Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.mft
File: oPMwHuU4Tk093ptGqxya37wyOlY.mft (raw, json)
Hash identifier: 77rzC3BlCJ5MBpPgK+piBzVm3H8PO6aOESixQJXiVGE=
Subject key identifier: A6:C7:F7:97:6D:66:D2:37:C2:39:B9:D9:4D:1C:4A:C4:61:73:BA:24
Authority key identifier: A0:F3:30:1E:E5:38:4E:4D:3D:DE:9B:46:AB:1C:9A:DF:BC:32:3A:56
Certificate issuer: /CN=a0f3301ee5384e4d3dde9b46ab1c9adfbc323a56
Certificate serial: 01A03DBAEEC1315FB72B5A9536005EB0F43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPMwHuU4Tk093ptGqxya37wyOlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.mft
Manifest number: EA
Signing time: Wed 26 Aug 2026 11:00:55 +0000
Manifest this update: Wed 26 Aug 2026 11:00:55 +0000
Manifest next update: Thu 27 Aug 2026 11:00:55 +0000
Files and hashes: 1: Y7vYwAv1LWiRIY-wwmvv3YD0-mI.asa (hash: ogaz1bRuBZLm0ASsA+GLN8jXycjKjEYZFSh3KsHRpsg=)
2: oPMwHuU4Tk093ptGqxya37wyOlY.crl (hash: mQqvv7/lhXkJjBpwYPbUWYYFq/Q+zlBkD3iRxYzc3ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oPMwHuU4Tk093ptGqxya37wyOlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:ba:ee:c1:31:5f:b7:2b:5a:95:36:00:5e:b0:f4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f3301ee5384e4d3dde9b46ab1c9adfbc323a56
Validity
Not Before: Aug 26 11:00:55 2026 GMT
Not After : Aug 27 11:00:55 2026 GMT
Subject: CN=a6c7f7976d66d237c239b9d94d1c4ac46173ba24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:b0:3a:61:a6:d6:92:f1:f2:31:bb:61:16:
b4:dd:8e:d3:13:04:80:26:5e:07:f8:de:d3:ed:e6:
f8:33:2c:a2:c2:ee:35:14:c0:bd:f1:61:9f:6e:7c:
75:0f:c8:8a:af:3d:51:b0:33:c7:74:a9:81:bb:09:
53:1b:bf:f9:f5:2d:d3:b0:c8:1b:27:ae:2a:a1:f8:
93:70:df:cc:14:64:5b:24:84:c4:d8:1a:59:d1:a2:
dd:c9:9d:68:29:2c:97:87:02:cd:01:cf:1f:58:59:
8c:70:bf:db:85:df:97:90:f2:7d:cf:08:bd:50:52:
be:2d:f8:33:dd:1c:05:ec:b6:a6:f9:a7:58:59:8c:
e8:d7:7b:3c:a1:f1:5f:82:21:b8:e2:b1:a4:2d:91:
27:e9:43:50:95:37:4f:58:10:c1:16:79:98:95:35:
c2:72:e0:b7:2e:3e:21:85:0e:ec:da:4b:a5:7a:60:
d9:6d:ef:96:ed:a8:4b:52:43:ae:2a:ab:31:5d:9b:
f8:75:bb:e8:49:8a:50:a9:44:ee:ed:26:f7:fd:4d:
1d:20:01:3c:1a:0f:c3:85:a2:7a:3d:93:6c:5f:35:
03:af:09:0d:c1:10:eb:7d:61:38:01:bb:c2:57:c3:
ae:32:f1:54:93:87:4b:84:00:7c:6c:c1:96:72:33:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C7:F7:97:6D:66:D2:37:C2:39:B9:D9:4D:1C:4A:C4:61:73:BA:24
X509v3 Authority Key Identifier:
keyid:A0:F3:30:1E:E5:38:4E:4D:3D:DE:9B:46:AB:1C:9A:DF:BC:32:3A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPMwHuU4Tk093ptGqxya37wyOlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:de:de:e7:82:ef:72:30:45:1b:aa:7d:b6:97:e6:14:25:7c:
5c:a6:9a:f5:ca:39:77:30:48:da:67:99:c1:15:83:8f:19:54:
c9:62:e3:f4:76:5f:99:7d:42:66:53:ea:48:ab:f1:df:85:1e:
30:62:c8:a3:3d:cb:3f:d9:f7:96:22:7a:1e:21:56:44:0d:dc:
ac:53:aa:ac:07:11:50:e7:61:a7:df:91:59:72:0c:5a:3d:43:
cd:46:d1:f2:2c:9b:72:fc:7a:55:df:2b:dc:af:10:d8:6d:05:
0f:e7:25:57:02:da:0a:c9:dd:3c:78:e7:8c:43:e6:f4:1c:d5:
07:19:24:73:91:db:9a:48:dd:ec:75:8c:3a:f6:e0:ac:d4:18:
aa:0c:10:60:53:05:dd:d8:e2:eb:3c:fd:76:9e:d8:ab:1b:eb:
e2:eb:92:72:56:ea:13:06:ac:bf:f1:d6:81:7b:7d:ee:0f:c6:
d8:9b:8a:3f:cf:d0:ef:f9:f9:16:a0:53:31:e9:ac:e6:d4:6f:
fe:ee:d8:2d:21:9f:89:32:69:70:9e:65:f6:c2:cb:1f:75:ac:
08:d8:52:63:47:17:b7:10:ef:14:6c:d5:b6:16:c8:3d:2e:d2:
bb:fa:8a:ad:01:18:14:86:38:e0:a1:89:32:43:9f:d8:20:07:
e1:c3:32:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 21:10:40 2026 by rpki-client