Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File: oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier: zC63tAV9iFEftO00krOi9wmj0TLMuE92ZpSGKe9dQh8=
Subject key identifier: 5C:BE:81:BD:01:37:81:37:79:05:A4:BB:6A:18:F5:45:6C:DE:2B:BC
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer: /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial: 01A0BDD4A44AFDBFA65501F07F93A7EDA252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number: 0A66
Signing time: Sun 20 Sep 2026 08:00:24 +0000
Manifest this update: Sun 20 Sep 2026 08:00:24 +0000
Manifest next update: Mon 21 Sep 2026 08:00:24 +0000
Files and hashes: 1: gXBH-XlgpLuYkohpzvO2FkMoumY.asa (hash: DtMcO3PNIaPFH8mu6H1UmOdsSLwdFJaoWNKN2NFa8cw=)
2: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: ZGc7ZUgwHE84uiKJefeeDhiGo8EWQLwRtZdSWiQeyXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:a4:4a:fd:bf:a6:55:01:f0:7f:93:a7:ed:a2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Validity
Not Before: Sep 20 08:00:24 2026 GMT
Not After : Sep 21 08:00:24 2026 GMT
Subject: CN=5cbe81bd013781377905a4bb6a18f5456cde2bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4a:6a:c0:dc:05:9e:7e:d2:52:26:80:d1:a3:
2a:08:5f:ac:99:a3:1c:ea:70:08:a9:d8:f6:41:cb:
24:2b:bc:93:b6:88:57:32:2a:0b:a1:57:55:14:1d:
2a:08:6c:11:83:b8:2b:68:8a:0d:cd:3a:94:c8:13:
a8:4d:01:26:33:e2:84:3e:1c:ef:cc:29:0f:f2:a6:
44:88:ff:13:20:2e:f9:28:7b:49:32:11:1e:bf:4e:
3c:6d:92:c5:46:9b:43:ae:08:c6:c9:2c:47:f1:2e:
2a:55:90:1c:8d:5d:dd:1b:22:d7:d0:0e:d1:68:7a:
39:b0:fd:88:6a:6a:ae:55:76:1c:2c:2c:1a:75:e1:
1f:e0:c8:9e:67:2c:39:4a:d1:78:8e:d4:0a:bc:0c:
7d:85:63:9c:81:8e:88:01:83:75:43:cb:41:bf:a9:
ce:61:09:ab:ba:c1:cf:c0:dd:06:ff:60:e1:25:1b:
4e:8b:2e:d9:17:6f:20:28:2b:47:e2:38:53:ad:bc:
ab:cc:44:c7:c0:5d:15:77:b0:ef:c9:6c:70:18:f1:
af:9e:66:b5:6f:c2:fb:36:e2:45:77:43:de:62:2f:
90:56:35:3a:30:79:cd:1d:9e:07:da:8e:c8:69:a8:
09:bb:9f:a3:fd:2e:46:7e:84:04:e6:0e:8e:8f:ce:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BE:81:BD:01:37:81:37:79:05:A4:BB:6A:18:F5:45:6C:DE:2B:BC
X509v3 Authority Key Identifier:
keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e3:21:e2:c5:12:3b:10:8b:dd:83:1c:12:4e:f8:20:74:0a:
99:f2:02:7c:2d:b5:e1:d0:37:6b:e8:bf:be:3f:fc:26:c7:af:
eb:ff:24:11:c7:04:d8:1b:0d:21:ef:49:e7:b4:8e:21:97:ee:
bc:66:5e:45:40:76:f8:5e:82:0a:82:2b:d6:89:b9:d8:ed:7d:
0b:6f:51:9b:1d:55:00:47:f3:7c:f7:8c:4b:b7:5c:a4:b9:fd:
b7:4f:8c:76:31:2d:cc:10:82:af:7b:e9:d8:cb:99:72:73:c0:
e8:f8:80:4d:86:8e:bb:62:49:ee:fb:13:76:e2:5f:41:c3:86:
b1:b4:90:10:3b:e7:54:be:55:a2:0a:8e:d2:80:b3:f2:2d:06:
06:7e:04:20:c2:ab:7f:51:2a:29:66:5e:57:13:c6:c2:fd:92:
19:8a:62:cb:33:83:4f:87:9a:d5:2a:23:69:26:23:cb:88:95:
30:c3:00:82:14:a5:cd:db:c4:23:e1:48:3a:e3:f6:5a:4e:d3:
0e:18:16:cb:8b:b1:73:63:a3:26:ce:da:dc:dc:df:06:d0:a7:
34:70:a3:ea:43:2b:26:d9:4c:5e:9e:d6:f9:1f:2a:a5:12:b5:
59:04:b3:a1:02:c6:33:0d:c3:50:aa:24:07:e7:c9:c2:d4:43:
36:2b:65:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:49:00 2026 by rpki-client