Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier: XvcZyc7hf3aHzFrbalS9AM2tuDnlD//Qjv3G31PNzFQ=
Subject key identifier: 95:88:B5:22:A1:E5:56:23:33:77:80:E7:F5:A4:6A:AB:9F:B5:60:B2
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 01A0280ECCCE7E3CCD18F1972B90D408BC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number: 15F7
Signing time: Sat 22 Aug 2026 06:00:53 +0000
Manifest this update: Sat 22 Aug 2026 06:00:53 +0000
Manifest next update: Sun 23 Aug 2026 06:00:53 +0000
Files and hashes: 1: GhCvmgJfuG506WuiaBMBgDUJQZU.roa (hash: I8NuJF/bk5fAsj3b12qVIfzMf7umbiG0VV3yAbXwHJo=)
2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: 396Hnh2LbvJ1cwmP/SS2Ig8v97amqUhkmSGRwZ41wQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:0e:cc:ce:7e:3c:cd:18:f1:97:2b:90:d4:08:bc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: Aug 22 06:00:53 2026 GMT
Not After : Aug 23 06:00:53 2026 GMT
Subject: CN=9588b522a1e55623337780e7f5a46aab9fb560b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5b:d0:3d:9b:7c:83:e9:89:2b:c4:73:3d:ec:
93:2b:8e:02:27:f3:5b:16:b2:1d:65:f6:cb:1e:5c:
52:76:cb:de:8c:0b:ae:1b:c8:93:1c:51:e2:49:37:
f2:10:be:76:ad:66:5b:40:24:42:58:44:a2:93:23:
03:dd:63:68:0f:6a:5a:68:39:63:9f:ad:84:1f:f1:
de:b8:37:2d:70:d4:fb:b6:d6:18:78:a0:ce:54:61:
60:a2:54:7d:3d:bd:3e:98:99:c1:c8:ee:12:e5:37:
7d:83:c3:0d:7f:61:3a:1c:39:08:87:ae:86:cf:ea:
c8:78:3d:4c:20:80:66:42:78:bc:db:2a:78:19:b1:
d7:68:45:de:17:05:f1:a1:1b:5a:49:3a:64:36:29:
6e:fc:c2:38:59:a0:ee:d8:e8:00:54:1c:ea:26:1e:
3f:6d:75:b9:c9:bf:63:e1:bc:93:39:7f:21:13:eb:
f9:15:96:85:e0:45:8b:0a:23:f7:28:c2:26:57:45:
e2:6c:d8:f0:f3:38:13:47:32:1c:42:a9:9a:a3:b2:
4d:73:29:88:28:3c:6a:fd:22:12:eb:25:7d:ec:c2:
d7:7f:05:fd:47:c3:22:31:32:46:69:b2:dd:89:0a:
6d:11:0b:81:62:ef:2a:ab:b6:d7:32:61:a5:1d:27:
07:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:88:B5:22:A1:E5:56:23:33:77:80:E7:F5:A4:6A:AB:9F:B5:60:B2
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3f:76:8e:e8:58:b7:86:b7:ee:67:78:e5:5e:ce:47:76:65:
90:ee:0d:a7:72:f5:87:b1:17:49:fa:d7:f8:46:72:4e:0d:2e:
cc:43:17:81:cd:5b:ab:b2:3c:88:67:22:8f:d6:4e:aa:5d:64:
99:df:35:6c:17:43:f0:85:46:14:ca:f8:6b:17:c7:17:3c:d9:
38:a1:74:ae:94:e9:d3:dd:9a:f3:42:96:48:86:d9:42:9c:40:
19:ac:44:f0:d1:49:30:5f:90:15:cb:f3:1c:07:be:47:36:20:
24:7c:bb:b6:34:d2:9f:d1:ba:cc:6b:19:5a:4b:99:8e:01:9e:
1d:4a:24:d4:d2:b8:fc:9f:4e:8e:ac:b0:d4:c6:a3:28:01:82:
76:aa:c3:24:5a:7a:23:1c:70:3e:8a:4f:3a:49:db:8e:fe:a6:
ba:73:34:df:cc:11:66:4c:f8:fd:1c:eb:c6:90:2d:20:68:86:
e2:fa:ac:3a:2c:e1:94:e9:cc:f1:1d:d8:0e:3d:f2:d9:c8:19:
24:c2:8d:8b:7a:b1:77:05:13:b0:91:f5:cf:ee:aa:0c:e5:46:
4a:c6:ae:ef:96:7b:ca:a0:1c:3d:ab:13:99:2e:0d:40:f7:6c:
c9:56:c4:63:3a:66:d6:59:ff:60:bf:6a:2e:e1:86:c2:ed:02:
94:0f:aa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:12:18 2026 by rpki-client