Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: eq7IkkA+ASESnQxAinvqi3miOpE1Cz57nbYuYQkP5zQ=
Subject key identifier: F0:39:82:1C:F3:F3:6D:C5:AD:9F:AD:B1:DE:12:1C:05:50:A6:AF:58
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 01A08B67F58B779D32C4D4ACCF97ED21301B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 1A4F
Signing time: Thu 10 Sep 2026 13:00:40 +0000
Manifest this update: Thu 10 Sep 2026 13:00:40 +0000
Manifest next update: Fri 11 Sep 2026 13:00:40 +0000
Files and hashes: 1: D6zgSHbiztj7O2I1DW60de0ptBk.roa (hash: B8D0W1X4lmeoQhtBDBRUB/VyUa2Mld6fBfnDVCoTkMo=)
2: Ed9sbxyb8jvrhvxZjbOv3NsPiaQ.roa (hash: qKAq59OeZGLNvwwrou6DkFU90K39DNnEvwuBkqrbCks=)
3: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: sG6znbvGoikD9BA2UXCNFmyRhNsxpzfy3576TGeLRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:f5:8b:77:9d:32:c4:d4:ac:cf:97:ed:21:30:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Sep 10 13:00:40 2026 GMT
Not After : Sep 11 13:00:40 2026 GMT
Subject: CN=f039821cf3f36dc5ad9fadb1de121c0550a6af58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:63:39:26:0f:1b:db:d9:fb:d9:78:98:e9:
8d:27:4c:2a:02:07:c3:39:78:48:73:30:b8:b4:8d:
09:6f:31:53:68:c7:90:c1:b5:56:fd:f2:ee:98:42:
59:ab:76:90:07:33:bf:cc:10:b4:b8:d9:76:fb:33:
40:35:8b:5a:a5:9c:45:b4:9e:49:68:fe:53:1d:0a:
0a:ad:cc:0e:74:e0:6f:0b:4e:5f:ca:85:61:bc:2f:
02:f9:07:72:fb:7b:07:e2:ca:a9:f9:f1:de:34:c0:
10:c9:26:f2:3f:56:d8:c9:58:36:c9:59:3d:9c:dc:
e4:8c:64:7c:ac:88:61:3c:09:a5:b8:2f:d9:5c:92:
e9:f2:20:0b:30:7d:0b:7d:5a:e5:02:ba:5e:c0:1d:
e1:3b:ad:2c:ee:85:c9:5d:5b:6b:10:0a:12:86:10:
76:d1:6d:00:1c:7d:95:25:bf:ad:74:c1:3d:bd:3d:
f8:cc:34:7e:df:04:18:2b:74:31:18:ce:48:e9:43:
4f:6b:ca:e6:af:70:e3:c0:c4:9c:c3:b2:f5:e2:42:
d4:c9:e0:04:3d:28:3b:80:33:a6:79:41:42:36:9a:
e1:a0:19:4a:34:5d:ee:c6:fa:1d:8c:06:fb:06:f2:
e1:56:b4:de:af:2f:db:d6:58:f6:74:1f:ab:21:45:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:39:82:1C:F3:F3:6D:C5:AD:9F:AD:B1:DE:12:1C:05:50:A6:AF:58
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:db:67:a4:d7:22:f0:07:86:6e:8c:ef:c0:e7:69:a3:17:93:
f4:84:9a:6c:e6:c2:f8:13:d7:98:95:06:4d:13:91:22:59:dd:
98:7a:f9:0d:ff:f6:5e:ae:de:42:58:6a:e9:f7:ea:79:8c:31:
62:14:65:6f:50:3d:84:b1:34:b6:d3:b4:16:11:53:b9:80:98:
6a:49:a0:ff:f9:01:78:1a:dc:1a:01:54:9d:51:18:2a:99:4e:
c3:ad:28:a3:dc:2e:c3:d7:d7:0a:ff:3d:36:5b:67:9d:ff:2a:
85:44:1a:93:36:bf:64:1e:44:0d:e6:80:4a:1f:d1:48:32:97:
2c:64:0e:a5:64:9e:91:f3:2a:bd:53:8d:c8:69:dc:1f:9b:28:
d5:6a:39:18:d0:79:f3:07:77:1d:c5:06:7c:d6:d5:ea:4d:41:
cb:e0:c7:2d:7f:86:11:b9:dd:3e:ca:24:1a:e1:54:9c:39:27:
f2:47:75:9c:09:6e:cf:aa:d6:09:83:c5:92:45:fa:0b:19:46:
83:e1:4f:c1:e0:33:94:30:bf:65:98:f2:7b:c6:7e:ea:1f:a4:
b3:81:b8:7f:ff:e5:c4:76:4a:69:ab:4a:9a:61:d1:58:f9:43:
96:4d:73:73:a4:bc:b7:18:80:88:99:26:d4:37:18:38:fa:02:
d6:3b:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:58:05 2026 by rpki-client