Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: X1n5bLGjUvhRD5K4IqKQzBTk0Xb5ZduSMXuZ0ch8JsQ=
Subject key identifier: 77:74:57:D0:0C:9E:88:C1:C9:94:97:41:E3:36:E9:1D:04:92:8C:3E
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 01A08BD5F334F578ECE1B686B167556698B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0F6B
Signing time: Thu 10 Sep 2026 15:00:49 +0000
Manifest this update: Thu 10 Sep 2026 15:00:49 +0000
Manifest next update: Fri 11 Sep 2026 15:00:49 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: Js+pkeGJaq3WN97HoSrq/Ivt9FsSsQNDhFqCyVTXtnE=)
2: UFBgy25q3CguK3nxfqwvatepW1g.roa (hash: m6Q6Vl1NfvutDppfODeVLNYdAatkJRM43X4ANyU2Y1Q=)
3: opow8uP9IKSNWNqVgii4cTwADfA.roa (hash: +b/EweslPo3iR9ssvZX7aiO4HVHajEP37IxcMi09yZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:f3:34:f5:78:ec:e1:b6:86:b1:67:55:66:98:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Sep 10 15:00:49 2026 GMT
Not After : Sep 11 15:00:49 2026 GMT
Subject: CN=777457d00c9e88c1c9949741e336e91d04928c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:9a:23:1c:0b:1b:40:d7:1b:50:21:22:69:
38:01:3d:6c:5b:32:fb:f1:23:57:d4:72:d9:03:0d:
08:b4:59:18:57:19:e1:8e:b5:bc:84:6f:66:fa:cf:
5a:63:7c:a9:28:b7:08:18:df:c4:17:ba:aa:e1:9c:
69:3a:00:a2:3b:07:fb:78:c9:b4:61:dd:0e:fa:b4:
94:c8:90:e5:1e:b8:f6:dc:f1:ec:de:c7:c8:94:b6:
53:04:fb:3c:79:d9:8f:a7:92:b6:ed:fa:e7:f6:18:
be:86:04:42:1f:e1:12:b4:46:69:79:e8:2c:c9:73:
e2:df:6d:8b:f6:69:5f:ff:22:57:4b:4d:e9:85:c9:
60:07:51:df:1d:46:ef:20:39:5e:6d:eb:54:da:81:
bc:cf:37:b5:b9:ff:2f:73:ec:e1:d8:40:f1:8f:c4:
94:89:86:b2:81:ab:67:65:52:18:1f:94:48:32:c9:
23:78:94:46:56:9c:d6:02:7e:fa:14:63:4c:0e:38:
de:7e:a8:fb:76:e0:aa:81:f8:e4:d9:06:e4:d1:3a:
7e:27:cc:8d:0f:9d:77:56:5f:25:4c:31:b6:f2:64:
fd:23:86:8e:d4:69:22:92:c4:62:4b:04:18:35:e9:
a7:e1:46:56:ed:3a:8e:74:cf:90:03:8d:10:0f:45:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:74:57:D0:0C:9E:88:C1:C9:94:97:41:E3:36:E9:1D:04:92:8C:3E
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4e:52:39:03:b6:98:e9:61:56:35:42:49:6a:2b:b0:0d:63:
96:1a:91:33:b3:ec:93:9d:c2:f1:6d:5e:64:34:eb:40:ab:55:
42:ba:60:91:25:c9:8c:f7:8f:e8:07:a9:ca:f7:10:38:5d:85:
e8:41:45:33:d3:b6:bd:7b:30:80:04:14:15:57:9f:c6:5e:b4:
ea:48:34:5e:53:64:34:ba:fd:e0:3a:1b:aa:61:ce:30:c9:28:
37:b7:f0:1a:e1:10:ca:9a:86:a2:a2:f9:c8:67:f5:3a:be:11:
7b:1a:3d:fb:1c:fa:f5:f2:9e:0b:85:e4:eb:45:f9:09:cb:cd:
03:52:fd:aa:05:2d:77:0b:fc:6b:7a:6b:38:61:6e:9e:fd:ac:
48:ad:f5:74:f7:4e:34:0c:b6:e7:f6:14:11:e5:ee:2c:37:d6:
43:60:49:d0:1e:4d:98:d7:9d:0d:dd:05:be:1d:71:85:f2:66:
7f:4e:ed:5e:f5:c0:1f:12:d7:60:29:6c:ec:07:8d:02:73:97:
94:d7:13:37:e1:1a:59:30:80:88:8b:24:7d:41:3a:82:fd:8f:
12:93:32:04:3e:e0:86:64:a1:95:f5:d2:9c:11:5e:5e:d8:62:
e1:9c:ce:55:ad:2e:fe:d7:50:c0:a6:48:93:1a:ba:69:06:b9:
68:a8:49:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:56 2026 by rpki-client