Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
File: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft (raw, json)
Hash identifier: 87eFyjtPSE6kkGcNjVGrKKlyF4V25a6OknVzm5sy/8A=
Subject key identifier: 53:20:60:4C:81:F1:E7:78:88:9A:48:A2:C6:EC:B9:40:27:AB:57:F8
Authority key identifier: A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
Certificate issuer: /CN=a231d7b97a07676122f72e465091d23606ae66a2
Certificate serial: 01A06CF010FF014AFAD47E8ADDF06F1D1C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
Manifest number: 017B
Signing time: Fri 04 Sep 2026 15:01:07 +0000
Manifest this update: Fri 04 Sep 2026 15:01:07 +0000
Manifest next update: Sat 05 Sep 2026 15:01:07 +0000
Files and hashes: 1: duR9uQ1SsCstwHLOlmLoUwdbMns.roa (hash: yA4AsbUZ49Idd1b6bOSpb8V75FCHwuh/putB9VxYleY=)
2: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl (hash: WfTa+jRELxE7nkAwZa/c3kGyRrt26t6lEwDQlcnZAwA=)
3: yMLrlgL_4XGQv4PkP0fKel7Uqa0.roa (hash: WADJFfyNdRhdPfPcKnXU061md0h/PkE/qV2H2/38MPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f0:10:ff:01:4a:fa:d4:7e:8a:dd:f0:6f:1d:1c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a231d7b97a07676122f72e465091d23606ae66a2
Validity
Not Before: Sep 4 15:01:07 2026 GMT
Not After : Sep 5 15:01:07 2026 GMT
Subject: CN=5320604c81f1e778889a48a2c6ecb94027ab57f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:07:d3:63:d8:da:d9:65:ea:5f:80:f1:cc:
8f:cb:22:94:39:cd:12:1c:df:f7:77:43:0d:bf:09:
4a:ac:42:16:22:7b:24:05:bc:26:33:25:76:00:8c:
d1:c0:ce:72:c1:ee:78:f2:25:dc:71:e3:45:c6:0f:
a4:d2:9a:6f:2a:29:10:de:98:80:18:7d:3a:32:e6:
1e:9e:f2:db:a1:68:a8:3f:6f:bc:2f:80:f6:24:3f:
d7:70:32:09:9d:9f:e0:5a:d5:3f:e4:97:47:04:7d:
7b:37:30:20:9f:30:8c:86:91:cf:85:59:f7:4c:9b:
ad:b7:0e:09:4f:b8:aa:81:d8:d9:49:f3:83:c8:81:
50:bc:54:fc:41:01:3a:c9:fe:a5:8c:2a:eb:27:d2:
90:bd:8e:42:a9:4d:a4:e9:dd:e9:d1:79:a0:4f:a1:
b6:17:d4:8b:c8:b9:bc:55:09:54:d3:58:12:27:24:
f4:06:c9:bb:5c:45:4a:b5:f9:4a:e7:9a:f3:a8:3a:
2a:39:52:ec:8f:ae:4b:47:fb:b6:b4:30:1f:53:5f:
56:e2:2d:83:f9:7a:06:20:8c:03:bd:b9:2b:99:00:
35:36:f2:9d:6c:e5:13:5c:43:37:88:fc:88:16:af:
f2:77:74:06:39:d6:de:f8:9f:a6:7b:f0:c5:d8:d4:
f1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:20:60:4C:81:F1:E7:78:88:9A:48:A2:C6:EC:B9:40:27:AB:57:F8
X509v3 Authority Key Identifier:
keyid:A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:53:f5:b8:2e:ee:45:a5:34:3d:bd:e5:24:50:4d:3a:f1:2b:
8b:7e:72:0d:ff:32:92:4f:8c:78:2f:24:df:06:19:8b:5d:9e:
c9:47:fb:9f:3a:f1:d3:1c:ec:c6:98:91:ad:b0:1c:5c:2b:37:
bf:8b:c2:3e:49:f6:cf:34:a5:a3:45:d4:13:40:12:54:ff:07:
22:21:15:3a:9b:ff:05:e1:05:62:9b:31:34:91:d9:2f:a3:5e:
36:ca:cc:1a:9a:43:79:c7:8b:21:7a:60:92:d6:d5:a4:79:03:
ec:0b:00:41:12:4c:96:b3:d5:83:24:93:94:f2:9f:49:99:31:
bb:27:ed:d9:10:97:fa:2b:0f:95:98:5a:1a:9a:ed:48:79:4a:
5a:28:db:8e:2c:ea:f0:df:77:33:89:39:83:8d:16:d6:a1:9b:
bb:b7:ec:65:1d:3f:43:5e:e2:c3:ac:c9:3e:72:6e:d2:47:ed:
c8:b2:34:a3:62:d1:6b:25:60:ae:3c:f0:e9:a5:c4:34:37:f1:
3d:80:62:6a:71:72:7c:13:4f:67:b3:c9:de:87:b0:5d:87:7d:
11:9d:08:29:a1:e3:d1:95:ed:2e:d3:a2:67:d8:d7:a5:33:c2:
6e:4a:51:84:7e:5a:ff:39:d7:8d:93:46:8b:b3:d5:e3:11:22:
4a:ef:eb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:04:26 2026 by rpki-client