Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: oJ7CXWTyrJTbJwnJXbroD0/x8ebAldaepj2D1J7nChg=
Subject key identifier: AF:46:4B:03:E2:8B:E6:BE:BE:7A:D5:39:4B:53:BD:80:E9:C5:69:29
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 01A06D94C09B02AC682A37B165EF0D9B5E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 15FA
Signing time: Fri 04 Sep 2026 18:01:00 +0000
Manifest this update: Fri 04 Sep 2026 18:01:00 +0000
Manifest next update: Sat 05 Sep 2026 18:01:00 +0000
Files and hashes: 1: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (hash: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA=)
2: iCHozfTTxF16YGNAVt20MXzc00g.roa (hash: H989MZeJbW+NOaRo/HUuwj+zsKhP6qt0Wm1UtPVlNvk=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: oifkoK76YfduyCDThZ6pofYeqlHRphU4P5Z9JjEP2LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:c0:9b:02:ac:68:2a:37:b1:65:ef:0d:9b:5e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Sep 4 18:01:00 2026 GMT
Not After : Sep 5 18:01:00 2026 GMT
Subject: CN=af464b03e28be6bebe7ad5394b53bd80e9c56929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:9d:8f:89:83:d2:2b:5e:03:4d:e8:2d:b7:
38:c4:57:41:0f:4f:7b:30:41:c2:3b:9b:dd:79:73:
5f:c7:2c:7e:aa:5b:d9:d2:9b:26:37:7f:fe:67:a0:
8e:ca:a1:71:44:5e:39:0d:63:18:6f:c1:05:73:40:
91:09:c7:e1:3a:36:a9:55:46:57:f7:c4:3e:10:00:
80:df:ab:2a:38:15:83:9e:ff:50:a2:5a:10:7c:ec:
90:7b:af:d5:04:a7:35:2e:6c:97:57:30:de:5e:bd:
ab:97:2a:63:27:32:21:4b:0e:0a:f8:7f:17:c7:e5:
63:8f:7f:c8:f8:51:a7:71:42:a5:9a:e5:fd:21:6b:
b1:75:16:5b:81:a4:ca:d0:8b:3e:58:e4:e1:8b:a0:
61:fa:27:2e:26:83:7b:79:2d:1d:43:b3:6d:ca:05:
d9:ff:a1:3b:05:95:b9:58:36:cf:01:36:2e:43:cb:
a1:7c:9e:65:15:69:29:1a:36:86:6e:9c:96:44:23:
8c:e9:9b:19:8a:7a:45:36:92:a7:46:a8:14:0d:45:
b8:fd:25:ba:db:4a:c5:36:d9:e9:8e:49:64:ed:cd:
03:5e:d0:d9:00:f3:d9:59:20:60:99:30:4a:5a:58:
66:67:04:7b:ce:9c:6b:00:59:d8:ab:f2:a7:c7:3d:
8e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:46:4B:03:E2:8B:E6:BE:BE:7A:D5:39:4B:53:BD:80:E9:C5:69:29
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:77:43:5d:48:be:4f:25:9c:e2:6f:5a:b1:e0:18:2d:1a:ae:
cd:f7:d6:75:34:f3:99:7b:2c:72:2d:99:0d:67:58:af:ce:b7:
03:cc:41:1a:ec:88:57:8f:8f:68:b8:e3:00:37:b0:84:e5:fa:
94:dd:c3:14:8e:30:92:69:88:97:86:7a:18:14:5b:09:18:1d:
0d:e2:0a:5e:d8:13:7e:8e:92:44:aa:36:06:1d:f4:31:83:14:
94:f2:5e:8a:e5:65:08:05:8e:b2:98:bb:09:a6:6f:d6:69:56:
fe:b4:80:8b:f8:6f:2a:70:55:1d:3d:23:33:96:1f:2c:f8:af:
42:2c:4d:3d:7e:cf:43:ef:66:1d:c6:78:bf:ec:7e:d5:12:93:
e2:06:ac:b1:1a:c5:e2:41:42:5c:4e:09:49:ff:d4:07:50:b5:
96:26:2d:e4:3f:18:47:00:33:fc:d6:20:ba:05:b2:5a:3a:ec:
0a:1d:29:db:b6:51:ed:4e:64:5f:02:f2:98:63:c3:0f:0a:7f:
8e:29:76:4c:d1:ed:dc:bc:12:1d:98:14:4a:fa:60:37:5d:f4:
a1:60:e8:7b:7f:c2:3f:d6:72:f4:a1:02:26:1d:33:39:8a:83:
d4:30:ed:99:97:da:71:6e:40:77:ef:14:66:0b:a0:e2:27:4f:
dd:e9:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:37:35 2026 by rpki-client