Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: tIxj3b8wnI+E3vF5WN4q9EVECr0OAYsuK7g6zyHa9R4=
Subject key identifier: 33:EA:A9:EF:15:16:18:2F:CC:4A:C8:80:E1:99:69:C1:73:ED:FF:06
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 01A12C5775650EEB24E3AA191C441184B386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 10BC
Signing time: Sun 11 Oct 2026 19:01:31 +0000
Manifest this update: Sun 11 Oct 2026 19:01:31 +0000
Manifest next update: Mon 12 Oct 2026 19:01:31 +0000
Files and hashes: 1: OxlIMVmAsJoaXxdeH-zRm0aZJmY.roa (hash: Ip5Y0NJgcptDCnlNShnY7k1XbFcnH0s1uGDobJEDi+g=)
2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: LP89YQLjhi3Wl/zg42osdVbjRESP+xF5lCrTTfmCYQo=)
4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:75:65:0e:eb:24:e3:aa:19:1c:44:11:84:b3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Oct 11 19:01:31 2026 GMT
Not After : Oct 12 19:01:31 2026 GMT
Subject: CN=33eaa9ef1516182fcc4ac880e19969c173edff06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:28:1b:82:9b:66:65:a6:ba:ec:d4:3d:82:
18:61:af:5a:db:f2:80:b0:37:82:86:56:de:4e:71:
89:4e:cb:26:e4:0f:3d:4f:5d:40:33:aa:d4:10:c0:
f5:63:29:a7:25:04:2c:8f:0d:32:71:ec:c5:d7:bf:
9c:95:b2:9d:3e:59:da:45:99:62:3a:c1:e5:60:cf:
83:e0:e1:1f:85:7c:6f:a4:fa:28:ad:7c:d3:07:0e:
e4:8c:30:d7:2f:e1:31:80:6e:e4:4f:b7:f9:4e:e2:
6d:de:5c:0e:58:bd:ea:41:b4:72:74:10:a4:cd:1a:
ec:77:bd:ef:17:98:0c:6f:54:0e:be:d1:41:64:08:
03:9e:10:1d:1a:98:92:d5:59:da:b1:e4:ce:6c:5a:
58:63:c8:28:a9:c7:7d:17:86:6c:2d:2b:84:a9:65:
9c:db:5c:4a:38:3a:0f:e5:88:ef:06:e0:ff:25:4b:
57:1b:15:85:ec:b4:02:ee:54:3a:e1:63:93:3d:7b:
53:2f:f5:0f:7a:55:b5:f2:75:68:8d:34:1b:3d:13:
1b:b3:1d:6a:2e:ce:48:f9:23:5a:d6:56:a4:53:cd:
b1:6e:a6:a0:c2:b6:7e:34:3a:35:84:3f:41:d5:e9:
cb:cd:64:76:c7:c0:db:78:38:f0:7f:9f:dc:2b:8d:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EA:A9:EF:15:16:18:2F:CC:4A:C8:80:E1:99:69:C1:73:ED:FF:06
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:14:2b:89:5a:fe:7f:ce:c2:78:3c:db:df:27:6f:40:ef:99:
fd:74:d0:c3:7a:14:9a:44:15:d5:eb:fb:a2:6f:e6:f3:00:d8:
3e:00:7c:b4:7f:0b:56:0b:b1:e8:35:71:90:ad:a1:84:34:24:
1f:5b:72:26:06:7f:97:46:74:0c:66:01:2a:e4:38:29:48:78:
c8:cd:7a:05:b0:c1:13:71:60:43:fb:dc:01:16:59:ae:8c:5d:
9b:0f:c8:ee:0e:e3:68:5c:61:d8:c2:74:66:26:6f:a9:38:b2:
63:dc:06:ac:c0:3c:eb:75:c5:d9:38:04:f5:c3:09:0a:c6:bf:
88:2f:38:20:69:d0:6a:43:f0:cc:4a:a8:5b:25:0f:28:8e:2d:
6f:fd:fb:2f:92:1a:63:6e:88:d8:db:c1:25:f0:55:96:68:83:
de:ad:af:d2:ce:e3:23:0c:37:ae:d2:1b:72:8d:b8:45:d6:77:
ef:65:c6:9d:83:a0:a8:ff:21:7e:19:b2:6e:0f:d0:6d:d0:09:
64:cb:a2:e2:67:43:26:8d:b6:e7:b5:4d:8b:76:95:b0:ce:53:
70:b5:1b:5e:4d:c5:56:d8:4c:aa:fb:e3:20:35:7a:e4:a7:36:
15:c1:b7:77:61:5a:ae:a6:03:27:2c:dd:de:b2:62:26:d1:7f:
cc:bd:45:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:29:54 2026 by rpki-client