Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
File: oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft (raw, json)
Hash identifier: CKiH8vR03nX0BXlhxJQEIvvTl1en8H/PSj/ElnSHyCQ=
Subject key identifier: 5D:3A:7D:A5:C8:4E:28:7A:3A:B2:31:FB:77:A7:69:CF:49:86:4D:BD
Authority key identifier: A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
Certificate issuer: /CN=a06bd308f743288af4cc2119973ec8dc028937f0
Certificate serial: 01A0C3D685F9C68FF2ED75DF7AEDDEF455C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
Manifest number: 01D5
Signing time: Mon 21 Sep 2026 12:00:11 +0000
Manifest this update: Mon 21 Sep 2026 12:00:11 +0000
Manifest next update: Tue 22 Sep 2026 12:00:11 +0000
Files and hashes: 1: TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa (hash: XJE7IcrW6rhvGDyAahOo4XtEMNvbsvjLkV3AEh+8sYU=)
2: oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl (hash: ewnJn/ExG+HMAyTIP+luctBO2mMAS+5BQ4MNl09ptIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:85:f9:c6:8f:f2:ed:75:df:7a:ed:de:f4:55:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06bd308f743288af4cc2119973ec8dc028937f0
Validity
Not Before: Sep 21 12:00:11 2026 GMT
Not After : Sep 22 12:00:11 2026 GMT
Subject: CN=5d3a7da5c84e287a3ab231fb77a769cf49864dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:16:c2:20:1f:0c:16:fe:a1:fb:6e:76:5d:
51:95:17:e5:85:57:fb:d9:4b:aa:71:f0:85:f7:2b:
6e:52:8a:d2:c2:77:94:ac:51:8b:f9:79:f0:04:df:
1d:a7:65:61:4f:d7:36:37:af:5f:33:b4:27:6a:94:
10:3d:c4:11:b5:0c:97:71:6e:a7:61:75:4e:ce:1d:
bb:7a:52:19:2e:4b:0f:93:07:59:b7:84:56:c3:c9:
e5:50:d5:40:d4:ee:94:cd:e0:e6:0c:a6:51:11:75:
77:31:8c:10:a7:e8:e5:5e:98:83:dd:4f:9c:2c:94:
70:b8:a5:70:e7:ec:ae:8a:5b:cb:22:45:aa:e6:57:
56:a6:88:4f:e4:57:f1:8e:dc:3c:98:9a:3e:aa:69:
cf:f0:c7:d3:83:ca:0a:09:19:99:b8:52:97:0f:68:
55:de:c0:8b:b3:95:52:6e:2a:72:9f:8b:a6:f6:7a:
3c:a1:ad:8d:36:4c:87:87:14:31:75:ba:54:dd:4d:
0b:9b:a8:2d:cd:da:fa:f0:ee:76:38:48:d0:59:2e:
70:00:2c:91:2e:67:15:80:d2:1e:1f:67:c1:54:18:
27:72:a5:f2:3c:c7:d7:15:d6:37:e0:d1:5d:0f:0d:
da:5f:89:e8:d7:21:17:93:c2:a2:53:e5:af:5b:29:
75:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3A:7D:A5:C8:4E:28:7A:3A:B2:31:FB:77:A7:69:CF:49:86:4D:BD
X509v3 Authority Key Identifier:
keyid:A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e3:f8:b5:aa:ba:b3:0a:dd:16:fe:11:ca:fa:d7:55:66:2e:
b8:8a:a1:ff:a0:86:85:38:8a:d2:a4:d1:2b:08:0d:09:fa:bd:
32:3d:ab:f1:de:62:e9:2a:a5:33:dd:76:a4:27:cd:61:21:5c:
9a:67:12:5b:30:fb:d9:bf:85:d9:82:05:e8:77:7e:30:53:98:
a5:56:d3:73:49:e3:67:6d:61:4c:01:87:e7:08:56:f1:c4:f6:
6a:a9:1f:e0:ed:26:74:fb:ed:9c:37:87:77:15:66:0e:bb:7b:
27:0d:d9:7f:38:a2:71:2f:0a:72:39:74:6a:db:9e:87:93:eb:
df:19:99:fd:4f:39:72:93:12:de:ed:e2:bb:59:7b:20:0d:01:
57:21:8e:96:63:a0:63:da:c9:7d:5c:cc:09:cf:4f:56:00:a2:
60:a5:61:02:b4:b8:0e:f8:0c:0c:62:18:15:22:71:9e:e0:49:
6a:e2:53:61:bb:5a:1c:f8:c9:d1:cb:3c:44:bb:f1:c6:0c:9f:
5d:e1:b2:6c:15:e6:ea:33:02:70:51:d1:04:29:46:0b:bd:05:
7f:eb:82:2d:58:d3:2e:f5:3f:4b:7c:6f:20:d4:bf:2e:3b:5a:
39:c3:86:ff:16:fa:09:b4:3c:d4:45:b6:39:46:6c:e8:6f:b0:
78:7b:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:14:14 2026 by rpki-client