Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: 27qp/doJtzs7m07rqZWwNspO6TXSPaJyNOODECaq9Bg=
Subject key identifier: BA:17:39:6E:30:0A:87:FE:6F:62:AF:43:2A:E0:C7:05:B3:BE:76:17
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 01A17E4EF0792EED014FA4BFA048FAC31145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 1A1E
Signing time: Tue 27 Oct 2026 17:01:04 +0000
Manifest this update: Tue 27 Oct 2026 17:01:04 +0000
Manifest next update: Wed 28 Oct 2026 17:01:04 +0000
Files and hashes: 1: baIq0BCiBz3PcJlSkOIxGUjevrQ.roa (hash: CeBScbn4OcxM8onOF7lmNXHa9tIqH0Nd/sjn3RSNRVM=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: x84o77Oii6ME3R+rMG2NU/CWUkdzOHQy9rfhngQSOeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4e:f0:79:2e:ed:01:4f:a4:bf:a0:48:fa:c3:11:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Oct 27 17:01:04 2026 GMT
Not After : Oct 28 17:01:04 2026 GMT
Subject: CN=ba17396e300a87fe6f62af432ae0c705b3be7617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:09:bd:a1:cf:56:40:5f:2f:fe:b7:26:43:
76:22:17:c6:74:56:55:39:56:73:e2:b6:bf:00:ba:
d6:5f:5c:63:4b:4d:7b:d8:de:76:a2:0d:86:96:72:
62:0a:51:fd:b6:ee:4b:89:06:51:f2:65:00:f5:bb:
3c:fa:6c:d8:49:cc:39:1b:9f:76:90:f6:be:07:73:
3e:21:61:27:ea:3c:5e:83:d9:9e:b3:7e:ca:56:ab:
aa:f6:12:a0:22:1f:96:3b:ab:c8:f8:00:2a:50:40:
0a:77:b7:de:8c:45:91:c6:56:1a:69:d2:6b:de:99:
87:2c:97:b3:6a:7c:02:f7:89:fc:7b:fa:43:61:10:
c8:03:c3:91:a6:b0:6d:52:91:2c:90:06:ba:bc:ac:
c4:2f:2d:37:fb:41:0c:5e:17:1c:cf:f0:4b:42:be:
2d:d3:3a:5f:3c:e0:cf:4c:5f:56:60:97:0e:6c:d4:
68:e4:a8:e1:97:f3:87:fc:fc:b6:7b:49:08:76:79:
6f:cb:bd:3d:a6:97:b5:e9:6d:43:cc:67:63:7a:48:
79:1d:5a:7e:7e:a4:27:6e:a6:fc:48:2e:53:17:73:
6e:96:f5:a2:a3:96:d4:0c:03:41:15:2e:c4:4e:18:
c2:8b:7e:6f:97:f6:83:34:9b:54:3a:04:21:3f:94:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:17:39:6E:30:0A:87:FE:6F:62:AF:43:2A:E0:C7:05:B3:BE:76:17
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:42:a1:9a:e6:4c:5a:61:01:c0:ba:40:91:aa:25:2f:c2:63:
29:18:34:4b:fa:66:9c:d9:9a:76:98:4c:77:b3:04:91:2d:c5:
0e:29:c0:27:33:60:2c:e1:b5:8c:29:4f:d4:a6:a9:9c:12:a8:
07:1f:ca:bd:a2:13:50:0e:6d:1a:ba:bf:2a:fa:b9:51:c9:7d:
96:5a:a7:40:cf:d8:fa:95:53:47:e1:ae:c5:32:61:77:11:9c:
f1:71:33:1a:1e:14:32:a1:5a:2b:fe:63:64:c5:01:ad:b5:0d:
b1:7a:1d:97:d0:d1:08:06:a3:8b:d2:26:e4:10:e6:6a:ed:a4:
cb:4b:6a:73:d8:06:96:42:5a:bb:a6:6f:d1:01:b9:c8:2f:b9:
3f:58:96:5e:75:f4:74:36:7b:f1:1c:86:c8:2f:fe:82:5f:96:
04:30:f5:62:17:b7:77:2c:76:7a:b4:6d:1f:9c:7c:54:10:12:
db:c0:b0:93:e9:64:7c:c5:a1:86:f4:d0:b9:8e:3a:01:dd:31:
c4:0c:9b:b8:98:cd:4c:30:47:57:6e:89:4f:fb:3e:2f:4d:6f:
fb:20:43:96:d0:3f:82:ef:38:6c:4e:52:6c:45:af:9d:fa:f8:
11:91:bf:2b:b6:34:7d:d7:48:af:dd:7c:3c:ce:32:b2:ca:28:
58:92:41:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:42:23 2026 by rpki-client