Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: 9aHCzchBWAEEwp6utcP3J4mI5olFTgZoifuWTJWcMHs=
Subject key identifier: D8:56:1D:09:07:C6:48:BC:E1:38:21:F0:B2:20:EA:FB:8C:04:F9:44
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 01A0C39FEA2824538FE9D61E28D7A401460E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 1A81
Signing time: Mon 21 Sep 2026 11:00:32 +0000
Manifest this update: Mon 21 Sep 2026 11:00:32 +0000
Manifest next update: Tue 22 Sep 2026 11:00:32 +0000
Files and hashes: 1: McIHeSgScebcIpkPT4THS1jto5Q.roa (hash: fdb99PeEhGhn7zMv+ymuqGVl1nC5qV/Bm2pOoVJfRTc=)
2: QOOLONPw0mL0zRM6xNCnZ8lu_HA.roa (hash: t5PPKx70RsbnvkvxFWuFNiVu0RY4KKSyPrpAVr06jsQ=)
3: lfZvGuublTghs87OLe3YBrTz9rw.roa (hash: 33L3jHKPnMn4vOjKfAOLDS9PGwe/ZxS6Z/D2j8Yjgis=)
4: mBsIhxGKE9P1VcdBmaDVaq-y2yg.roa (hash: FjrD6MxlebN9aOC6ecpbIK3eMGRCmF4PugIT8px8qes=)
5: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: d8PIQV6KQ7McbLja4sCwzogSUC9UlYeRyA3f+uv9iCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:ea:28:24:53:8f:e9:d6:1e:28:d7:a4:01:46:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Sep 21 11:00:32 2026 GMT
Not After : Sep 22 11:00:32 2026 GMT
Subject: CN=d8561d0907c648bce13821f0b220eafb8c04f944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:27:f9:5b:65:d1:66:15:96:b8:2e:2a:7e:
fa:a2:70:8a:35:7c:9d:22:ef:99:ea:75:b6:e6:7f:
13:89:19:d0:f7:b7:62:03:ca:ec:a4:5f:22:a1:fa:
1c:2b:60:09:d4:da:a9:2b:d1:a1:fb:09:61:02:b7:
f0:44:15:8a:4b:e9:23:8b:ad:dd:c2:24:fd:b0:70:
ba:21:80:36:e7:65:00:9d:10:89:20:3d:b6:30:3d:
6f:f8:f1:73:d5:eb:76:a9:37:b1:4f:35:c1:c3:d5:
d8:01:59:7b:c8:35:f9:02:a4:82:5d:e0:76:d9:73:
aa:45:2b:ba:70:01:cc:07:f8:a6:4c:a5:38:3f:84:
67:1b:6f:67:90:ba:b4:03:f2:a4:70:15:5a:50:00:
6b:59:86:b9:cf:0d:8e:67:99:6a:16:c8:0b:af:87:
e4:09:ee:bf:e5:67:8f:8f:e1:46:c6:56:72:36:61:
ec:e2:04:69:9a:7c:3a:53:ee:93:ca:11:b6:66:95:
a8:5a:b8:36:a4:1d:c2:60:18:bc:80:06:3f:73:84:
60:2d:08:b3:60:f7:83:e5:e1:4d:98:06:5c:72:00:
75:ea:9c:8b:08:4a:42:ad:0b:88:c1:95:3b:54:0d:
f2:53:b6:32:2c:9b:a7:4e:8a:ac:d6:53:f8:ab:26:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:56:1D:09:07:C6:48:BC:E1:38:21:F0:B2:20:EA:FB:8C:04:F9:44
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:86:d3:9b:94:20:7f:55:de:58:a1:65:84:7d:63:40:c7:85:
c6:32:76:5b:68:72:63:8e:80:50:5a:7e:13:7d:2c:59:34:c0:
ca:a6:96:4e:07:6d:b6:56:f6:55:1c:02:1c:50:78:ad:04:da:
b9:c8:6f:8e:69:97:65:8c:f6:4f:e9:6f:7d:44:ac:0c:68:c6:
55:b8:b7:9f:29:d6:bb:41:47:15:7e:a3:62:83:63:44:62:5d:
b5:02:33:fb:2a:85:f5:5c:ef:6a:2e:07:bf:9f:54:8b:a5:85:
8d:af:4f:07:da:2b:5f:f0:c1:0b:98:45:62:25:64:92:b1:ba:
1d:b7:41:c1:b9:7a:b0:99:11:73:b3:b3:1b:9f:e9:ac:87:cc:
af:9a:c1:59:c8:bf:e1:ea:fd:95:de:85:09:57:1d:97:54:35:
0a:32:4b:1c:88:ec:b3:84:d6:0f:f9:99:d6:c8:bd:dc:b4:9e:
81:fe:4f:58:ea:7e:01:eb:29:7d:d2:d4:97:06:ef:de:52:b6:
f5:bf:f8:55:b1:d2:50:b8:f2:b7:ad:05:e9:27:a8:87:e3:82:
97:c2:c0:86:c7:50:7d:b9:e4:64:d9:55:12:ce:0d:c9:dd:2e:
56:0b:3d:3b:eb:3a:a1:48:43:0a:05:12:87:d4:44:16:56:39:
2b:71:99:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:52:08 2026 by rpki-client