Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: EPTNt/rS5xkZ+4fct+jyq/I6tDzU7boCDakaLbFfAa8=
Subject key identifier: F9:E2:4B:40:6A:62:74:3C:B8:41:B4:A3:27:43:51:4E:A8:57:10:D8
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 01A08A5557B22CC4C9141453ED2E87C0EE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 0A7E
Signing time: Thu 10 Sep 2026 08:00:43 +0000
Manifest this update: Thu 10 Sep 2026 08:00:43 +0000
Manifest next update: Fri 11 Sep 2026 08:00:43 +0000
Files and hashes: 1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: 6IYjBhtC+2qKFQ3j3YRhTs2faImg3DOF5gU+dTUh3QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:57:b2:2c:c4:c9:14:14:53:ed:2e:87:c0:ee:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Sep 10 08:00:43 2026 GMT
Not After : Sep 11 08:00:43 2026 GMT
Subject: CN=f9e24b406a62743cb841b4a32743514ea85710d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:73:93:2e:a4:15:8f:ed:a0:8b:9c:97:e9:
8d:cf:e9:d7:fc:ef:55:88:22:d3:43:0c:59:27:59:
d6:f9:4c:51:63:bb:b7:f0:53:bc:6a:ab:ed:fe:5b:
93:00:03:3b:84:56:21:ed:e6:0f:b5:6b:bd:29:8d:
ca:f0:19:58:93:72:13:65:d7:1d:bc:8d:c4:2d:48:
85:5d:14:57:22:21:9c:61:d6:9f:4f:05:a0:cf:3e:
5c:92:0a:b7:8f:70:69:94:91:c7:02:40:37:36:bd:
89:72:d2:8d:65:e2:30:46:db:30:25:ae:26:c1:1e:
29:c0:3d:9b:fa:b2:39:cf:81:ce:eb:32:9d:bd:d1:
28:3a:ac:c5:50:6e:fc:eb:db:d7:fd:e4:6e:9e:78:
2f:b0:94:aa:cc:c6:5b:90:b0:16:51:4a:24:07:e9:
f0:41:4f:2d:a5:ab:80:7f:ee:62:c4:87:9c:3d:c7:
70:1f:a1:d0:b5:32:7b:a4:ef:9c:01:82:92:3c:29:
b9:13:b2:24:ad:89:7b:4b:17:45:81:4a:c5:8e:d6:
78:57:16:29:71:1c:7f:a5:ad:b1:e0:4b:38:f4:fb:
22:5a:9a:7a:d2:92:e0:b8:92:3b:61:19:df:f7:54:
42:a5:39:1d:c6:95:43:79:54:f6:9c:11:78:03:08:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E2:4B:40:6A:62:74:3C:B8:41:B4:A3:27:43:51:4E:A8:57:10:D8
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f6:8a:05:3d:8a:cb:f0:65:e6:b0:14:3d:a2:ec:d4:48:21:
c5:c7:bf:df:bb:e1:6b:c8:18:dc:ed:ad:60:40:8f:21:2a:91:
45:29:4c:5f:05:e4:f7:36:81:6d:70:7d:b7:87:43:25:50:ae:
63:c4:e7:37:77:f5:f4:15:72:a8:ba:2d:bc:9f:28:ef:d0:2d:
33:ad:df:ab:ca:cc:9c:ee:79:c1:e2:aa:18:4b:d5:3a:5a:19:
9b:0e:2a:3f:50:dc:41:c2:08:fd:86:d8:21:73:1a:19:0b:7a:
38:1b:7d:80:18:0e:25:7e:e7:49:5f:a4:04:21:b8:6a:97:7b:
62:75:62:59:d2:2f:71:5e:5f:c6:cb:74:94:87:a1:18:7b:17:
af:37:7c:d9:4c:ed:bb:66:14:f2:44:c2:ea:8a:ea:c2:62:17:
0a:83:95:31:5a:95:9b:f5:e0:fd:49:b8:0a:4e:31:8c:87:23:
98:9a:28:49:a4:a0:51:84:8b:f0:8e:f8:44:a6:b9:f6:d5:c7:
8f:5d:84:37:f5:4f:68:aa:0e:a2:d3:b6:93:b4:34:ee:d4:bb:
8a:47:42:86:d7:a3:8f:67:d2:10:f9:de:04:97:27:8e:25:59:
60:7b:38:1b:fb:6e:4e:63:bb:e0:10:ff:9d:71:76:96:03:ec:
fc:b0:e3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:01:23 2026 by rpki-client