Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
File: oLwReyvH4FrFwOs1FaF0GBMP3oI.mft (raw, json)
Hash identifier: XscvDAjJnDgwZ13aBfJlJU9nH4T4wddilw36XlafTVg=
Subject key identifier: 97:A3:AF:D3:F7:CA:BB:DE:4A:0B:3E:15:15:CD:39:D2:85:4C:9C:34
Authority key identifier: A0:BC:11:7B:2B:C7:E0:5A:C5:C0:EB:35:15:A1:74:18:13:0F:DE:82
Certificate issuer: /CN=a0bc117b2bc7e05ac5c0eb3515a17418130fde82
Certificate serial: 01A0D012F1F2D81E6EAE6F2E02E8C2B7CF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:37 +0000
Manifest this update: Wed 23 Sep 2026 21:01:37 +0000
Manifest next update: Thu 24 Sep 2026 21:01:37 +0000
Files and hashes: 1: MMGfobkcPvFzzP7MQZnUAsVVZp8.roa (hash: WGW0WSapBDRofWXt8DtNDTEwEorTNTg8AzDt4Ue2MDI=)
2: oLwReyvH4FrFwOs1FaF0GBMP3oI.crl (hash: Ig55AemIiRhEerq0iAJGWiesx3EjKj/QxAnqiHet6jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:f1:f2:d8:1e:6e:ae:6f:2e:02:e8:c2:b7:cf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc117b2bc7e05ac5c0eb3515a17418130fde82
Validity
Not Before: Sep 23 21:01:37 2026 GMT
Not After : Sep 24 21:01:37 2026 GMT
Subject: CN=97a3afd3f7cabbde4a0b3e1515cd39d2854c9c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:ee:4f:50:b2:a9:99:71:46:83:23:f3:00:
da:92:fc:5b:0a:c5:e4:47:a7:9b:ba:61:a3:40:27:
d6:61:7c:95:0d:5f:c6:1b:10:79:ea:1c:20:23:59:
c9:6e:20:45:27:b8:c1:01:14:a6:53:16:5f:85:dc:
04:5a:d5:1d:1e:ee:6d:95:0b:5e:f1:d2:5c:df:d5:
2f:c7:48:33:06:d6:a0:85:8a:c8:ac:10:a8:3a:74:
e6:1c:f5:d8:b0:0c:52:b5:25:47:70:09:ff:3f:52:
77:f5:37:b0:16:be:57:1d:d8:d7:4d:e1:4d:6d:3e:
2e:d4:8d:12:df:6d:f3:ab:57:4e:05:71:83:27:0a:
9d:dc:f2:a0:08:18:f6:63:eb:65:f2:7e:68:f1:66:
6e:e4:4b:17:aa:d0:65:9d:6f:6e:9e:24:99:f4:c1:
eb:52:c4:18:b6:bf:b1:44:bf:64:58:c8:2f:ca:28:
fa:11:ee:ea:0e:7e:06:d5:ef:02:8c:88:15:b4:fc:
09:46:51:97:a4:71:9d:3b:e1:ea:87:b8:c0:e6:75:
8b:04:d2:3f:de:4c:fe:a7:a0:3d:b2:a5:4f:53:6c:
05:b2:e2:81:bb:2a:84:98:43:7b:df:64:59:8b:f9:
d1:02:f1:bc:2a:f5:8e:05:ed:3c:32:34:a7:d7:7f:
b5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A3:AF:D3:F7:CA:BB:DE:4A:0B:3E:15:15:CD:39:D2:85:4C:9C:34
X509v3 Authority Key Identifier:
keyid:A0:BC:11:7B:2B:C7:E0:5A:C5:C0:EB:35:15:A1:74:18:13:0F:DE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:24:1f:dd:69:ca:cd:d5:10:fc:d6:35:0f:0b:68:4a:0c:fb:
9c:7d:7b:d5:9a:9c:31:91:0f:63:4d:18:25:83:5a:ea:16:9e:
73:2a:6b:65:d7:75:66:b0:78:77:c1:f1:90:c1:2b:19:28:ee:
2c:45:b2:bd:27:6f:cd:1d:72:e5:dd:88:bb:d3:65:bc:d0:a9:
d3:2d:0f:3f:b1:13:53:ff:c9:df:3f:f5:fa:71:18:2c:cf:0b:
26:96:29:5d:71:b2:10:99:5a:6e:a6:eb:19:b7:4e:7c:9f:9c:
dc:00:4d:68:fa:58:d6:da:a5:c6:a3:e8:12:c3:39:56:cb:76:
0c:a5:97:23:ca:1b:41:71:ef:c1:7b:9f:88:5f:cb:90:88:9b:
d1:04:17:0f:dd:99:56:3e:01:f9:12:93:ab:52:dc:e0:06:96:
f9:33:30:a1:76:16:ae:17:98:db:b7:67:db:3a:6c:01:8a:b9:
cf:1a:46:d5:fa:f3:50:0f:71:21:a6:f8:e2:dc:ad:fc:67:51:
b0:21:18:ab:08:ca:bd:ea:27:6f:6d:70:07:d6:a2:7e:e9:19:
88:9a:b1:b5:96:3b:86:ae:50:2f:66:87:5a:9e:ff:9f:0b:1c:
6a:9f:f1:26:fb:67:30:f6:ef:57:34:b7:ad:9b:eb:5a:64:76:
ea:d9:88:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:18:04 2026 by rpki-client