Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: mJvOjLh6gfGxqut9TNyA9AgupOqXEVv8hZD390O/dho=
Subject key identifier: B9:82:85:43:2F:A2:D3:03:87:57:AA:25:E0:3A:7F:AD:2E:27:59:6A
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 01A1841A86C0EA91177ADC8C832F76D52381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 20:01:33 +0000
Manifest this update: Wed 28 Oct 2026 20:01:33 +0000
Manifest next update: Thu 29 Oct 2026 20:01:33 +0000
Files and hashes: 1: 9qy5igh9qX4Uci7bRZZV_psOu7w.roa (hash: Tnhc5d5aGwpLgFhdFa9P4ZDIL3T2P5zMzH6turPE6uU=)
2: fOlQP3-PfpjSE6EMsORwi3KiU_0.roa (hash: 9xJNvssU8LW9KKQFyieBw8RskBII5JpvnR6eOew6NAc=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: e0RewARFrTErzDgfy0TcH+rL0bxqYVjJ/U7m7yDhcks=)
4: y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa (hash: 1lKjAhubbXr/HU27nWYgH1iiL0s0e2dhdfsbjU73q04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:86:c0:ea:91:17:7a:dc:8c:83:2f:76:d5:23:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Oct 28 20:01:33 2026 GMT
Not After : Oct 29 20:01:33 2026 GMT
Subject: CN=b98285432fa2d3038757aa25e03a7fad2e27596a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:97:91:90:f2:31:91:9d:0b:9f:95:cb:32:
cf:8a:30:75:7a:39:7a:8f:e9:e0:7c:1b:af:f0:4a:
53:65:a7:c7:56:99:e8:6a:af:56:2a:40:7b:27:4d:
f6:83:22:7b:4b:25:6d:ca:d3:6f:1a:78:87:17:04:
fe:dd:fa:83:08:19:a7:e7:68:ae:f3:ae:24:7d:8d:
ab:fa:2c:1a:ac:af:04:69:d8:2f:21:2a:7b:1d:77:
eb:d7:71:f8:34:48:41:ce:17:07:63:10:39:75:88:
c9:e0:2f:9b:a0:45:59:6c:f5:78:81:a3:c4:b2:e5:
a4:38:4a:12:00:73:00:10:48:5c:d3:2a:cb:ad:85:
56:19:69:c8:e5:b1:db:99:66:09:42:39:a6:11:44:
16:cd:2c:96:8a:b3:05:fc:dc:5b:b1:bb:0b:c5:55:
f5:6e:74:69:e3:9d:8f:2a:d1:8e:3f:42:3c:e4:7e:
56:cf:b9:fd:7a:05:0c:97:1b:72:a2:7d:4e:f7:33:
ee:df:51:78:31:04:3d:48:19:95:3c:c4:c4:34:4b:
cc:70:96:ed:fc:9d:bb:a4:63:34:59:9c:64:c7:20:
04:97:53:75:9d:7b:e5:d5:1c:d1:e7:ab:3c:1f:de:
f2:57:45:57:b2:61:2d:9e:50:fe:56:25:1e:89:3f:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:82:85:43:2F:A2:D3:03:87:57:AA:25:E0:3A:7F:AD:2E:27:59:6A
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:57:e4:f2:03:07:02:ce:49:43:9b:7c:b3:fc:cf:8a:3e:ed:
22:90:cc:1f:50:a5:4a:3a:82:2d:6d:3a:b1:fb:6f:31:87:98:
02:a5:95:ff:07:99:da:04:97:87:dd:55:8a:53:59:70:95:f2:
1f:06:67:ab:cb:17:b9:0e:6b:b9:c7:44:42:da:e7:b0:cb:8c:
d7:bf:a0:5c:27:fb:d9:89:07:07:e2:b8:d6:86:bb:94:0c:bc:
94:09:ef:b1:27:57:b8:5f:8c:e7:38:45:89:b7:e1:cf:61:a7:
0d:7c:f1:5b:89:2b:1b:d8:db:d2:3d:99:51:e3:92:aa:3b:c2:
4e:ce:e8:71:c3:04:93:7d:37:f3:8d:21:21:93:e4:ce:3d:be:
ae:56:56:df:c6:de:c2:3c:8f:7b:d9:72:c9:f0:d8:92:33:16:
94:69:38:bc:84:a0:6f:09:3e:db:9c:0d:a8:5d:bf:21:f7:4c:
f9:e2:38:f1:95:ec:e7:87:73:a2:06:0a:ce:68:24:33:a1:0b:
5e:c1:74:a8:c8:d6:ac:4c:e0:d7:9c:ce:ac:9d:c0:94:82:43:
35:06:0b:30:e7:c1:8c:e8:4b:a1:b7:97:00:6a:fd:f9:a5:07:
d3:83:e7:34:75:d2:dd:2c:38:5d:61:88:02:11:92:b0:f3:b0:
ee:ba:a2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:54:11 2026 by rpki-client