Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
File: 0oig9ya30Z93nrHaEq3aNfze1fE.mft (raw, json)
Hash identifier: //xvAAuKm3zN3RjrtMHmd7EZDT+xtBDMAyK5cNGuTGw=
Subject key identifier: B5:9E:B3:24:D0:D7:1C:F5:2C:E1:38:7C:97:3E:62:DF:49:FA:C0:3C
Authority key identifier: D2:88:A0:F7:26:B7:D1:9F:77:9E:B1:DA:12:AD:DA:35:FC:DE:D5:F1
Certificate issuer: /CN=d288a0f726b7d19f779eb1da12adda35fcded5f1
Certificate serial: 01A0CA469BEE25DBE50AAB0E95BE0DC8BFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:00:19 +0000
Manifest this update: Tue 22 Sep 2026 18:00:19 +0000
Manifest next update: Wed 23 Sep 2026 18:00:19 +0000
Files and hashes: 1: 0oig9ya30Z93nrHaEq3aNfze1fE.crl (hash: +TJJGwj2oEKHzp3M4uiSvZ1YAEwXzCrJrQBzZnNyE9c=)
2: lxI2bP-RbOseqiIeg4ll7U67NmA.roa (hash: 9Z7qOwjkxiFujHt3P1/LDgIN/VCVJkJA0KjjP9BQQwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:9b:ee:25:db:e5:0a:ab:0e:95:be:0d:c8:bf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d288a0f726b7d19f779eb1da12adda35fcded5f1
Validity
Not Before: Sep 22 18:00:19 2026 GMT
Not After : Sep 23 18:00:19 2026 GMT
Subject: CN=b59eb324d0d71cf52ce1387c973e62df49fac03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:2d:98:70:9b:59:a1:42:15:e7:73:f8:7d:
95:8c:f4:11:bb:59:62:4c:a0:8e:99:4c:45:56:2c:
85:c9:c6:ab:f0:f3:34:58:7b:60:c8:8f:91:65:6a:
81:3e:eb:f9:32:49:b8:59:d2:39:86:a3:64:f8:38:
5f:15:ea:45:96:55:8a:d7:9e:ae:01:2a:10:3c:96:
ee:5a:6c:8c:cc:9a:49:59:a3:51:94:09:74:30:e4:
09:ef:f9:87:2f:da:b8:ad:7c:1e:8e:68:6a:d7:2a:
07:2f:64:be:ee:84:76:a9:e8:a3:9b:26:c4:41:f2:
6e:e0:a9:5b:53:bc:0c:94:34:d8:59:b3:2e:10:ce:
16:69:4a:c6:03:37:4a:92:c3:e4:8a:97:23:d8:2c:
83:37:e0:55:6c:a3:c6:0b:b8:85:94:aa:da:48:40:
d9:b2:ba:da:13:bf:a9:11:ee:f0:81:71:13:97:c6:
27:fc:4c:86:dd:68:83:12:b2:d6:05:48:8f:2c:05:
5c:f9:9e:3e:92:01:33:85:db:79:50:aa:60:59:0d:
59:90:93:5b:71:2d:61:30:5c:9a:3e:1c:bb:be:49:
df:e5:15:59:4b:c0:43:43:e1:6f:56:32:b7:87:80:
bd:a2:05:17:a1:fa:8a:bb:c9:2f:c9:35:cb:73:ef:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9E:B3:24:D0:D7:1C:F5:2C:E1:38:7C:97:3E:62:DF:49:FA:C0:3C
X509v3 Authority Key Identifier:
keyid:D2:88:A0:F7:26:B7:D1:9F:77:9E:B1:DA:12:AD:DA:35:FC:DE:D5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:52:f3:6d:ce:25:f7:0f:69:60:ee:f0:53:a9:e1:cb:7a:03:
93:5a:90:c4:1b:3b:6c:31:3c:15:75:4c:1a:84:ed:ea:8b:b8:
7e:84:23:7a:1f:d0:3c:7d:f8:d5:ca:b1:c9:75:71:85:57:ab:
fe:92:83:66:2d:96:d3:6f:5a:52:49:55:71:6a:0b:bc:bf:13:
80:45:54:79:03:24:ee:9f:01:6e:61:ac:be:34:00:d6:94:15:
75:63:f8:68:86:ee:5a:c9:1f:ca:ad:9f:7f:98:5b:e8:9e:78:
13:7d:d5:f5:f1:17:16:c0:1a:55:f8:51:7a:07:d9:0f:61:17:
61:38:00:67:03:b8:79:7f:67:f0:47:d4:c3:4d:dd:a9:54:8e:
df:5c:2f:5b:01:5c:74:92:44:f4:51:57:5b:14:e2:e6:23:9b:
02:74:bb:86:50:ad:b9:6a:fc:1d:de:b3:b1:2a:8b:04:a2:e7:
2d:aa:74:99:88:c4:89:aa:a9:4c:81:a6:5a:33:37:77:61:b9:
7f:ff:58:bc:b5:72:de:85:d3:14:57:c7:c1:78:9a:c6:31:02:
41:62:6c:07:26:1d:e2:4e:bf:11:78:96:10:ad:08:16:ab:2f:
60:9c:3c:c4:aa:9f:35:99:f9:40:5b:36:54:30:2d:66:82:73:
3e:77:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:50:14 2026 by rpki-client