Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
File: OAonDZR7c0BD17LSUhTx3DDwEd8.mft (raw, json)
Hash identifier: nQaOiQ5R6klM+1wVWtRTxIZllsGHxuGu7g9ibXngnYM=
Subject key identifier: 67:58:21:74:B1:3D:65:48:D2:9B:0E:05:99:65:9C:41:14:7C:92:66
Authority key identifier: 38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
Certificate issuer: /CN=380a270d947b734043d7b2d25214f1dc30f011df
Certificate serial: 019FF6B48F8C3A04C7B3C26F6BB919CB097A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
Manifest number: 01FC
Signing time: Wed 12 Aug 2026 16:00:56 +0000
Manifest this update: Wed 12 Aug 2026 16:00:56 +0000
Manifest next update: Thu 13 Aug 2026 16:00:56 +0000
Files and hashes: 1: NxhSUvfOXXEFbfZPGuAjsjHBuoA.asa (hash: lQuAqzmZHKPPnlJhgUigZTqLHkETETb1Ge6jDBuicw4=)
2: OAonDZR7c0BD17LSUhTx3DDwEd8.crl (hash: lmx8paHMUElqqFRSF3shiVKRqbAQfOvyTByFHMiI8tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:b4:8f:8c:3a:04:c7:b3:c2:6f:6b:b9:19:cb:09:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380a270d947b734043d7b2d25214f1dc30f011df
Validity
Not Before: Aug 12 16:00:56 2026 GMT
Not After : Aug 13 16:00:56 2026 GMT
Subject: CN=67582174b13d6548d29b0e0599659c41147c9266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:4b:ff:50:c7:70:c5:c7:2a:24:b5:82:4e:
09:cc:10:e3:3c:14:51:10:2b:19:1f:b4:fb:9a:6c:
12:31:cd:3a:37:ae:72:2f:7b:1f:34:59:4d:eb:a3:
d2:5e:a0:c6:5e:50:de:69:eb:b0:ed:03:b9:a9:1d:
3f:82:27:b0:55:86:31:63:8a:45:ee:d6:b5:2e:94:
26:b1:56:4e:89:f5:19:0b:6b:c0:ae:24:93:d2:f3:
22:05:c1:15:df:d5:9a:60:8a:06:ba:8d:66:a5:1b:
fa:f4:ef:7d:25:97:0c:e6:b7:f9:5d:f4:2c:56:fc:
67:bd:52:55:4b:38:ec:57:c6:7c:65:73:41:9c:89:
2c:94:28:dd:2c:9b:cb:a3:85:17:18:b1:1e:38:5a:
6a:7d:a8:6e:e2:a6:fe:fe:73:2f:58:0c:dc:06:ba:
dc:da:98:ad:aa:52:5a:60:de:fc:c3:26:06:ec:cc:
c6:9e:8e:28:3d:21:24:d1:09:13:19:ac:99:fa:6c:
3b:7f:ea:b4:ae:fa:9a:db:58:63:4a:97:47:a9:db:
ec:fd:39:4d:4a:fa:ef:f8:7c:0b:a4:9d:e3:9d:8b:
9b:63:33:5c:9f:55:64:74:3f:f8:9a:e6:3f:e9:77:
12:19:97:c3:1d:46:b0:9b:71:de:e2:db:7f:e2:eb:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:58:21:74:B1:3D:65:48:D2:9B:0E:05:99:65:9C:41:14:7C:92:66
X509v3 Authority Key Identifier:
keyid:38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5e:98:06:79:dd:81:6c:eb:98:f6:f1:bf:7e:4a:40:10:e3:
82:44:66:5c:4c:3d:aa:a9:cc:88:9c:e2:1a:9a:33:b0:e6:ee:
f4:12:a5:c2:af:f5:d9:95:96:d3:53:29:42:62:9c:e7:9c:56:
51:96:9b:32:8c:03:92:6c:e9:9f:99:dc:20:40:a9:da:be:3f:
2a:6a:2d:de:4c:1f:08:8d:f0:0a:8c:10:45:a2:90:44:ca:70:
42:24:30:96:9e:fa:63:84:5b:77:13:d3:25:81:13:ab:9a:1b:
4c:aa:0a:03:65:42:9b:44:ee:18:36:80:4e:2f:2c:cb:43:5a:
ff:9a:5d:c3:f1:39:cc:6f:2f:44:73:35:5f:40:34:22:ab:8e:
4b:1e:88:95:11:90:61:56:e5:21:e8:e9:35:71:e8:5f:09:2e:
62:5a:c1:10:ea:7e:dc:0b:81:5f:aa:ce:da:b8:8b:1a:21:2f:
f1:f4:16:b7:13:d7:58:61:22:e4:34:b2:a7:c4:b6:34:7a:ae:
ce:0f:ec:17:4f:50:85:79:76:04:54:77:e9:be:66:df:96:8d:
2f:2d:10:da:2f:6d:ee:44:32:3f:f1:60:7c:74:69:a5:1b:cf:
a6:f7:1d:50:62:c9:17:1f:51:93:e1:1b:f6:b8:87:7b:84:fa:
92:66:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:41:22 2026 by rpki-client