Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: k2DhZ+ylB2Xy/kBLPXlTS5lobMId7B936lzP7/hXCEQ=
Subject key identifier: 2A:5C:E8:6F:FC:14:67:26:29:B2:A3:4D:3A:6A:AF:32:FD:A6:35:9C
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 01A0E70A21856F1EEED64D24642FFE5B9AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 0AAE
Signing time: Mon 28 Sep 2026 08:03:15 +0000
Manifest this update: Mon 28 Sep 2026 08:03:15 +0000
Manifest next update: Tue 29 Sep 2026 08:03:15 +0000
Files and hashes: 1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: ROjv082YQXzX7qFuzt4xYb75OK+u25w8fuUQiLSMNzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:0a:21:85:6f:1e:ee:d6:4d:24:64:2f:fe:5b:9a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Sep 28 08:03:15 2026 GMT
Not After : Sep 29 08:03:15 2026 GMT
Subject: CN=2a5ce86ffc14672629b2a34d3a6aaf32fda6359c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:2a:0d:15:b3:62:bd:cd:62:64:72:7f:29:
f3:f5:f5:cb:61:a6:bd:39:94:c1:a0:16:0c:65:17:
fb:46:fd:23:24:2d:2e:12:29:f8:65:76:0d:49:eb:
53:71:9a:96:55:4c:6a:3c:91:e5:81:f4:f8:13:78:
67:85:26:c3:6a:a2:ea:f1:0d:74:55:06:67:b1:ad:
fd:e4:19:5d:cc:55:bc:35:6a:f6:b9:e9:cb:76:f1:
ce:d4:2d:30:a5:87:36:90:7d:32:44:b1:85:9e:1e:
17:f5:c1:46:41:56:5a:29:d7:43:95:7f:4a:e3:e8:
70:44:17:a5:e4:9e:73:83:6f:93:3d:f8:d0:d1:c7:
45:e1:ce:17:02:b2:76:f4:04:17:09:31:ac:52:09:
46:0c:f3:94:04:87:5e:d9:99:aa:7a:1b:cf:87:42:
46:18:9f:88:12:c0:ff:3d:8c:e7:98:0b:0c:33:c6:
8a:9d:79:fa:f2:38:b5:7f:c2:ac:ad:36:9e:70:58:
2b:b7:76:da:aa:5a:b6:20:ca:27:9a:c6:07:41:77:
41:3b:ef:82:c9:44:ff:2b:cc:9a:18:09:e5:87:cd:
2d:d3:c9:76:57:4a:df:16:cc:b5:16:b2:65:90:0c:
de:8f:e1:a4:6f:48:0e:1a:ac:81:84:7d:03:3b:04:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5C:E8:6F:FC:14:67:26:29:B2:A3:4D:3A:6A:AF:32:FD:A6:35:9C
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:67:be:74:45:57:38:98:c3:f1:4c:74:db:c3:57:c9:8d:b4:
c5:ee:84:4b:1e:70:de:61:b5:38:80:16:f8:13:99:11:8c:53:
c1:81:c2:33:ea:c4:a8:c0:34:7d:f3:82:3c:f8:71:7d:d3:9b:
69:c8:3b:be:c6:89:97:a4:99:5e:b6:2a:aa:dd:26:07:2e:4a:
c8:d8:ed:78:d3:c0:39:a2:aa:ce:a3:06:0d:d8:e4:3f:30:0f:
63:64:1b:57:62:09:2c:26:37:56:7a:52:3d:65:92:71:a5:c4:
13:37:af:ea:f7:ad:1d:a7:2b:be:40:59:3a:76:6f:50:6b:d0:
ee:f6:b9:ba:65:28:e8:65:dd:7c:b6:67:8c:38:3a:56:74:19:
4b:3e:0c:71:7f:d2:a1:2f:ed:78:77:fc:6d:dc:d7:87:ea:9d:
c1:0c:18:c8:dc:4f:dc:c5:a2:f5:f6:c9:ab:74:c7:89:b8:f6:
da:7b:35:7e:08:2c:42:59:3c:2e:de:03:89:ed:64:ca:fe:36:
5b:6b:f1:c4:c1:57:5d:26:56:df:84:b5:8e:28:72:31:18:cc:
6c:90:46:65:d7:7a:09:c6:86:07:fe:f6:1a:74:91:a0:79:33:
a6:85:37:d8:b2:58:0e:28:1f:15:57:39:20:94:13:b7:27:51:
11:de:59:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:03:25 2026 by rpki-client