Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: j9UvMHukvEhJt3irxvluThnh68SzabDtCkLEWWAHe4M=
Subject key identifier: 60:5F:52:EE:93:EB:0A:8F:87:49:E9:D8:F2:EC:D0:2A:3A:E1:9E:54
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 01A10211848A3809CCA1F7948ECE85CB1132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 131F
Signing time: Sat 03 Oct 2026 14:01:04 +0000
Manifest this update: Sat 03 Oct 2026 14:01:04 +0000
Manifest next update: Sun 04 Oct 2026 14:01:04 +0000
Files and hashes: 1: Lw6dpIVKTrHkqnvz6_8ZfhY3LHE.roa (hash: zWKT6y6B8vxLNvJ+sCTyWUsXCNlPOrbo7d9YXIBVvAM=)
2: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: E5x65+ZOVwQZwJvqUOGL6mJwGxjWoCs57QIZrTPiVl8=)
3: yGo3bd_PBkdSOHP97aSwO25CbMs.roa (hash: 4G7Mo+idHxtoGcT5AVhMItxtHJ9uui0A13uK+5ubrzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:11:84:8a:38:09:cc:a1:f7:94:8e:ce:85:cb:11:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Oct 3 14:01:04 2026 GMT
Not After : Oct 4 14:01:04 2026 GMT
Subject: CN=605f52ee93eb0a8f8749e9d8f2ecd02a3ae19e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:a2:21:1c:17:67:27:63:62:ab:93:2c:67:
19:b7:0b:c1:ce:3f:1c:f9:ae:43:8d:01:7a:82:53:
73:19:64:0f:8e:2e:45:d5:cb:06:db:b4:f0:fa:47:
7a:71:fd:ee:32:c3:c2:2a:5e:5e:37:f9:37:56:ff:
30:b4:9c:f1:5a:93:d3:f9:7a:77:3f:b0:e4:1f:15:
87:30:16:76:f1:65:6f:f6:9b:12:9c:cf:04:5a:90:
56:5e:de:5a:6b:21:89:5b:eb:62:d8:6c:d3:9e:0f:
21:5d:38:0b:5b:73:06:95:c5:2c:29:d6:56:ae:da:
40:47:00:22:d6:2f:9b:f2:da:e0:6d:57:b5:8d:2b:
62:a0:da:8e:23:8a:60:bb:75:27:48:47:3b:d7:6b:
75:c1:62:30:35:62:6f:b9:19:c4:de:0e:79:98:4c:
05:01:5b:cd:1f:30:d3:f4:73:c5:98:43:b9:67:04:
b2:f9:0b:95:4a:64:1a:a8:71:b0:58:bd:73:95:82:
0f:a2:dd:1c:59:46:02:37:8b:98:3e:16:8f:03:d4:
a8:42:bb:80:d2:60:cb:82:58:75:d3:3c:75:16:e5:
95:ea:be:da:cf:52:4a:54:c3:51:85:bd:6c:3f:02:
a2:67:ac:95:f0:78:13:43:b4:07:dd:2d:df:33:49:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5F:52:EE:93:EB:0A:8F:87:49:E9:D8:F2:EC:D0:2A:3A:E1:9E:54
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0e:fd:85:a7:93:bf:e0:30:3d:8d:a8:7d:9f:aa:63:a9:ca:
6e:6d:7b:2e:5c:dd:20:9c:e2:9c:9f:ea:a2:76:1e:a3:62:a6:
55:c2:b7:66:41:6a:63:f1:ff:5e:ca:0e:1e:48:5e:02:43:60:
9b:6b:64:19:d1:db:0f:e7:75:70:43:f7:8d:32:ec:e3:10:07:
59:fd:e3:6e:bf:6c:45:6d:5a:4d:88:d5:f4:1a:6b:15:74:ab:
5d:bd:b9:62:3b:11:15:b9:28:9a:b9:8d:7f:ea:ab:4e:65:8a:
bc:04:98:86:6d:3f:46:57:2e:f9:32:d7:95:0f:3e:ea:f9:7a:
db:fe:fd:7b:a3:43:05:98:1c:cb:b1:c2:8c:1a:62:3d:13:b6:
37:39:c9:77:5f:b9:e6:8a:0c:02:0a:17:73:9e:14:e1:37:ab:
d3:9b:b0:1c:71:50:21:1a:21:af:ac:0a:df:9e:79:4c:0f:63:
3e:8c:a3:01:2b:dd:67:19:0a:ff:f3:6f:e7:0a:06:91:19:e0:
d4:cc:a6:9d:1c:0f:6e:09:bb:d2:79:27:c5:52:c3:5d:4a:e9:
2e:9b:67:b9:f7:4a:3b:16:9c:23:c8:91:07:58:5a:e3:90:5f:
b8:2a:51:e2:15:b9:e9:d2:02:0e:43:23:5d:a2:3a:62:1d:fb:
d8:a0:3e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 18:33:55 2026 by rpki-client