Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: LYpR9FcuNYkqaHspjMsyrDnNsg4Zg/UixxMYeMMDz2w=
Subject key identifier: 38:C2:AD:A0:D5:03:7C:0B:08:2D:A1:E6:1C:BB:8B:31:2F:4E:CF:81
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 01A12EB36556E7ADE56B4E7DF5A078A8D328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 062B
Signing time: Mon 12 Oct 2026 06:01:11 +0000
Manifest this update: Mon 12 Oct 2026 06:01:11 +0000
Manifest next update: Tue 13 Oct 2026 06:01:11 +0000
Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=)
2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: b0oX5iuhFkFfzjVWiUkG0JegPhalL2ful0CYi9j29v0=)
3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:b3:65:56:e7:ad:e5:6b:4e:7d:f5:a0:78:a8:d3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Oct 12 06:01:11 2026 GMT
Not After : Oct 13 06:01:11 2026 GMT
Subject: CN=38c2ada0d5037c0b082da1e61cbb8b312f4ecf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:79:8d:4d:ed:9d:2f:a9:52:ad:6b:7e:25:
f8:26:8c:b7:75:d1:d5:40:7c:8b:de:56:62:af:39:
3e:04:26:d9:c9:ec:c3:b7:17:db:a7:d0:a2:24:95:
3e:09:fa:c0:b0:f5:20:eb:d6:41:33:87:ef:e7:ce:
65:c9:11:72:55:bf:aa:92:38:87:d5:bd:c4:b0:e9:
6d:5c:93:62:b9:25:bf:f6:e2:c4:46:0f:30:21:95:
d6:bd:fe:5c:dc:49:26:91:61:9c:f3:46:42:0b:9d:
df:6a:65:58:84:ee:17:01:58:97:1c:9c:2b:3a:c8:
2f:b1:47:da:e6:c6:24:d1:fd:07:9f:8a:5b:d8:85:
53:45:d8:da:9d:67:cd:88:25:02:fb:c5:b9:ad:f0:
db:ff:41:d1:33:e5:ed:b9:12:6c:c3:10:4b:5c:c3:
c2:91:5e:46:91:56:8c:cc:57:31:d2:9f:f9:82:b8:
84:06:6c:43:ae:fd:43:f5:6e:a1:c1:a9:06:6c:18:
70:43:f9:c3:52:1e:af:7c:3d:0b:19:86:e6:04:e0:
b1:c2:8d:56:15:e9:c5:62:00:0b:39:29:ef:77:e1:
9b:32:6d:a9:19:ed:28:c0:fb:42:d4:9b:46:a8:4c:
1b:37:6c:80:e5:c2:dd:30:76:cf:07:3f:09:fa:5e:
5f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C2:AD:A0:D5:03:7C:0B:08:2D:A1:E6:1C:BB:8B:31:2F:4E:CF:81
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:89:56:73:d9:94:ac:d5:e3:c4:c5:c2:98:82:cb:c5:4f:14:
cd:a6:a9:55:98:45:f5:9f:aa:9c:72:ca:ff:98:07:21:ad:9a:
83:05:7a:7e:a4:2e:1b:57:9e:01:91:9e:89:33:d2:8b:14:42:
3a:f8:05:7a:13:68:97:d1:46:88:47:58:ed:60:73:76:e3:99:
00:7b:87:0d:59:83:75:9a:01:09:e6:90:a8:c8:02:48:56:b7:
a9:27:fb:37:60:51:9f:65:c2:57:15:e3:bf:07:72:cb:9f:b1:
40:d9:b7:c0:ce:4f:fe:78:22:4e:5e:bf:21:45:c1:fd:af:47:
8c:88:50:6c:7f:12:fa:42:cd:2b:cc:58:76:65:aa:60:a8:bd:
05:92:16:58:51:b3:95:6c:a2:dd:34:13:4b:30:64:c1:6d:ee:
5e:26:17:a5:81:cd:1f:e2:2b:a1:b1:33:4f:d0:69:04:e1:14:
fd:13:15:06:21:75:33:69:74:69:37:4b:4c:1b:b0:96:5f:0c:
db:0d:63:f9:f2:31:43:e4:67:d6:ac:de:84:74:a2:e3:22:e8:
bf:19:35:8c:05:07:9f:3b:9f:91:19:18:0a:5a:8a:d8:86:75:
25:e6:0a:62:7f:e8:38:a8:97:f1:71:e3:60:7d:c9:a7:71:01:
0e:c0:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:23:07 2026 by rpki-client