Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json)
Hash identifier: 0jj5Bj03RwM4HjXe+eQ5QHNb9oJHChPNcpMvwd99H8c=
Subject key identifier: 18:9B:EE:35:94:C5:CA:4C:49:91:5E:F4:B8:9A:C8:91:DC:47:E1:2E
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 01A0BFC2C602B979C4CBC4EB33097F2CD21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
Manifest number: 156C
Signing time: Sun 20 Sep 2026 17:00:07 +0000
Manifest this update: Sun 20 Sep 2026 17:00:07 +0000
Manifest next update: Mon 21 Sep 2026 17:00:07 +0000
Files and hashes: 1: 6GbxDT6a6WV6sMU4TLzGDdlwYGg.asa (hash: IznoMM07vrX9zSwsytLqGEh6ipn7AIyTyq5l5KBrdbs=)
2: VN57OoPBsGwrpB2MMJuifcY0BKk.roa (hash: DcZvkcVJE9Z9uRMzY1z6mkbvBqMp9YTBuJgd294hlxc=)
3: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: VodJJ2LQzz40p0YCATVEgeskR/nIWF2ioUMNIij/iSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c2:c6:02:b9:79:c4:cb:c4:eb:33:09:7f:2c:d2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Sep 20 17:00:07 2026 GMT
Not After : Sep 21 17:00:07 2026 GMT
Subject: CN=189bee3594c5ca4c49915ef4b89ac891dc47e12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:dc:d8:7d:26:38:a1:19:6c:76:f6:ef:8f:
76:7d:4f:ad:3a:ac:34:4c:d2:a3:6b:c5:53:31:5f:
19:4a:f6:47:ee:1e:67:22:c2:7b:7f:4b:30:3f:8a:
af:a9:67:0d:dc:c7:98:cf:b5:16:9a:7a:00:01:da:
81:12:c9:93:14:e4:c5:2a:1e:93:eb:cb:2e:47:84:
4d:4c:da:f4:8e:5b:f6:5e:b7:f9:40:6a:63:f8:c3:
c6:f6:67:8b:bc:f7:5e:ea:a8:8a:2b:bc:3f:b4:cd:
19:d0:fd:88:1c:31:65:d2:50:7e:0f:c9:13:f0:b2:
2c:cc:57:ec:8e:0e:17:5e:97:d0:1c:7e:ab:a0:cb:
01:b3:ce:27:36:b3:03:bc:6d:be:b0:fd:9a:1f:af:
70:32:4d:91:72:1b:9c:ee:a2:23:4f:d8:ee:19:4b:
8d:99:e5:5b:eb:ca:9c:e8:d4:08:b8:20:5a:63:39:
a2:fe:d7:a1:76:36:97:dc:01:9d:13:c3:de:f0:25:
cf:a1:d0:cd:05:a2:95:38:eb:9b:fa:cc:70:84:d0:
05:6d:59:bc:cf:14:70:5a:ae:44:9f:76:bc:ba:15:
e4:95:e1:1d:52:96:b4:31:dc:02:af:eb:42:f8:17:
fd:69:ca:ea:41:f0:07:37:0b:f3:3d:53:0c:ec:ce:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9B:EE:35:94:C5:CA:4C:49:91:5E:F4:B8:9A:C8:91:DC:47:E1:2E
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b5:0b:2c:0e:f3:31:c9:5d:ca:d0:e9:8b:d5:d4:33:9b:e1:
2a:6d:6c:2d:20:98:2a:b1:69:67:63:d2:c0:ab:7c:a1:6a:f5:
0c:6f:4f:6a:10:39:2c:16:ab:e2:30:07:93:ce:4e:63:16:3f:
c4:93:33:ba:4f:d5:e9:2d:e1:97:25:20:75:36:67:06:0d:94:
2f:60:1e:5e:fc:da:4c:54:b8:98:b6:da:e6:7a:8b:f7:b4:1b:
95:41:29:c5:32:4c:63:74:3f:b8:da:fc:ae:b8:31:b5:b8:fb:
b9:ce:b1:c3:de:1c:28:4f:a6:40:be:93:72:62:8a:29:eb:bd:
37:fd:89:8e:7d:49:b3:25:ae:5e:49:f4:34:f9:25:15:88:13:
a0:83:9f:17:7c:78:62:b8:7a:14:f2:d0:52:bb:ba:6b:c0:fc:
88:2a:12:ff:79:e9:06:2a:74:fa:77:5d:d1:fd:01:b2:91:53:
eb:30:b5:03:ce:a5:ae:4e:5b:9a:94:12:99:e2:02:e2:2b:40:
6e:2a:b3:a7:25:cc:a5:c8:6d:57:eb:bb:07:04:cc:b8:59:6f:
05:0e:2a:0f:9e:e0:fe:75:e8:a0:e0:fc:10:b4:b7:13:a7:41:
c2:4b:46:ef:d0:09:7e:a9:31:c9:83:41:c3:ed:c5:c9:7c:6e:
98:7c:d2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:42:05 2026 by rpki-client