Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier: ycp3naLsGDPskT+WSKIFmFP+cZhv9xWy7bx8Jv7q7fg=
Subject key identifier: 00:2C:1F:86:2E:85:65:D4:BB:3D:2F:D0:B6:E5:01:28:96:A1:DC:11
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 01A176271F3E9B7EF1AA996CC376752D22FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number: 16A4
Signing time: Mon 26 Oct 2026 03:00:37 +0000
Manifest this update: Mon 26 Oct 2026 03:00:37 +0000
Manifest next update: Tue 27 Oct 2026 03:00:37 +0000
Files and hashes: 1: GhCvmgJfuG506WuiaBMBgDUJQZU.roa (hash: I8NuJF/bk5fAsj3b12qVIfzMf7umbiG0VV3yAbXwHJo=)
2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: bPC/qDYOe9u/ii+aACdFI1ZZcPIzOvg6ehNckQrOkdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:1f:3e:9b:7e:f1:aa:99:6c:c3:76:75:2d:22:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: Oct 26 03:00:37 2026 GMT
Not After : Oct 27 03:00:37 2026 GMT
Subject: CN=002c1f862e8565d4bb3d2fd0b6e5012896a1dc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:1f:1e:e7:fc:54:ec:7b:a4:1d:e3:26:c4:
28:2a:27:9e:0e:13:2d:75:9e:20:1b:27:d6:c3:03:
ed:7a:6a:59:98:22:3a:0c:aa:65:56:22:ec:8d:89:
58:62:18:2d:d2:b0:b0:ce:ad:15:52:78:84:13:32:
36:79:c0:4f:b4:14:12:69:f6:e3:2c:a0:7c:51:2c:
f1:c2:e4:ef:db:a7:6f:7e:6a:68:41:bf:76:ad:61:
68:89:f4:c1:cd:01:e1:c5:50:27:8f:e3:70:41:d0:
da:31:c7:80:3b:78:96:f3:0d:61:6a:98:d4:83:c2:
54:46:e1:c0:16:fe:43:28:b6:e4:22:2a:b8:95:96:
d9:7c:9e:89:a5:4e:f0:6c:0c:5b:57:91:44:da:71:
7b:70:bb:d9:87:83:fc:f7:e7:c6:44:a5:40:d1:27:
d3:a7:eb:60:80:5e:20:55:28:b7:4c:d1:e9:d7:77:
b8:82:50:d3:06:4b:25:30:7e:70:8c:9c:26:f6:11:
f5:13:ad:79:9d:5f:0c:62:86:47:48:72:ca:41:c6:
ee:8f:6e:a7:a0:a2:89:b4:c2:8d:9f:5f:d3:85:b1:
29:6d:09:66:f5:50:3c:c3:20:a2:17:9e:67:c1:ab:
c4:8e:a4:ed:6e:1f:24:3f:e6:52:ae:90:eb:13:04:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2C:1F:86:2E:85:65:D4:BB:3D:2F:D0:B6:E5:01:28:96:A1:DC:11
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:67:77:c5:c1:a0:d6:21:05:a7:49:c9:25:28:7e:9d:3c:56:
a4:56:8c:64:ef:cc:65:24:f5:3e:4a:89:3d:88:fd:8f:4c:90:
0a:05:24:94:f7:6a:60:25:a9:bd:73:aa:46:fa:4e:e5:cb:f3:
c6:ac:0e:db:98:12:36:4d:63:fd:e5:1e:53:67:d8:c0:e4:77:
37:99:d3:d1:d2:80:5d:a9:58:5d:49:d2:eb:a8:44:73:4f:b4:
76:1e:43:7b:8b:9e:8d:31:a9:3f:12:ff:3f:ae:66:a9:1b:88:
c2:a3:25:19:9b:7b:34:87:86:bb:8e:88:e8:9f:f1:3d:bc:94:
5a:22:a7:af:ba:e0:40:6d:1b:22:b8:16:0c:76:6d:70:cb:2b:
3d:1a:1b:a4:a9:ab:a3:79:42:c2:bd:d1:5b:33:b3:09:01:78:
72:2d:68:69:92:f6:7c:2c:36:67:79:08:bb:63:e0:ff:6f:64:
b6:d9:ad:d5:f6:69:f2:68:42:9a:a8:09:e3:84:30:6a:6b:de:
6a:3f:a5:1e:5f:c8:6e:ae:80:71:bc:3c:81:f0:6f:5e:50:4a:
d4:c8:4e:73:9d:77:d4:26:d7:2d:c5:43:3d:45:06:e9:69:4c:
dd:ad:d0:0f:a5:d1:d8:a2:36:60:a3:0e:82:ab:03:06:98:d6:
37:cb:51:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:30:05 2026 by rpki-client