Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: xleL7sJDt6dzlN4n2E3RGgsH6VFZEhFN58NCD+ldSU0=
Subject key identifier: 45:31:3F:C4:7A:67:61:21:20:E5:42:D6:96:4B:EE:E8:2A:9F:DC:CF
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 01A042AACFECC96C03190D6924C8A20E2101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 1043
Signing time: Thu 27 Aug 2026 10:01:25 +0000
Manifest this update: Thu 27 Aug 2026 10:01:25 +0000
Manifest next update: Fri 28 Aug 2026 10:01:25 +0000
Files and hashes: 1: OxlIMVmAsJoaXxdeH-zRm0aZJmY.roa (hash: Ip5Y0NJgcptDCnlNShnY7k1XbFcnH0s1uGDobJEDi+g=)
2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: FglFYB+16GYOhbMv/KnEyFc15Vopf252+2InsP3zJs0=)
4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:aa:cf:ec:c9:6c:03:19:0d:69:24:c8:a2:0e:21:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Aug 27 10:01:25 2026 GMT
Not After : Aug 28 10:01:25 2026 GMT
Subject: CN=45313fc47a67612120e542d6964beee82a9fdccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:99:39:18:94:d3:a4:78:80:25:1d:ab:fe:
06:75:96:03:2d:eb:bc:8d:b1:9f:57:13:3a:d1:c1:
aa:18:04:eb:4c:dc:df:ed:7a:a7:5e:92:60:3c:76:
7e:2a:f3:7f:1b:1e:ad:46:8a:bd:f2:90:e7:d5:81:
ad:d5:a0:46:11:59:49:a9:02:41:67:2c:51:3d:72:
d3:e9:24:f4:c0:0c:a3:8e:65:36:d0:38:f2:7e:bb:
20:cd:48:08:ac:d7:e5:db:fe:1a:74:92:f8:f7:86:
ce:4e:20:4b:f0:92:cf:7d:4a:96:3c:54:f7:53:d6:
46:74:32:dc:27:d3:da:a8:46:62:85:44:10:0f:8b:
49:d4:b7:52:ea:7e:a8:ea:3e:02:f9:2b:f4:7e:6b:
52:fd:00:58:b4:59:f6:a8:78:8a:4d:fe:f5:32:ea:
cc:24:62:b4:78:db:4e:ce:01:77:50:0f:a4:b5:8f:
31:57:34:09:be:a5:46:06:64:a0:be:e2:04:96:bc:
b8:ae:de:bf:b4:c3:ae:20:8d:99:62:e4:ca:fb:39:
7e:ea:33:ed:6a:09:fc:cc:0c:59:2f:7f:aa:8c:6d:
73:01:3d:24:2c:d5:29:27:6c:6b:21:38:6d:b3:e6:
e9:18:aa:ca:71:c3:e2:89:2f:5b:50:a5:12:21:73:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:31:3F:C4:7A:67:61:21:20:E5:42:D6:96:4B:EE:E8:2A:9F:DC:CF
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:52:a4:d7:16:6e:1b:b2:96:33:3b:8c:20:fd:8c:a0:9f:2b:
84:ab:10:e0:11:56:59:86:d9:18:d6:d7:82:21:ae:0d:7b:a6:
6b:8e:cd:fd:50:dd:f3:1d:15:d1:bd:30:62:07:eb:02:63:9d:
ae:d0:42:59:ff:7b:69:40:15:9f:e2:e4:1a:27:6d:49:3b:1d:
52:53:44:ff:8a:37:a4:f7:9e:82:34:0f:01:d8:27:04:ad:0e:
4c:1b:cf:c9:f7:2b:12:df:09:cc:44:10:d1:8b:4f:e2:14:38:
bc:b8:9b:ee:cc:ef:e3:2a:fc:b1:f4:8f:09:7c:b5:af:a2:aa:
98:a3:fb:5d:d6:61:bf:f0:3c:52:ac:20:d3:3d:70:5b:c1:0d:
5d:b1:e4:aa:c8:47:82:57:5c:2d:17:a5:27:76:94:b0:93:40:
9b:60:f1:80:de:2b:3a:ce:27:6d:15:b2:fe:60:da:af:29:3a:
46:c6:0f:69:59:f9:25:9e:a4:ec:b2:d8:96:e5:5d:2e:77:8c:
dc:bf:76:ff:e2:d6:f0:8e:c5:1d:3d:80:ce:71:ef:e0:09:c7:
6c:00:52:2b:fa:2d:5c:1c:9e:c1:27:2b:46:dc:ca:e2:2c:09:
87:97:40:2c:c1:b4:2c:16:4d:da:fb:ce:61:dc:1f:4b:a1:7a:
81:d6:7f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:40:59 2026 by rpki-client