Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
File: oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json)
Hash identifier: 7/kWNj6ETne9ejQWdGlp/D9H+tRK/zLlHmKyIEpeiog=
Subject key identifier: FE:AF:4D:8D:E6:1E:6D:FB:C8:CE:DD:0E:52:EF:B5:24:84:6F:6F:26
Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Certificate serial: 01A0C88F5782CB5E67C0C8D709A284C3F7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
Manifest number: 0BDA
Signing time: Tue 22 Sep 2026 10:00:32 +0000
Manifest this update: Tue 22 Sep 2026 10:00:32 +0000
Manifest next update: Wed 23 Sep 2026 10:00:32 +0000
Files and hashes: 1: AtniHnWS_m5XJnsdI3EUIOstzH4.roa (hash: KMRx9/qM9+4wF0F9XLzExOU323HbvcZo4zC4bgJQesg=)
2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: EIFRQ4oLtpCcDa6BVIQ4Cgyirb2WVxjXaZnrmuf1vR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:57:82:cb:5e:67:c0:c8:d7:09:a2:84:c3:f7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Validity
Not Before: Sep 22 10:00:32 2026 GMT
Not After : Sep 23 10:00:32 2026 GMT
Subject: CN=feaf4d8de61e6dfbc8cedd0e52efb524846f6f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:92:52:d4:47:70:47:1b:f5:82:b3:2b:68:
f8:9b:ee:8c:da:d3:b2:d1:32:9d:f6:bc:d8:93:79:
39:4f:d5:8f:4b:03:0c:0c:96:6c:68:b4:76:cd:7d:
5c:d0:e5:83:77:0a:12:af:53:98:c2:79:b9:35:02:
54:7b:79:3a:e4:b4:66:0c:1e:6e:21:0a:56:2f:55:
ee:b0:9d:d9:f8:3a:fb:7f:f7:40:22:14:97:29:df:
9a:fe:85:1b:70:dd:e5:9e:f5:51:d2:7f:68:b4:22:
87:7e:6e:be:7a:a3:0e:7e:07:e5:59:c3:d5:23:c6:
42:38:4a:d7:84:61:fd:28:59:93:d5:54:c1:88:0a:
14:f0:31:69:50:78:68:a1:13:7b:95:b5:a2:2d:74:
e3:fe:d0:95:7c:41:63:2c:e4:52:b3:21:8f:64:31:
06:43:de:2e:00:f3:a5:4e:d7:8f:6b:79:9c:ba:09:
f8:bf:c7:8e:eb:cd:bc:4b:f5:a0:75:c6:24:65:e9:
43:8a:90:91:42:9c:7d:40:ba:90:53:17:91:6c:72:
6d:4e:2a:42:13:77:84:cc:33:ca:62:e3:bf:41:2f:
14:a2:5e:8f:8e:48:10:e0:2c:12:a0:f6:86:6f:b2:
aa:99:07:9d:2b:6b:c1:69:14:29:bb:fe:63:ca:4e:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AF:4D:8D:E6:1E:6D:FB:C8:CE:DD:0E:52:EF:B5:24:84:6F:6F:26
X509v3 Authority Key Identifier:
keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2c:d3:3c:20:14:f2:3d:60:d2:6d:ad:09:00:44:2c:38:82:
e8:cb:b9:e7:c3:03:33:cb:74:b7:37:d7:cd:99:aa:15:71:1a:
01:44:e1:3e:f8:74:24:76:10:a4:58:f8:48:29:ab:39:07:9b:
04:fa:67:70:ed:5d:6f:11:86:82:fb:dc:02:1f:74:f7:ac:ab:
37:ac:6c:73:14:95:ee:10:97:69:7a:ec:a9:8c:c7:62:10:af:
cb:b1:a6:4d:70:10:14:99:ec:c5:a8:39:e0:31:70:68:a4:63:
31:26:5a:c3:f4:1b:17:85:09:2d:9c:bc:ea:26:78:5b:a9:6f:
0a:37:75:e4:f9:be:31:7f:2b:37:57:3f:27:06:5d:b5:19:08:
51:14:f0:dc:4c:b8:b1:b8:74:e2:34:89:74:38:5f:a9:d9:aa:
88:89:ca:10:f2:77:f2:5b:d9:8c:72:14:91:4f:7d:16:67:fb:
b9:ae:d7:12:58:4c:98:7e:98:37:8e:fa:67:5b:2b:e1:4a:81:
ae:bf:96:14:10:35:ba:0a:1e:1a:a4:07:5a:71:04:d4:82:20:
36:1f:bd:bc:ae:f6:c5:ad:a7:fc:6a:a6:b7:bf:57:2b:f3:75:
a5:b1:d5:29:62:99:a7:aa:b8:fc:f6:6c:7f:d1:87:64:a6:61:
c9:e0:a4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:19:51 2026 by rpki-client