Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
File: oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft (raw, json)
Hash identifier: aHHnxCb4FUaKTFmVtCKK0OSUkbEb3e9dmIJ0dkWQAGs=
Subject key identifier: F7:63:9A:FE:A6:AE:B9:F3:14:AD:13:24:26:F4:4F:B8:34:3E:2F:E9
Authority key identifier: A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
Certificate issuer: /CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Certificate serial: 01A08A556EBDBBCCEF0BAFB7DF614BF14440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
Manifest number: 0216
Signing time: Thu 10 Sep 2026 08:00:49 +0000
Manifest this update: Thu 10 Sep 2026 08:00:49 +0000
Manifest next update: Fri 11 Sep 2026 08:00:49 +0000
Files and hashes: 1: Bl_J51ealE87PBDrcx3y2abYz_M.roa (hash: skpARlMkvLIJ9aXgoSnFArnzouHAgMx1Cjvtifcnmuo=)
2: oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl (hash: Xd28aDRiOGuQVJ2yxXTnyL4fWbb33wA9bEkWN/+Ie24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:6e:bd:bb:cc:ef:0b:af:b7:df:61:4b:f1:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Validity
Not Before: Sep 10 08:00:49 2026 GMT
Not After : Sep 11 08:00:49 2026 GMT
Subject: CN=f7639afea6aeb9f314ad132426f44fb8343e2fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:28:2e:2f:7d:0e:17:c1:0a:01:4b:d2:95:5b:
52:a6:af:bf:44:a0:91:88:10:35:c3:53:9a:0e:c3:
4a:26:51:bf:77:a1:f9:9a:0c:97:dd:76:74:72:2f:
90:b5:d6:43:07:7d:41:8d:82:2d:c4:e8:f3:81:89:
9d:2c:08:e7:de:42:4e:ef:14:7b:3c:22:f5:8b:da:
bc:6d:63:60:b4:43:73:af:3a:d4:c7:16:87:69:a4:
a2:75:38:69:8b:28:00:09:32:eb:12:70:8d:f4:d3:
75:e4:6e:cb:38:f6:d5:43:40:a1:12:9f:ad:ab:ef:
49:a3:9f:b9:39:dd:d2:1c:ee:0a:a8:a2:1b:93:ea:
8e:a6:31:e2:05:4e:44:92:51:b6:ad:b3:ee:33:05:
8b:c0:ef:c1:38:6f:fc:cc:a4:40:b6:33:1f:cd:cf:
39:11:44:e1:6b:59:d1:61:d4:22:df:45:94:23:17:
ea:c3:cd:28:a4:68:41:34:54:a6:b1:f2:ae:e3:7a:
32:eb:ed:e6:bd:3c:ab:35:cf:c1:4f:8a:61:f1:b5:
29:b3:4c:f1:41:d7:b8:86:cc:7a:7a:44:10:f4:93:
7b:62:47:cd:4e:83:6c:f0:fd:56:ec:ea:1c:6a:36:
ed:df:34:41:e2:54:76:4c:01:f2:1b:39:3e:f3:2b:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:9A:FE:A6:AE:B9:F3:14:AD:13:24:26:F4:4F:B8:34:3E:2F:E9
X509v3 Authority Key Identifier:
keyid:A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cc:0f:c8:c8:e3:37:ff:e0:7a:d2:71:bb:8b:7a:af:74:38:
87:fc:10:1c:b6:48:de:23:b2:7e:e5:bf:37:39:bb:65:71:3d:
15:30:25:0b:1c:a2:df:7d:dd:2b:c1:88:68:bc:be:0d:44:7f:
ec:f0:87:73:d5:91:7b:8e:75:44:53:c5:b3:91:bf:aa:89:ca:
74:ee:7a:46:20:39:bc:1b:41:76:21:43:4b:f3:09:27:f1:ea:
a8:2c:af:46:0c:1e:8e:bf:7d:ce:2a:80:e5:d2:57:6c:1e:0d:
c6:50:8e:67:12:68:f8:ab:96:11:3f:7f:60:99:45:70:e2:ca:
d4:8e:8b:2d:ac:fd:a4:51:67:b6:da:56:17:77:5c:24:2a:13:
00:f1:c1:44:ed:98:9b:47:77:44:24:27:bd:8b:e1:eb:ef:fa:
41:8d:a8:f6:0c:88:dd:5b:7a:5f:ef:da:a6:29:8a:ad:ae:0c:
cb:87:e0:c5:bf:72:4d:8a:fc:de:d8:2c:e5:af:8b:94:51:7d:
df:a5:36:fc:b4:ac:fd:44:4f:0b:73:8d:d8:19:54:a3:90:8d:
9f:15:12:0c:7b:23:52:fc:e0:e0:4f:19:7a:74:b8:fb:6f:b4:
61:5c:a8:70:64:90:1b:26:4f:93:44:d9:c4:95:a7:62:91:dd:
fb:1d:68:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:44:44 2026 by rpki-client