Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
File: oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft (raw, json)
Hash identifier: ek/pYji0soYKmiCPa/aCjnBctOW/nbr3p3NFjNf8VRU=
Subject key identifier: 3C:96:64:DF:75:99:65:F9:67:9A:57:BC:AA:6B:98:F8:D6:36:35:96
Authority key identifier: A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
Certificate issuer: /CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Certificate serial: 01A0C8C611A6A23B131DD21CDE40430A12EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
Manifest number: 0186
Signing time: Tue 22 Sep 2026 11:00:18 +0000
Manifest this update: Tue 22 Sep 2026 11:00:18 +0000
Manifest next update: Wed 23 Sep 2026 11:00:18 +0000
Files and hashes: 1: aPHgHDs8wZHtsWjj-BGNDzZUqVw.asa (hash: xCblPYPS0g+4wFl3k4nN7Rdc1pcGx5xLzvzdxGTb7kU=)
2: oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl (hash: B61ZshmSTkaXHw7+Egred+P5Fjwh+pYKN6V2xPVG4Ac=)
3: rfnpKAqIl3YHBE0u0rKLog4npJ8.roa (hash: e2aXB5iCVJvKeAcAsidwehVczzB3FZGwEfrPbuvBxKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:11:a6:a2:3b:13:1d:d2:1c:de:40:43:0a:12:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Validity
Not Before: Sep 22 11:00:18 2026 GMT
Not After : Sep 23 11:00:18 2026 GMT
Subject: CN=3c9664df759965f9679a57bcaa6b98f8d6363596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:4f:c3:df:01:86:80:84:b0:2a:0a:b6:ae:
c5:10:fd:63:b0:59:04:a7:4c:16:51:e7:bf:44:0f:
b7:c7:46:ab:20:c2:35:9d:ab:78:d0:ed:01:06:8f:
40:b6:07:c2:69:d1:56:3a:f1:9c:71:d5:2b:06:66:
5d:c7:dd:b9:3e:f3:13:59:ea:53:98:22:3e:be:b6:
06:27:91:34:76:f8:29:e4:d0:94:3a:17:5a:43:3a:
d0:56:ea:24:13:02:6d:0e:64:3f:4c:20:4b:74:19:
56:47:ac:f4:00:60:f8:e3:53:05:d1:70:8c:e8:4f:
97:fb:15:a4:9b:20:de:b7:1f:e2:13:f7:96:97:c5:
57:84:44:7c:45:54:3d:a4:d3:00:41:77:90:80:f6:
6f:ce:7d:7f:39:cb:71:bd:54:fe:0b:af:c5:f4:2b:
f5:f4:e8:35:84:e6:31:2f:42:49:75:f6:d3:8d:77:
98:4e:4b:07:65:d7:07:02:16:ab:db:70:7d:3b:81:
07:8c:0a:b7:bc:ad:4e:23:32:95:6c:4d:cd:f5:7a:
2b:ad:dd:42:2a:eb:3f:1f:a8:d0:61:1b:ec:5e:59:
27:c2:21:47:6a:c7:ae:56:9d:4d:0f:c7:c6:68:9c:
33:5d:c8:5e:7e:88:f5:2d:c4:87:4c:95:f0:12:74:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:96:64:DF:75:99:65:F9:67:9A:57:BC:AA:6B:98:F8:D6:36:35:96
X509v3 Authority Key Identifier:
keyid:A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:be:f6:ea:91:b2:36:85:a6:0b:ca:be:b0:0c:91:bb:13:1e:
b9:4c:d3:df:bb:a1:e8:fa:2e:23:5e:78:b7:89:c5:12:4d:50:
ba:de:5d:70:eb:a5:59:d2:06:e2:02:a6:2e:3f:3f:cc:62:41:
b7:b1:64:ae:66:a8:23:b6:9f:1d:e3:ec:ee:b3:07:d4:a1:ae:
0a:04:9a:dd:1b:41:18:70:60:fb:28:60:3e:6b:d1:33:84:8c:
ea:f5:1e:2c:1f:69:ed:d0:53:ea:dd:af:ae:3e:37:7c:1a:7c:
04:5f:6e:25:2f:bd:3b:25:c3:ab:1b:84:3c:b5:a6:49:83:4c:
99:99:43:80:d5:e4:73:d7:90:87:31:f0:49:42:f4:d6:d4:13:
50:38:52:5e:18:24:84:64:09:67:cd:46:ef:02:95:63:be:4c:
bf:71:86:55:cf:7e:90:a3:84:ee:a2:3e:bd:ed:bf:c8:4e:54:
0a:a2:eb:8a:16:0e:78:fc:65:41:af:28:db:47:5e:ba:66:09:
0e:80:3f:3c:24:96:50:ae:a0:57:b1:d1:fe:12:76:3f:d1:1d:
f0:a5:53:5a:d0:df:6b:52:d5:15:70:9e:bf:57:26:e4:99:cd:
13:27:fb:2b:d8:04:b1:3c:cb:53:4d:69:fb:4d:db:87:ec:c0:
6b:fa:98:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:26:51 2026 by rpki-client