9:f3:02:d2:9b:b2:b8:37:42:44:
df:8b:19:06:f9:23:b5:27:f8:d7:d0:33:65:3e:b2:83:28:3f:
2e:8b:5a:67:f6:92:da:26:2a:be:cd:66:9f:33:bf:db:f1:6e:
5d:b9:1b:fe:67:f3:f4:22:b5:c8:03:29:0c:71:7e:ab:2a:c8:
40:51:c0:29:1d:ba:2d:49:41:3e:5f:c6:0d:a1:34:3b:93:86:
c2:e5:16:4f:d2:12:1e:3c:11:10:7f:ea:b6:ec:03:be:6b:32:
9d:1b:0e:b2:f6:6f:e9:3f:e4:e0:24:81:8d:87:c9:d3:33:82:
19:b0:01:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:23:23 2026 by rpki-client