Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
File: oUaknFXDAyf4rSIKTpm53G5j4Tw.mft (raw, json)
Hash identifier: QlKCWe4wXhWy/avJ4vLKGCBO9J0zW0oPGI0ZbWoDj9Q=
Subject key identifier: 38:A1:24:A7:36:D7:F9:42:02:4B:B2:1C:0E:B7:C1:FB:BB:DE:5A:FC
Authority key identifier: A1:46:A4:9C:55:C3:03:27:F8:AD:22:0A:4E:99:B9:DC:6E:63:E1:3C
Certificate issuer: /CN=a146a49c55c30327f8ad220a4e99b9dc6e63e13c
Certificate serial: 01A0054C67542F38EBE6694AD7201E752C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUaknFXDAyf4rSIKTpm53G5j4Tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
Manifest number: 52
Signing time: Sat 15 Aug 2026 12:01:28 +0000
Manifest this update: Sat 15 Aug 2026 12:01:28 +0000
Manifest next update: Sun 16 Aug 2026 12:01:28 +0000
Files and hashes: 1: aRfGJPb_gIVfmYmNcjO8YkYkLD0.roa (hash: WP2Dcdi3GBMOmI0NK/vj8JV6PzwkSo14hHtbf3df0KQ=)
2: oUaknFXDAyf4rSIKTpm53G5j4Tw.crl (hash: bbPDgGkoIDVKoaQ+yiBbcK+UfaAEprk6XoJXvOM/JvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUaknFXDAyf4rSIKTpm53G5j4Tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:4c:67:54:2f:38:eb:e6:69:4a:d7:20:1e:75:2c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a146a49c55c30327f8ad220a4e99b9dc6e63e13c
Validity
Not Before: Aug 15 12:01:28 2026 GMT
Not After : Aug 16 12:01:28 2026 GMT
Subject: CN=38a124a736d7f942024bb21c0eb7c1fbbbde5afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:7a:da:46:52:c7:ca:d8:68:e2:84:f9:c9:
3d:9f:70:34:8f:6c:39:b2:56:5f:f7:43:3a:c8:74:
d4:ce:f1:8e:03:bc:78:fd:7b:7e:25:aa:47:31:e2:
0b:02:23:f5:8d:25:01:5e:2d:99:9e:a6:26:31:3b:
2c:62:ee:95:ee:ff:d9:30:6b:03:39:45:49:b9:26:
f0:cc:7e:ca:43:3c:eb:80:13:9f:7a:29:9d:bc:59:
eb:e8:35:fa:6a:28:6b:69:22:fa:bc:c6:b9:f0:c1:
82:53:2f:29:7a:ef:64:ab:eb:2c:cf:fd:da:a0:a2:
c9:d6:5e:21:24:93:b7:c7:01:43:9a:9e:a1:bf:cc:
b3:dc:36:3e:ca:95:40:25:b2:8a:32:85:9f:6b:dc:
bf:c5:66:55:79:1d:e1:b9:14:85:a3:e5:1e:0c:0b:
38:54:7a:08:d3:77:d9:5c:9c:a0:fe:8c:59:27:8c:
8c:09:0a:57:66:6f:cc:65:84:25:f0:19:6e:b5:94:
3b:f5:11:f3:61:cc:81:06:34:5b:86:3a:88:5c:94:
70:0f:7f:d0:5b:32:75:ac:1e:48:09:f9:e9:bd:c8:
cb:71:6a:8c:a6:df:77:87:17:99:d1:3e:50:4e:7c:
c0:b3:28:97:8a:ac:06:73:91:58:c3:8d:e8:c0:09:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A1:24:A7:36:D7:F9:42:02:4B:B2:1C:0E:B7:C1:FB:BB:DE:5A:FC
X509v3 Authority Key Identifier:
keyid:A1:46:A4:9C:55:C3:03:27:F8:AD:22:0A:4E:99:B9:DC:6E:63:E1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUaknFXDAyf4rSIKTpm53G5j4Tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:32:dd:de:3f:6b:05:9f:8c:eb:ea:50:82:69:1c:f9:7d:a6:
9f:c9:14:f1:ec:1f:4e:a4:e3:51:ea:93:0d:5d:10:8b:d2:15:
77:4a:75:bb:86:76:5f:aa:01:bd:a3:7e:54:82:8f:d9:e8:cc:
58:9f:f0:a5:10:4e:13:eb:56:5a:a7:ba:1d:45:10:e1:a9:79:
b6:f9:da:e1:07:af:25:c8:79:cb:ca:a2:84:e5:7a:fd:60:d5:
6e:7c:09:61:40:3f:4d:bd:50:31:e9:a7:3a:a7:0f:b1:3e:31:
bd:8d:de:33:93:46:92:ee:0c:97:96:f6:42:a7:83:82:c3:71:
24:ce:ca:73:cd:d7:6e:48:8f:c4:80:62:2e:60:9c:47:08:07:
20:ed:9e:43:df:7f:90:6d:eb:9a:d9:ff:c2:a9:18:84:fd:d2:
14:d5:6b:0c:01:45:93:89:5c:48:ea:c5:9e:97:df:bd:d8:f8:
fc:15:80:c6:cf:3d:bd:29:f8:b2:9d:fd:bc:ab:d4:17:c9:6d:
91:4f:bb:0b:de:28:fa:bb:c2:ed:53:5e:9c:88:f3:f7:a3:2f:
25:6a:c8:b7:aa:8b:73:10:07:1b:59:2e:7f:d8:5c:0c:88:2f:
e1:87:f8:25:87:55:c2:89:df:18:60:de:2e:f6:83:b1:9b:85:
4a:ba:d2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:52:53 2026 by rpki-client