Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.mft
File: Oi05yYtAVrNsu_aIXo_dblcPzIE.mft (raw, json)
Hash identifier: qvZD8kUUpXCqJlae5MHL/U5d+NI+isEShiUEvi9NAus=
Subject key identifier: D3:6C:E9:94:D1:A1:23:41:EA:45:1A:2E:CD:6E:57:B0:76:4E:BE:13
Authority key identifier: 3A:2D:39:C9:8B:40:56:B3:6C:BB:F6:88:5E:8F:DD:6E:57:0F:CC:81
Certificate issuer: /CN=3a2d39c98b4056b36cbbf6885e8fdd6e570fcc81
Certificate serial: 01A0C3A00A6BC4E37238EE2FA097CE357356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oi05yYtAVrNsu_aIXo_dblcPzIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.mft
Manifest number: 5A
Signing time: Mon 21 Sep 2026 11:00:40 +0000
Manifest this update: Mon 21 Sep 2026 11:00:40 +0000
Manifest next update: Tue 22 Sep 2026 11:00:40 +0000
Files and hashes: 1: L8ht9E8DcXzWCPeSSyyZ36n8uB0.asa (hash: aLGxu4UYr6iu82UJ+37AS1m8rImlWGsXHrpCEYFbFSk=)
2: Oi05yYtAVrNsu_aIXo_dblcPzIE.crl (hash: UmPHu2Eyb+OL+X+w0vte3CQTM/deF9oyP6BWRZGznO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oi05yYtAVrNsu_aIXo_dblcPzIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:0a:6b:c4:e3:72:38:ee:2f:a0:97:ce:35:73:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a2d39c98b4056b36cbbf6885e8fdd6e570fcc81
Validity
Not Before: Sep 21 11:00:40 2026 GMT
Not After : Sep 22 11:00:40 2026 GMT
Subject: CN=d36ce994d1a12341ea451a2ecd6e57b0764ebe13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:a3:1c:ed:75:fa:d8:e0:cf:e9:15:1e:cc:
28:ae:55:63:9c:ee:66:e7:cf:68:7b:02:c3:86:2a:
d2:ea:b7:c8:20:8c:eb:8f:ac:af:c7:0e:c5:0a:b5:
94:71:e5:03:b4:9f:e3:cb:b2:71:e2:24:5c:33:14:
aa:b5:4d:92:bb:af:03:d3:d6:5a:f5:5f:fe:8b:c2:
19:1d:6d:bd:6f:c0:e1:d2:2a:1a:59:f8:ca:dc:36:
44:e6:90:12:16:e7:ab:3d:2b:82:ef:b3:6b:fb:81:
ab:df:e7:ee:d2:7d:35:ce:9c:d3:35:52:92:2a:01:
f9:4d:9b:76:5c:e3:02:c3:a6:e2:e8:c0:16:37:16:
bd:7f:5b:d6:d9:e6:7f:84:86:fd:72:68:ac:c6:ac:
b5:61:ba:32:94:7a:02:6f:aa:5f:3a:d9:7a:81:56:
e2:c2:8a:b7:cc:a9:bc:bc:25:aa:9a:fc:d9:b6:a4:
b8:52:0d:81:87:11:cd:fe:17:e2:3a:5d:b2:06:37:
22:2e:a1:99:22:22:2f:cf:12:10:da:d6:fe:dc:e1:
7a:ee:a9:8b:a5:e1:53:0e:56:1e:f8:f0:f8:bc:6e:
d3:e8:53:c6:b2:c0:d2:04:b0:12:d9:35:22:9d:5b:
1a:40:5a:3a:08:ae:3f:97:0a:7f:e9:33:be:53:9b:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6C:E9:94:D1:A1:23:41:EA:45:1A:2E:CD:6E:57:B0:76:4E:BE:13
X509v3 Authority Key Identifier:
keyid:3A:2D:39:C9:8B:40:56:B3:6C:BB:F6:88:5E:8F:DD:6E:57:0F:CC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oi05yYtAVrNsu_aIXo_dblcPzIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e9:72:02:0d:27:e9:00:4f:23:31:07:1e:06:54:32:ec:24:
ee:30:05:0d:18:07:5b:0a:b2:c1:c3:9f:6d:5c:b5:54:18:0a:
5b:cf:38:53:d0:32:d9:af:a1:e8:57:69:40:ef:17:1e:e7:5f:
bf:e2:cc:ba:3e:43:75:62:d5:a5:5b:a8:ef:92:8f:8f:43:19:
ef:f7:36:35:0a:2a:23:58:12:67:76:75:a1:fb:ac:46:18:ce:
ff:a8:1d:e3:f6:0c:e4:75:88:53:43:aa:3e:e6:9c:ec:1e:a3:
b3:a1:9f:1a:8d:90:1a:0b:f6:61:bc:1c:90:fb:87:00:25:a0:
94:85:83:2a:b7:e2:8d:82:6c:68:bc:17:ab:ec:29:f3:d3:6d:
bc:1f:77:0e:9a:f9:e3:ea:b7:72:84:d1:95:a9:db:7f:08:cd:
d3:8b:2e:21:7f:52:b4:75:54:e4:49:ea:f2:07:d5:3c:6b:a1:
87:4b:1d:aa:35:03:ef:71:8a:50:38:e2:2b:1c:5b:1d:fc:65:
bb:d0:41:a0:02:65:63:74:47:13:89:7d:51:d6:17:a8:71:73:
48:da:f6:59:34:e9:d5:6b:91:8a:93:b5:49:a2:22:19:2d:2a:
90:db:18:06:ee:15:49:87:27:0b:f9:76:3d:35:95:ec:54:e3:
03:3a:5d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:55:00 2026 by rpki-client