Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: Zy+lUs0kO7oLfVqHqbg0JiOe9ishsLHI/sx1PkYM9lA=
Subject key identifier: 18:3D:85:A3:D9:4E:CE:47:CB:7D:92:39:12:C8:9D:22:1A:9D:93:C6
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 01A13C384D2DFD9846BE78A5543ED58F0127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 1AA6
Signing time: Wed 14 Oct 2026 21:01:24 +0000
Manifest this update: Wed 14 Oct 2026 21:01:24 +0000
Manifest next update: Thu 15 Oct 2026 21:01:24 +0000
Files and hashes: 1: FTsdE4w9A76bc9C2_7wNecbSPNY.roa (hash: rHj2MTYxRe64SZo8LvwXUUXTxEmUO5sPExmz8iIy3Rs=)
2: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: y1zTLiOnqo8IxKYXgYTC88716GVeevAP8thBRo74f88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:38:4d:2d:fd:98:46:be:78:a5:54:3e:d5:8f:01:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Oct 14 21:01:24 2026 GMT
Not After : Oct 15 21:01:24 2026 GMT
Subject: CN=183d85a3d94ece47cb7d923912c89d221a9d93c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:94:3e:8f:60:47:de:d1:96:25:14:3f:bf:
f0:6c:50:1a:00:54:13:6c:b4:aa:70:fa:a1:56:4b:
6e:c8:ca:e1:e2:15:72:16:39:a8:d8:c0:4c:64:b5:
39:b5:b0:f0:3a:25:7b:df:99:54:19:fe:7f:f9:99:
71:2d:d1:f7:4a:fc:17:90:15:2d:d7:53:1f:a3:5e:
bb:f9:28:b8:9a:89:ba:f6:04:f9:0b:7e:77:7e:2a:
1a:6e:96:77:9d:58:de:c7:84:8e:41:e1:f7:35:c3:
1c:69:16:5f:88:96:a1:ed:4a:c5:f6:21:a9:89:c1:
ea:ca:29:90:5c:f8:8e:70:34:d1:0a:a0:db:50:96:
79:60:10:91:3d:5d:d3:5b:f3:16:81:e6:a2:d8:2f:
e1:fb:b1:0d:53:40:8f:e7:d0:cf:ac:01:62:7c:59:
eb:08:e0:cd:1b:63:ef:51:db:6f:6f:b2:60:bb:32:
a3:a6:49:71:85:a7:3b:90:59:bb:15:29:02:81:2a:
0f:47:14:55:a3:52:83:c2:d1:8a:2e:be:ab:25:14:
dd:29:1c:f3:03:6d:9e:72:a1:7b:d5:8e:35:6a:61:
c4:ae:10:af:64:49:b4:d3:a2:62:c1:2f:18:21:6a:
03:48:fb:91:15:69:8b:ea:97:ae:60:cd:ec:74:4b:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3D:85:A3:D9:4E:CE:47:CB:7D:92:39:12:C8:9D:22:1A:9D:93:C6
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:20:77:a1:7d:68:f5:f9:55:88:bb:0d:e8:29:42:b6:62:ca:
4a:56:31:3b:43:31:88:49:3b:64:de:ac:48:7f:97:9b:e4:e5:
6b:6c:49:a7:c2:ef:22:f4:b6:53:25:11:ad:29:be:3f:d5:6f:
e3:eb:24:2d:3a:e6:a8:be:00:fc:87:bd:a2:0d:93:68:12:a1:
6d:de:fa:78:a2:1c:23:ac:f9:d6:06:25:79:61:29:2d:66:cb:
ca:7f:5a:bc:5a:19:34:22:31:13:17:be:f1:48:a1:18:15:70:
f9:0b:a0:9e:ad:ef:2d:d1:59:aa:f7:32:ae:00:9e:d7:31:f4:
d5:19:84:ce:9a:db:d3:49:17:23:46:31:46:31:d5:63:ff:c8:
dd:f4:82:13:56:73:9b:66:6e:bc:43:15:be:2a:2d:f5:9e:80:
cf:6d:cc:41:62:18:72:16:62:5a:d2:d5:b3:a3:c3:a4:d6:eb:
7f:a1:3e:17:3a:36:40:4d:31:ad:8f:55:6b:71:1c:0d:d9:6a:
2d:d3:ae:eb:e4:db:83:14:73:65:87:fa:31:a8:42:85:3f:8c:
7f:b5:75:85:4d:90:ba:d9:4a:fb:cc:7e:0e:06:55:85:be:14:
e2:d9:4f:96:34:e6:bb:75:dc:6a:a5:58:a5:c8:81:df:d2:31:
96:9c:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:20:25 2026 by rpki-client