Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: bM8PzSCcsHHMiQmEPkhvt7Em3VAWsTCtdXrR/wh/FZ4=
Subject key identifier: F5:A9:20:29:71:CE:10:BF:77:E2:7D:97:EC:9D:C2:17:E3:FD:E8:DA
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 01A0C4E9BAD5DC0FAE351AF194A6325ADD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 17:00:47 +0000
Manifest this update: Mon 21 Sep 2026 17:00:47 +0000
Manifest next update: Tue 22 Sep 2026 17:00:47 +0000
Files and hashes: 1: acv-v2eHqlrCvjloaRGiMlCidZI.roa (hash: oC/VXdmhm0cHY+VKvZYv7E0OaLtC7J/ULHsMcrTf+MI=)
2: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: hWavibbzIEYJ/r3mgv/ndeQbNzeFzgznUKPRRKjaBrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:ba:d5:dc:0f:ae:35:1a:f1:94:a6:32:5a:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Sep 21 17:00:47 2026 GMT
Not After : Sep 22 17:00:47 2026 GMT
Subject: CN=f5a9202971ce10bf77e27d97ec9dc217e3fde8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:9f:c0:11:e2:d8:e3:99:df:3d:74:99:9b:
56:4c:5d:1e:73:3d:8e:c9:1a:83:05:0a:e4:99:9e:
61:25:3b:d1:1c:ef:5a:5a:bf:6b:cc:d4:22:df:02:
10:cf:d6:43:93:5c:2e:5b:5d:4f:3b:34:c0:93:e6:
13:02:50:6c:0c:89:3d:a6:de:b0:70:5e:37:45:b8:
12:ac:a8:c3:5c:3b:84:9d:9f:29:00:d8:ca:93:22:
ff:c9:85:35:0c:11:2d:4f:f4:af:9d:5e:cd:ee:98:
47:43:12:8a:56:98:33:b6:7f:b6:f0:15:53:d6:ab:
9a:f2:c3:b6:50:b5:8d:2c:f1:c6:8f:94:a1:d3:61:
54:29:d6:94:2f:74:d8:b1:94:1c:df:09:f8:f0:75:
bc:e0:73:8d:1e:93:ce:e2:02:58:e1:03:0f:0e:6d:
69:54:40:fb:69:e1:f6:b7:47:54:bf:b0:7b:4f:33:
87:d2:ef:34:72:f9:c7:60:fe:10:d1:7f:9a:a0:ed:
c3:9d:e1:da:d2:9a:29:56:2c:44:45:1f:1f:7a:fe:
38:85:05:fb:a8:74:e9:98:4d:39:6d:bf:e1:a8:c4:
4d:df:18:33:ce:2f:a7:b0:d6:34:25:e8:97:02:86:
9a:98:6c:f2:de:7c:83:db:68:e0:f1:69:d9:fa:2c:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:20:29:71:CE:10:BF:77:E2:7D:97:EC:9D:C2:17:E3:FD:E8:DA
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:03:1d:a1:43:e1:d6:22:13:0a:67:85:b3:d1:ca:35:4b:7a:
f5:f0:fc:73:e5:e6:18:ae:76:36:3a:6a:63:59:6f:de:f0:1e:
fc:ed:b2:ee:23:b9:5b:34:4d:de:cd:98:97:3c:c1:6f:59:18:
c3:bf:72:34:b5:ef:c4:20:ff:35:6f:f9:38:3d:8f:13:5d:54:
51:fa:d6:26:2d:d8:3b:a5:d2:7a:76:77:92:71:2b:c9:97:a1:
7d:31:de:1a:6c:22:d5:47:cd:54:44:27:a8:79:92:ae:30:ba:
d4:c7:9f:9c:38:87:34:14:af:c4:14:83:6a:45:f8:3a:34:6a:
16:16:15:f1:16:29:68:d4:b9:5c:7c:89:ad:37:91:6e:ab:96:
c4:5a:92:71:b3:7e:b4:d9:d6:7e:52:15:d3:9c:c0:3f:27:9b:
f3:96:7a:c6:1b:0f:7b:33:07:c6:ab:36:43:15:0d:ca:e5:2e:
84:8a:a7:d6:76:3c:d2:64:62:f6:8a:1a:94:38:e9:44:73:2a:
7b:f3:e4:68:b8:95:ad:95:96:39:e7:06:66:3f:82:d3:54:78:
b9:0b:26:ce:73:3c:a1:47:7e:f0:f1:ce:df:9e:a6:9b:a9:cc:
b3:ce:2a:e6:58:be:3c:22:2c:92:cd:ef:ad:02:19:56:e0:f3:
e7:2b:58:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:19:27 2026 by rpki-client