Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
File: oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json)
Hash identifier: D05rhnnuZzqyuIyhYOOUyWrgRURIfJ3FdOQJgYFcNTQ=
Subject key identifier: D8:37:AF:53:76:95:92:D5:66:DD:CA:58:F7:32:A2:77:58:08:D7:C3
Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
Certificate issuer: /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Certificate serial: 01A1931F91919CD84DE2F1793A141C971550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
Manifest number: 044D
Signing time: Sat 31 Oct 2026 18:01:21 +0000
Manifest this update: Sat 31 Oct 2026 18:01:21 +0000
Manifest next update: Sun 01 Nov 2026 18:01:21 +0000
Files and hashes: 1: h0OnQS_LDhHmHtdq9MOUPdDXqMY.roa (hash: fvbR4O3MuxsJi7oWYqjm2ohLFx0/5Mha06ohU0AwT/A=)
2: hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa (hash: LpyLjFrIDk+LFAUQPWPNyV38HQSScxJQeF0sXMSFCqU=)
3: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: KF8wXEgjsDAP/buQ4bxQVRJKB6q20krs0JcfXZVnFb8=)
4: zY55egblxOayG_XFLEDuLnn2KzY.roa (hash: 3VtoSxzQ+1ALd4QWfODnz+BMqwgszTlt4xRR53OtSeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:1f:91:91:9c:d8:4d:e2:f1:79:3a:14:1c:97:15:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Validity
Not Before: Oct 31 18:01:21 2026 GMT
Not After : Nov 1 18:01:21 2026 GMT
Subject: CN=d837af53769592d566ddca58f732a2775808d7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:72:84:bc:ef:bb:71:d8:bc:58:ed:e0:54:
f1:03:b9:1d:6e:ab:b5:bb:aa:fe:23:63:ea:cb:aa:
35:ae:40:0b:63:e4:64:e7:e4:56:2b:fd:7a:23:89:
7f:fb:b7:ec:b6:ac:b0:c6:68:a4:95:22:84:3c:e0:
ab:bd:0b:d5:7c:39:9d:4c:49:a4:41:e2:1b:44:bc:
f2:ca:27:5b:c7:f8:a3:53:17:7b:9e:7d:79:04:37:
85:d0:64:51:66:1f:70:25:15:fb:79:71:28:30:2a:
d5:7a:e9:51:99:5c:f5:d7:a6:8d:f2:09:70:2a:af:
94:5a:d6:56:cf:23:59:40:d5:6c:e8:dc:d8:6c:37:
e5:b8:4b:44:69:f8:d9:1a:23:d9:15:fb:1e:75:30:
8f:39:df:b5:cb:93:8f:57:5b:7b:48:37:2b:b6:8c:
a0:8b:fe:62:d6:00:f7:d0:08:8d:96:ca:78:a7:6e:
c0:8c:c6:5d:b0:05:11:af:20:3c:bf:8c:db:da:79:
ec:95:96:9b:4f:e8:74:08:6d:b8:b4:ce:71:9e:10:
f0:de:88:c3:5e:0b:1a:25:86:30:e3:12:a6:fa:f8:
02:5c:fe:39:66:dd:09:9d:e5:71:df:48:08:3e:cb:
80:bd:cc:77:59:ee:3a:e4:f9:18:c4:87:dc:7a:50:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:37:AF:53:76:95:92:D5:66:DD:CA:58:F7:32:A2:77:58:08:D7:C3
X509v3 Authority Key Identifier:
keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e8:03:92:d6:1b:5b:9a:44:75:c8:b4:f8:ad:c5:6d:6c:33:
84:f2:c9:f9:76:ee:15:b6:a4:65:f1:13:3d:8c:bc:06:2d:87:
3f:65:93:06:57:80:4c:90:d8:56:f8:08:d3:9f:9b:e0:72:1f:
06:65:bf:e4:d0:ea:22:d5:99:60:84:6f:1c:49:06:90:e3:07:
f6:10:f1:40:13:ad:32:02:d5:95:ba:5a:2f:17:2a:bf:ab:ed:
9c:7d:c9:74:5c:9c:11:0e:62:84:41:31:84:43:41:78:f6:28:
f6:69:21:ba:c3:c9:c4:82:03:ed:54:a9:60:35:fd:92:ea:1f:
5d:9c:a9:ae:08:27:3a:22:d7:21:96:d5:b0:73:0e:84:cf:82:
5b:ff:f1:60:b0:fd:dd:11:29:b6:d4:cf:5a:f5:51:1b:0f:b0:
78:40:4f:9b:69:ad:9a:1a:a0:f8:d2:fc:ce:ac:9b:91:e1:57:
92:91:dc:d9:23:40:9e:53:2c:34:d7:74:c1:d3:7e:1f:0a:ce:
64:6b:7c:15:85:b4:e1:9d:bc:94:f0:ef:22:5c:6e:d0:7d:f0:
91:15:10:40:da:69:4f:ce:e4:24:08:da:58:bf:54:62:ef:60:
19:ca:d3:c6:a4:4c:78:db:db:a5:f3:25:9a:85:62:2e:97:42:
c6:48:8a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:49:28 2026 by rpki-client