Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: T4JNS8v5K3qGyFcbvIbM9zDHjAd2s6YxGdlIv9a63VM=
Subject key identifier: 59:4C:30:D1:A9:4D:97:AB:1C:80:EB:0A:27:42:DA:2A:93:63:B5:FE
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 01A040BB9948A3971A9034C97AE5832A8FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 1A2A
Signing time: Thu 27 Aug 2026 01:00:31 +0000
Manifest this update: Thu 27 Aug 2026 01:00:31 +0000
Manifest next update: Fri 28 Aug 2026 01:00:31 +0000
Files and hashes: 1: 1Ci6CgQlWtwRj4abWotGCgJ_WbE.roa (hash: 21FDHL6tsfpOVwV9wPtKykM8GJxDD9usWaIS/proET0=)
2: BRf1u2tI0MdQq-fmpym4aodlAHc.roa (hash: EgaKCAtRV2lGFKlk2kU+aO26h/pUeqeqSUfRHYRzlNU=)
3: WlSa4s52rbN1YrdI2sTxISuXgVs.roa (hash: UFrSiCT3Ok3mVBZnw8kOQNxyLA+lThdQN1709llpw+A=)
4: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: MS0fC27d7MKD/i1esJQ+wSJH5GJCUDSJ92rVhyNdIg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bb:99:48:a3:97:1a:90:34:c9:7a:e5:83:2a:8f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Aug 27 01:00:31 2026 GMT
Not After : Aug 28 01:00:31 2026 GMT
Subject: CN=594c30d1a94d97ab1c80eb0a2742da2a9363b5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0e:58:c9:eb:df:2d:25:91:aa:18:65:2b:71:
9e:8b:d0:8e:2b:ee:e8:70:aa:dc:09:91:50:27:df:
20:b8:a6:fd:ca:c4:7c:cd:c8:9e:2f:23:4c:73:03:
c0:4b:8d:63:65:31:af:a7:68:5f:7f:8c:df:cd:d7:
cb:69:bd:49:1e:18:6e:0e:f3:08:23:00:46:da:61:
48:e0:f7:e9:6d:12:fc:3b:f1:06:89:39:58:f6:ac:
06:38:3d:a4:14:5f:54:8f:7f:09:bc:b1:e7:36:13:
6d:93:0b:72:d2:24:81:47:83:2b:2c:f3:e2:0c:e4:
e7:5a:a3:b8:0a:9b:71:44:7b:6c:44:3e:b9:3e:12:
3a:07:df:5c:15:cb:93:52:d1:0b:e8:40:eb:c9:d6:
d8:d5:a6:a8:a6:bd:33:9c:50:3c:37:fb:7b:f9:d5:
79:b3:96:ff:09:a4:af:b6:a7:20:61:55:ae:9f:8d:
17:75:11:3b:cb:68:ca:77:90:be:94:19:47:e2:58:
97:e2:33:5c:a8:6d:f5:4e:2a:df:53:95:47:14:4f:
2f:67:3b:2c:85:12:8b:fa:02:ed:bb:be:58:78:b7:
07:e6:b5:5d:08:d2:62:07:d3:ed:53:8d:82:0c:4e:
18:bd:84:9c:e3:b2:62:c0:46:53:0b:98:ef:cc:93:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4C:30:D1:A9:4D:97:AB:1C:80:EB:0A:27:42:DA:2A:93:63:B5:FE
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c5:3e:76:06:d4:ae:a3:16:e0:b9:12:97:d6:07:40:bf:45:
57:43:64:aa:4f:bd:72:56:7e:ac:49:b7:90:de:31:84:06:e9:
0e:10:0d:ee:53:3e:1f:62:f7:81:79:50:29:ba:19:91:0a:11:
e9:8f:ce:c0:0e:58:75:e9:22:61:1c:16:5d:e1:3d:cb:e8:43:
09:ac:0a:2e:97:9b:7c:2f:c6:4c:f3:f6:51:de:02:b5:f9:29:
16:8e:1c:50:89:48:84:d8:22:52:75:04:ab:9c:29:ac:19:ec:
4b:1d:fc:c8:35:01:01:8a:9a:dc:36:e7:dd:83:e0:7d:a5:33:
06:bf:37:46:9c:1d:7d:a2:a6:12:ae:77:ed:3c:5b:f0:fb:bc:
71:c5:71:9a:1d:d9:ae:5d:36:1b:b4:9b:3b:2b:44:c6:49:7d:
d9:91:cc:5a:fc:39:79:1c:30:d6:9d:b9:58:dd:d5:a0:9d:ab:
48:ad:e9:4d:fd:50:9e:d1:79:bc:9a:0f:d8:bc:6c:36:aa:ab:
2d:76:81:f8:cb:3b:a0:0d:e3:ae:5c:03:aa:a4:98:77:44:22:
c3:64:4f:01:4e:c1:14:ad:ac:37:8e:ab:3e:eb:26:12:60:17:
9d:77:4f:72:2b:70:b0:06:ce:98:21:f8:05:01:30:fa:28:5c:
0a:fa:24:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:34:08 2026 by rpki-client