Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: OfEEVADlvvnzPextvwuxZlBDE9811y3HnwBEA6jcBM4=
Subject key identifier: 84:0C:4F:66:E8:11:9A:D3:DE:1B:AA:D4:EE:90:96:1D:AD:C8:D6:64
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 01A15A7989AA637699B833E46506FBA3B5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 0C86
Signing time: Tue 20 Oct 2026 18:01:16 +0000
Manifest this update: Tue 20 Oct 2026 18:01:16 +0000
Manifest next update: Wed 21 Oct 2026 18:01:16 +0000
Files and hashes: 1: G_JW6F6wHuk8xHOWEfihSql-qpI.roa (hash: DioqiN9gi012cANZP03n6UlA0P8l0ilW5rpF7qQDEm8=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: 2fvWhpS+DL732W0z592LApmu0b7ubK57y1CDBzqepXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:79:89:aa:63:76:99:b8:33:e4:65:06:fb:a3:b5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Oct 20 18:01:16 2026 GMT
Not After : Oct 21 18:01:16 2026 GMT
Subject: CN=840c4f66e8119ad3de1baad4ee90961dadc8d664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ce:48:8e:48:d3:72:6a:98:81:77:5c:5e:89:
25:6b:38:02:24:6b:a2:d6:41:c2:cb:c4:7d:9b:c8:
65:1c:6c:f5:49:cc:2e:cf:be:ef:46:65:5d:0d:dc:
8a:4f:a3:5a:10:5b:89:8e:72:f2:31:90:1f:49:44:
14:55:a9:3f:a9:8f:2a:e1:da:bd:7f:a2:4c:aa:de:
80:d3:fb:d2:1b:1c:57:b4:cb:04:98:f1:12:2d:8e:
74:f8:f0:52:0a:e4:91:b1:d1:5e:ad:b4:3d:c7:01:
e0:29:71:98:93:3a:1f:f1:56:1f:28:f3:ce:65:eb:
ab:eb:84:90:21:86:de:70:5e:99:c6:44:5d:5e:d0:
fa:8e:9f:67:00:1d:ee:7c:40:b1:ca:69:d9:68:e1:
13:90:80:08:0c:12:36:01:10:9c:20:c8:6d:44:66:
90:57:af:9e:ae:38:39:24:10:2a:63:a9:f2:3f:89:
25:3d:7c:ef:29:95:48:f6:3e:85:79:4b:90:56:55:
57:8d:c3:45:a3:7e:cb:8f:29:8a:df:3f:d4:16:14:
56:d4:3d:43:e7:6e:69:c3:ad:9b:ad:ed:61:57:c5:
55:1f:0c:ce:4f:fe:00:2e:c6:49:b3:54:f1:01:ac:
19:97:6b:8f:79:de:14:26:9f:1b:fb:7f:bc:35:f4:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0C:4F:66:E8:11:9A:D3:DE:1B:AA:D4:EE:90:96:1D:AD:C8:D6:64
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fd:93:38:3d:56:11:56:27:81:21:01:85:bc:a5:db:fb:71:
08:7e:76:fe:7e:b8:29:7d:a7:f7:81:09:b3:6d:e9:30:2c:9d:
2d:15:9e:10:61:27:e9:ce:30:30:01:41:cc:b0:2d:18:0b:4c:
66:cc:7b:50:5c:65:6e:2b:78:ba:df:f1:c2:87:a4:d7:1f:52:
b3:83:ee:14:cf:16:4f:11:f7:4b:b6:64:e8:e4:01:fa:ed:29:
c0:29:35:e1:eb:2c:63:62:79:8d:78:62:2c:23:02:30:9f:db:
e2:ea:44:af:05:34:77:b4:d5:e6:c3:c1:00:1d:4c:44:ec:dc:
2b:60:44:6a:33:27:d6:60:c4:16:7b:24:ad:73:f4:63:d4:93:
f0:68:af:ce:9c:a7:c8:dd:54:87:26:55:f1:6c:64:d1:d6:6a:
f1:50:bd:33:d9:5e:93:5b:66:ad:cd:14:b1:c9:eb:6c:65:e2:
f8:e0:9d:e8:5f:46:4d:49:19:fe:dc:94:f0:b7:09:52:87:02:
b3:dc:9a:36:01:96:09:e7:18:c6:29:57:67:73:3d:3b:28:a6:
49:dd:08:31:83:a1:f6:ea:d2:92:ef:f9:11:25:a9:2b:75:07:
c9:7e:4f:96:38:86:77:74:98:fe:8a:dc:02:40:cd:3e:8f:8a:
75:83:d5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:46:27 2026 by rpki-client