Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File: oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier: QKTvhoZ6J9EQOWJ1IvTiyUbqP6aE2sZsJfEUsEpQ0Do=
Subject key identifier: 3B:F6:CB:13:CD:28:94:5C:77:6D:00:D1:FB:99:59:9D:FE:02:C7:14
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 01A11DF62ECA56A8922874073CBBF4C79A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number: 1A9F
Signing time: Fri 09 Oct 2026 00:00:35 +0000
Manifest this update: Fri 09 Oct 2026 00:00:35 +0000
Manifest next update: Sat 10 Oct 2026 00:00:35 +0000
Files and hashes: 1: TDjg9kORsVZ-XeJuH5dXRfIUBwM.roa (hash: pMxEnVVLEP7IrLSljgv5EkxknhvXpNCyUXpBvcsi9h4=)
2: jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa (hash: QuobanihGf2Vt3kAlHWHavYrnvmF3ftRBf2VjsfIBoY=)
3: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: XMVuTiCJBhXV2Y6X44QJoUDLY11oJq7ZUdWHi/hGy8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:f6:2e:ca:56:a8:92:28:74:07:3c:bb:f4:c7:9a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Oct 9 00:00:35 2026 GMT
Not After : Oct 10 00:00:35 2026 GMT
Subject: CN=3bf6cb13cd28945c776d00d1fb99599dfe02c714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:db:87:b7:c2:76:28:73:c9:d3:79:d6:bb:
e6:a3:47:a0:5e:62:02:13:b5:5a:b4:c1:a6:bd:dc:
5e:b9:50:ba:ad:e8:90:42:d0:4a:0e:a1:2a:96:d0:
07:45:e3:6e:9c:f7:6c:73:85:ca:33:1b:f7:db:08:
64:e1:bb:62:3b:45:1a:bb:f0:4a:13:79:23:ee:87:
05:3f:dd:d3:18:bf:94:c6:8c:1b:90:26:a5:f0:c2:
ad:45:38:a1:b5:c8:c1:54:65:1d:6e:a9:49:62:d3:
0c:8a:3c:17:0d:8b:a1:48:5e:c0:d1:29:72:ab:67:
48:f1:3e:1d:35:8d:e8:5b:96:34:4e:0d:c6:e3:b1:
23:83:35:90:3b:dd:f3:0e:e0:ea:d9:f6:40:e5:7a:
d5:9e:3a:e6:ea:95:a7:88:61:33:49:f5:4f:64:34:
9f:92:8d:87:8a:76:3f:3e:94:ad:5c:04:7d:b3:63:
96:b9:72:de:53:ce:68:2a:2c:a5:81:c4:db:91:a9:
07:09:c4:e4:a3:8f:5f:88:d5:a8:42:2b:0c:11:0d:
4e:4d:98:7d:b2:69:21:3b:0b:48:e9:ea:d2:a6:a3:
2f:d1:49:46:8e:b5:75:b1:90:6c:33:46:ab:32:4a:
e7:84:e0:60:a6:f0:8b:d7:e0:f0:27:9d:6a:a8:8b:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F6:CB:13:CD:28:94:5C:77:6D:00:D1:FB:99:59:9D:FE:02:C7:14
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:82:f5:c9:f8:97:39:6a:53:64:ae:99:28:62:e2:2c:e3:b1:
52:bd:46:20:a4:97:08:06:75:78:21:73:78:8a:f5:f9:76:fb:
f3:a0:95:17:65:18:ce:bb:3f:d2:8d:23:0f:7d:d7:45:fb:dc:
4b:b9:47:09:22:31:cc:c7:8d:d1:0e:09:61:48:ab:20:b1:11:
04:83:ae:b5:4c:0f:bd:36:51:61:2e:a8:85:87:4a:c7:e4:df:
1c:95:34:e4:66:8f:99:d6:39:b5:9a:3e:48:bc:4f:3d:42:86:
76:42:64:ad:53:ad:5a:2c:ef:4a:1c:f1:a0:07:53:e5:e6:c2:
fc:10:e3:82:09:70:d3:06:99:eb:f1:03:84:57:8e:7e:dc:8f:
95:af:b7:33:af:26:39:ac:65:d0:56:ec:8b:ae:d8:5b:e8:82:
7f:2e:96:6d:df:fd:d7:21:18:50:35:75:8a:51:fc:97:2c:4e:
e8:fe:90:0a:07:aa:45:23:e4:be:dc:0b:6e:e8:28:0b:44:b2:
c6:6a:5b:e9:e1:41:88:0f:09:fb:e4:ec:2d:3a:f3:ea:c3:39:
e4:9a:b3:ac:de:0a:7f:30:e4:e4:fd:ce:62:7c:ee:c2:ba:8a:
52:07:0d:02:d1:10:f2:c5:6d:54:5c:3b:38:c4:48:43:5b:1f:
4f:42:4e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 05:35:20 2026 by rpki-client