Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier: mnmTEjHA1sJdSiEocPo1lVrmx5lXNHo4I0Zk36s8OfI=
Subject key identifier: 81:00:43:DE:C9:C1:96:70:2F:1E:37:91:6C:E3:24:52:42:AB:51:8E
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01A089E79DA62495AE5C0C1A1B8ECEFDDB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number: 1920
Signing time: Thu 10 Sep 2026 06:00:52 +0000
Manifest this update: Thu 10 Sep 2026 06:00:52 +0000
Manifest next update: Fri 11 Sep 2026 06:00:52 +0000
Files and hashes: 1: 0XVL1DRx75lawy_xFW5mJsQGHSU.roa (hash: BELOWMUZ3k/HbcEYsajsYqC3iV1ihvP6qfT8um9x+wM=)
2: GpsXVdWfTVrTw1I71qKjHAi-OwY.roa (hash: 37jMyQ9qnFLk9VNqPb2W6JdCqnsDuBdiD0ur3v/oEEw=)
3: NGPMuWiFeknKXkwM3nxouEoeXyk.roa (hash: /tIDGmKeCM03QTIplLTQuWQW/TuDx6K9okVMkl68do8=)
4: XwluJi7gd_3bLnOhsXiaCK78UGQ.roa (hash: Vg2POX67iN2CB7gqcNW3j2zG6gzZxQs5uZV1T7iRkdU=)
5: hl3Yd95fQNxwoRIo3-4kn7W_Dcs.roa (hash: bf3A6eur16fDQenvn2mn0EiiLqdDCmb0v7sPr8NzgvI=)
6: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: ifx22W3JHcWEmX381/xri/0oG7nAJeWnL5LhT3moLk4=)
7: sgQIBkFFp9Zlr_0nrRPVgJN0CEQ.roa (hash: S9CdDbT1ld2vusmvuJyBIT32yXTScPbapiKiAqKYB1k=)
8: tBE2DXCg9mo6HQNSmwQwa4AaEKw.roa (hash: /Uu7Wfq1cKcIhIObzC72sU7ALGmExyntY4syvrkFG/U=)
9: vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa (hash: /W94YDKehwEOG4IGpuPHROQ+73Ocm3mWSD9qbK70W14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:9d:a6:24:95:ae:5c:0c:1a:1b:8e:ce:fd:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Sep 10 06:00:52 2026 GMT
Not After : Sep 11 06:00:52 2026 GMT
Subject: CN=810043dec9c196702f1e37916ce3245242ab518e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:3d:07:21:52:8f:fa:60:2f:8c:de:06:b3:
f5:21:d8:06:03:07:23:1a:c2:61:07:c8:87:5f:37:
5f:a3:8f:e2:08:58:57:34:88:65:ae:e3:88:11:80:
63:5e:57:ee:ac:6a:5d:39:a7:ad:a6:c0:5f:16:70:
a6:2f:83:95:e8:a6:cc:49:b1:a0:24:27:92:7a:7b:
80:b8:07:32:c8:7e:1c:f4:7b:27:68:97:04:7d:9d:
93:ed:81:20:af:06:b0:7e:52:51:80:20:7d:1a:e3:
e6:57:3b:fc:28:4c:25:d9:5b:ab:46:ae:cd:14:da:
6d:8d:b6:76:ac:c7:f9:f3:f0:28:61:25:4c:86:7f:
6f:05:9e:cb:18:b8:6c:13:67:b3:64:60:e1:fc:10:
62:3b:95:5c:73:68:e1:16:c7:b6:0d:16:40:a7:0f:
9f:84:bb:98:28:de:7e:ea:1f:32:df:32:a6:de:05:
22:da:74:4c:7a:68:33:b3:05:96:ac:c2:99:23:3a:
58:52:47:40:2a:cd:e8:d5:f2:fd:56:39:da:0f:4a:
14:3d:30:a8:87:7f:f7:bb:06:f8:c6:d1:90:7d:38:
b7:4c:09:e3:06:1f:3d:9d:4b:85:65:89:61:9a:2b:
24:d9:42:04:4c:d9:11:22:c6:bf:a4:b3:9b:4c:fb:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:00:43:DE:C9:C1:96:70:2F:1E:37:91:6C:E3:24:52:42:AB:51:8E
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:29:b4:1e:16:7a:70:1f:80:3a:00:81:a0:8a:da:e5:dd:50:
cd:ca:05:a5:f7:ba:bf:07:32:bd:fc:4e:a0:f3:90:d1:70:98:
f1:c7:d1:7a:f2:58:6b:10:72:b1:37:3b:3a:32:30:82:00:00:
5d:6c:2c:83:cb:00:84:f0:6b:2f:38:86:00:db:fc:55:7b:18:
4d:2e:aa:d6:fc:35:7e:f4:e7:6a:52:1e:ad:6f:96:d3:b0:53:
4d:1d:7c:83:54:8c:9e:72:5a:84:bd:de:e9:a4:de:bf:22:f7:
6a:8f:3f:22:b4:3c:e3:0b:41:f9:57:3d:12:df:1b:e8:89:8f:
41:83:5e:01:f2:28:98:f9:aa:a2:f8:60:1e:08:7b:d5:b0:af:
ca:25:45:bf:32:bd:ed:98:ad:41:0f:92:39:2c:87:01:a3:bb:
bf:50:88:1a:38:87:db:7c:ae:bb:7a:6c:d8:cb:b5:be:25:04:
71:6f:b1:72:0b:57:6e:99:df:41:43:56:35:ee:bb:1a:fb:13:
fd:63:2b:a3:47:19:1d:e7:e8:de:ad:79:33:d9:e6:53:a1:df:
26:97:12:1b:b7:67:ba:13:58:9c:24:e6:ee:09:10:c6:32:46:
06:c0:fd:44:46:16:ce:5e:d6:ab:75:b7:c8:4d:61:b6:61:e4:
08:f7:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:00:13 2026 by rpki-client