Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
File: Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft (raw, json)
Hash identifier: GZWUewnjR5loorTGkCHJqLtwa3LoC82hLIMCDjPeZJk=
Subject key identifier: B3:02:38:A9:EA:4E:48:DF:6D:2F:71:DA:8C:B6:0C:08:C5:A7:38:DD
Authority key identifier: 39:A7:B4:A9:E8:91:F8:B9:B0:83:E9:80:A6:AF:AF:44:AA:6A:1C:95
Certificate issuer: /CN=39a7b4a9e891f8b9b083e980a6afaf44aa6a1c95
Certificate serial: 01A090581C662EDA7BF3222FBFE1A4C301C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
Manifest number: C4
Signing time: Fri 11 Sep 2026 12:01:28 +0000
Manifest this update: Fri 11 Sep 2026 12:01:28 +0000
Manifest next update: Sat 12 Sep 2026 12:01:28 +0000
Files and hashes: 1: JLnk5C74MEI_NjoEcm6PQfIFO6E.roa (hash: mjm8zSzLPcPug8icRhADhhaesrGC//QbH1Zmg7AdhiY=)
2: Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl (hash: U4de782JGih5v4iQJItaIuWQV6BURNh4OTe/yD7ZEhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:58:1c:66:2e:da:7b:f3:22:2f:bf:e1:a4:c3:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a7b4a9e891f8b9b083e980a6afaf44aa6a1c95
Validity
Not Before: Sep 11 12:01:28 2026 GMT
Not After : Sep 12 12:01:28 2026 GMT
Subject: CN=b30238a9ea4e48df6d2f71da8cb60c08c5a738dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:0a:14:82:38:e6:9d:e9:19:e2:6a:75:e6:
c4:93:e9:02:d9:d0:83:50:5a:02:bd:b8:1a:f2:e6:
6a:11:0b:9a:fc:9e:25:13:74:2f:1e:cb:5b:f1:4b:
16:92:44:f2:c4:ac:08:50:9f:7e:85:cd:33:a0:36:
b9:2b:74:e3:3e:30:cf:74:58:dd:5c:7a:60:0d:9a:
78:b0:5c:18:f2:63:43:38:7f:56:b6:bf:5e:ad:1e:
4e:97:62:39:0d:ba:4d:c9:42:26:6d:dd:4d:67:1e:
f5:d1:04:81:c0:11:7d:75:be:ad:03:5b:31:bb:eb:
cb:9b:59:64:1d:cf:a0:08:2b:f8:0f:33:6a:3e:76:
ce:3c:a3:d8:67:27:4b:7e:5a:84:b1:8e:4e:2e:15:
03:f4:81:67:b6:91:da:29:42:51:c2:46:90:51:15:
12:44:b2:c0:1e:98:74:f0:ad:c9:ce:89:87:2e:b7:
da:f7:9a:e1:73:9b:8d:8e:11:3b:bd:74:17:fc:13:
48:96:09:8d:72:9c:88:be:d1:ba:ed:be:37:b4:14:
a3:a1:f4:12:7c:05:e8:1b:44:2a:ed:99:86:80:1d:
88:df:33:66:67:39:ae:a4:f6:dc:0b:59:a4:27:2c:
ef:83:66:59:0a:80:a3:d7:0b:e9:49:0a:0e:1b:65:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:38:A9:EA:4E:48:DF:6D:2F:71:DA:8C:B6:0C:08:C5:A7:38:DD
X509v3 Authority Key Identifier:
keyid:39:A7:B4:A9:E8:91:F8:B9:B0:83:E9:80:A6:AF:AF:44:AA:6A:1C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:96:b6:79:5a:90:2f:cb:f3:fd:96:23:17:e2:c8:9d:d1:a8:
8a:8f:02:f6:bd:1d:7c:c5:a8:c8:ec:4a:9a:ae:08:c9:72:dc:
a4:ba:ab:4b:71:22:a5:3f:36:79:30:fd:6f:ef:69:81:66:9d:
bc:d3:9c:ac:74:93:59:97:d4:8e:ae:2e:ff:d3:dc:d9:ad:88:
94:71:29:49:44:07:ef:e2:7a:d9:89:2a:f3:10:c3:78:90:14:
18:be:07:54:9f:78:b1:e6:f0:e4:82:ae:be:a8:58:e0:29:ed:
57:35:44:fe:27:9d:73:11:9f:35:41:2d:35:86:1f:2d:56:cf:
43:d5:31:50:ef:62:24:0a:dd:4f:5e:f3:17:65:c3:cc:8f:db:
78:82:34:3f:20:ba:5f:96:0e:35:65:82:e7:cd:41:02:33:65:
e0:0c:01:f5:85:81:1c:ec:d5:99:22:87:53:d8:02:c6:95:bf:
63:76:f4:5e:57:de:22:cd:93:19:87:79:8b:a2:54:d9:1f:d4:
3d:f9:15:60:1b:a2:74:57:d3:96:7e:a9:db:ed:0f:dd:ba:a0:
10:a8:22:9f:6e:44:de:06:1a:e9:93:5a:25:ec:ae:d0:db:fe:
b7:06:32:de:0f:06:74:13:a7:0b:8d:fb:7a:c9:eb:4e:21:c0:
95:e6:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:05:27 2026 by rpki-client