Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: Sc2T0laJd0KfGRhjieQ2m55BBrDw4wde2BzRSs2l5og=
Subject key identifier: E0:4B:8E:EA:30:ED:02:55:D9:FA:84:7E:5D:7F:37:16:C7:0B:6C:53
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 01A182999B531487AEF71DD7BE1D901074B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 1ACF
Signing time: Wed 28 Oct 2026 13:01:07 +0000
Manifest this update: Wed 28 Oct 2026 13:01:07 +0000
Manifest next update: Thu 29 Oct 2026 13:01:07 +0000
Files and hashes: 1: D6zgSHbiztj7O2I1DW60de0ptBk.roa (hash: B8D0W1X4lmeoQhtBDBRUB/VyUa2Mld6fBfnDVCoTkMo=)
2: Ed9sbxyb8jvrhvxZjbOv3NsPiaQ.roa (hash: qKAq59OeZGLNvwwrou6DkFU90K39DNnEvwuBkqrbCks=)
3: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: oo6Apea/2pcliRm9OT6L5Gc6GWAD14bWnpAhNZuOxyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:9b:53:14:87:ae:f7:1d:d7:be:1d:90:10:74:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Oct 28 13:01:07 2026 GMT
Not After : Oct 29 13:01:07 2026 GMT
Subject: CN=e04b8eea30ed0255d9fa847e5d7f3716c70b6c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:ce:9e:cc:4b:24:08:bf:ff:35:2d:d5:86:
e7:e0:06:6b:d8:d7:23:14:a4:09:aa:77:57:d2:6d:
41:47:3e:d1:6c:60:e9:6e:0f:8f:15:a2:7c:d3:8d:
b4:5c:7a:8b:57:df:db:f4:18:5c:ad:83:e5:e5:74:
27:57:0a:e9:7a:68:86:49:f8:cc:7e:be:0f:cf:ec:
e7:d8:b3:71:69:8d:fe:9e:5d:2a:86:04:fb:77:3e:
d6:c3:ef:ee:d6:85:bb:ec:41:fb:45:ff:2f:b7:87:
75:df:d8:31:17:83:07:2a:e0:31:4e:62:83:4c:8f:
ff:32:4e:99:02:7c:9f:7c:8f:c4:1e:f2:84:b7:f0:
ea:d8:00:f0:6f:9c:a3:b1:3c:1f:a2:e0:54:e1:90:
63:01:d4:ce:80:bd:2e:0f:9c:99:33:5f:d5:16:2b:
f8:1d:fd:de:37:8b:a5:38:e5:57:64:91:82:5a:36:
8c:7c:24:ba:91:85:1d:3b:08:5b:b5:0b:5d:9b:f3:
d3:0e:d8:07:11:d3:80:60:99:bb:ca:77:7d:aa:a6:
41:19:71:7d:d0:1a:1d:a8:cb:b5:1b:ba:79:9b:2a:
00:41:ed:6b:89:9c:c6:bc:2d:e0:e2:07:9a:92:52:
08:e0:a8:16:2a:cc:c2:63:1f:79:46:a0:ba:95:cb:
d0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4B:8E:EA:30:ED:02:55:D9:FA:84:7E:5D:7F:37:16:C7:0B:6C:53
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:07:56:94:99:72:8f:a0:19:d0:6f:84:48:c9:5d:77:17:54:
58:a3:95:ad:a5:48:ed:9c:f8:f5:cd:4f:91:8a:f1:d4:23:55:
f2:b4:6b:b7:80:cf:fb:bb:11:3f:3b:b7:c9:65:43:e1:b1:af:
ee:56:e0:7e:10:5f:78:0c:c9:f6:cd:c9:44:91:70:73:0a:4d:
18:41:e5:fb:97:b2:41:de:b9:d7:f9:4a:3c:6f:1e:c0:7b:41:
f1:00:e8:ae:a8:0d:3e:ef:74:30:f6:8b:53:4c:78:34:5b:db:
26:e1:a7:15:e3:92:82:8d:cd:01:40:c0:83:93:e3:26:d2:1f:
b5:41:45:08:90:6b:e3:94:8c:6b:88:83:aa:4e:42:4a:31:aa:
cd:1b:91:0e:ac:d5:9d:72:f4:3f:31:1b:3e:0f:76:10:b9:7e:
2c:bd:9f:f9:5f:0c:2f:e9:65:62:e9:eb:e2:33:7b:d3:da:22:
00:0f:07:b1:8e:15:d0:3c:af:2c:ae:e5:f5:6c:b1:36:fa:2c:
75:c8:78:3e:3b:c3:77:17:2c:1d:fd:21:e2:c5:83:3f:e7:d0:
1c:b1:a3:48:7c:ec:cf:f3:5f:02:92:4a:a6:f0:13:6b:6b:b4:
56:53:40:1a:e4:35:40:57:8b:e4:c3:59:b1:d8:4f:d6:18:19:
db:2f:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:27:04 2026 by rpki-client