Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
File: mOUyD4Vr6C6odOktbYC8b5l4MA4.mft (raw, json)
Hash identifier: I5lB4/aXsXXaxwH7OYLXzwsl8ZcK+WVbw1mwlGVY9FM=
Subject key identifier: D3:67:B6:D7:3D:AD:39:75:49:2B:EB:08:72:7D:89:AC:FC:F8:AF:3B
Authority key identifier: 98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
Certificate issuer: /CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Certificate serial: 01A08A8D01DFFBC1EA799F840721DAB98DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
Manifest number: 03FC
Signing time: Thu 10 Sep 2026 09:01:31 +0000
Manifest this update: Thu 10 Sep 2026 09:01:31 +0000
Manifest next update: Fri 11 Sep 2026 09:01:31 +0000
Files and hashes: 1: 46CB3rmq7ghb0IOigVJMslc8LZI.roa (hash: iNpxmitmZCNCk+8flAyzDSyitulva1I3mwpI1j7ulR8=)
2: cXM4klbaacUguvuXRN4gU4Cio9A.roa (hash: TvSKvxbQqZ/2OHUvXcP+0jqJAZh3aKDn2NH8HHVBK/A=)
3: mOUyD4Vr6C6odOktbYC8b5l4MA4.crl (hash: Gi94vZ3T+MRtmpIXtma2tEC3Kb9svVgKExrfRGY87Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:01:df:fb:c1:ea:79:9f:84:07:21:da:b9:8d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Validity
Not Before: Sep 10 09:01:31 2026 GMT
Not After : Sep 11 09:01:31 2026 GMT
Subject: CN=d367b6d73dad3975492beb08727d89acfcf8af3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:e8:36:a9:c1:94:d8:59:dd:d4:7b:3c:7d:
e5:9a:54:aa:fb:64:38:4f:e3:f3:bf:0d:de:bf:d9:
ac:39:1c:1e:0d:c6:0d:86:6b:e7:cc:c0:fc:10:e1:
50:52:4c:fe:86:52:18:96:b9:e3:2a:76:8c:4a:d4:
6c:05:b0:d9:2f:fa:90:75:68:15:c2:63:8a:1c:5c:
23:e1:92:15:91:03:b0:4d:d6:8e:9d:44:a8:55:39:
71:da:42:73:d0:a9:77:f7:40:55:b3:a3:b4:31:e3:
c6:6e:d5:0f:f1:00:c6:85:bf:ec:79:8c:09:13:42:
4d:93:d1:d1:e0:55:a5:79:bc:57:87:f6:f5:e8:09:
55:9e:8f:da:f1:0f:08:c0:ac:e1:65:30:5c:69:43:
80:af:96:b7:a3:fb:5d:dc:68:f7:9c:44:73:d6:a6:
a2:19:23:76:63:9c:e6:3a:c0:24:52:7b:0c:99:54:
c9:16:fe:b9:7f:47:80:ee:6c:ab:11:85:af:b4:8b:
2e:66:4b:b9:42:c4:7a:3e:b5:24:0c:da:d1:1c:d3:
07:5b:98:0f:45:55:f0:6c:ba:8d:95:9a:12:f6:5a:
71:a3:68:b9:76:4c:b7:bc:a7:eb:66:09:5e:b0:b4:
7f:63:fd:b7:4e:51:e8:4d:79:a7:ca:7a:1b:e4:40:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:67:B6:D7:3D:AD:39:75:49:2B:EB:08:72:7D:89:AC:FC:F8:AF:3B
X509v3 Authority Key Identifier:
keyid:98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a8:8a:41:66:7f:34:69:09:69:77:a1:80:57:40:05:7c:5e:
45:cc:0e:ab:14:dc:e3:80:0c:4c:9b:fc:68:09:da:c5:ac:d2:
21:28:4e:b5:86:ad:d0:66:a4:2d:88:1c:dd:42:f2:05:24:0f:
1f:18:da:99:b6:48:57:70:02:f7:b6:99:d5:92:89:c3:0c:cf:
05:4f:be:be:69:12:76:0f:37:63:53:10:23:a9:e8:ac:53:f2:
de:6f:4c:54:ec:8e:52:fe:13:2e:b8:d7:b6:8f:25:fa:be:bc:
49:93:36:2a:8d:f3:e6:ff:15:18:a9:12:8c:2e:55:a9:1d:13:
45:0c:81:f4:86:58:99:bc:68:d0:ce:ac:8f:81:ab:db:14:99:
4d:89:0c:09:45:02:0f:1e:69:f1:a5:ea:d4:49:d5:1b:fa:4a:
77:af:0e:73:c7:86:1e:1c:d0:f9:1b:88:95:9b:41:a1:08:ad:
e1:1b:83:64:e0:57:34:63:23:4a:25:33:b8:69:b6:3d:89:29:
d1:8e:1a:65:a2:c3:8d:35:2b:8d:46:b2:74:ec:96:9d:36:99:
97:09:19:6f:f4:ea:70:1e:02:84:78:e3:b6:11:db:23:d5:9c:
bb:11:16:b7:d1:51:6f:5f:a5:26:39:c5:08:25:6f:b4:3e:60:
22:df:23:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:21:29 2026 by rpki-client