Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: ppsfLgHZCHVoNmU0P5HL3YQp9S41RWPxipiW45Enwzs=
Subject key identifier: BC:A2:8A:CD:53:C9:86:3E:3F:F9:69:C6:38:23:45:B9:E7:23:E7:B2
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 01A0DC84A56240F9286B4C98AD240281E369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 054B
Signing time: Sat 26 Sep 2026 07:01:15 +0000
Manifest this update: Sat 26 Sep 2026 07:01:15 +0000
Manifest next update: Sun 27 Sep 2026 07:01:15 +0000
Files and hashes: 1: 0sunuK8mYCHK4l0By1mDKNLTXQU.roa (hash: Bp/kxKZVCpRcoYpimQ/V45yUfQ2UHcCMtSwdBAO1PEo=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: RWpCXa9gCj61ErZrNZwMEVGHzCJQ8K01hrB5B6T94ZI=)
3: qxHzPA9O-8GpBxVTvr_9Ai6EB2w.roa (hash: GWiMwB08/vtuFeBPkac8MF40YEUg4abdNc1TrrvX9Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:a5:62:40:f9:28:6b:4c:98:ad:24:02:81:e3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Sep 26 07:01:15 2026 GMT
Not After : Sep 27 07:01:15 2026 GMT
Subject: CN=bca28acd53c9863e3ff969c6382345b9e723e7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:f8:2c:92:fe:ee:f6:fa:75:27:00:d0:ac:
48:e0:01:dc:d8:04:48:82:b7:29:11:81:6c:d3:b3:
23:44:33:61:3f:b9:49:b5:3f:93:27:83:0f:b1:d1:
92:a7:c3:32:05:dc:1b:50:36:f0:6f:61:4c:fe:b1:
d8:b9:75:6c:fb:5c:43:f7:f0:f5:02:f9:78:89:52:
bd:cc:32:fc:0e:46:fa:fa:0b:92:5f:73:f0:02:b0:
b5:9b:e0:1a:ed:4c:b1:7f:28:ce:19:1a:52:4d:ac:
b3:92:bb:e0:15:8d:d7:21:54:80:d3:4e:7a:8e:d8:
2c:76:d3:df:b2:cc:57:8d:8f:0d:3a:d9:b9:9d:86:
9a:71:2f:bb:bf:d2:85:bc:5e:4c:7b:07:e2:55:1e:
02:67:b5:49:fb:31:95:d9:0a:b8:ab:0c:f6:d6:4e:
96:cf:f8:2d:05:36:94:5f:82:01:22:ca:de:9e:79:
74:28:62:87:fb:b2:dc:dd:c5:77:bb:b2:7e:62:dc:
b4:1a:14:84:83:d1:57:97:63:73:82:b5:08:80:c0:
ff:16:48:c3:25:33:cc:5a:d9:b7:1a:fe:cc:02:26:
35:e9:c4:3c:4e:3d:88:24:5d:80:bc:98:68:48:a4:
86:6f:24:9b:1c:36:0f:3a:83:fe:d2:cb:e7:83:5f:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A2:8A:CD:53:C9:86:3E:3F:F9:69:C6:38:23:45:B9:E7:23:E7:B2
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:33:ed:17:4f:dc:94:f2:72:0b:31:df:7a:d6:3e:9a:80:15:
1d:55:6b:de:4e:e6:d3:0d:10:35:d9:ec:08:c7:5b:2c:de:cc:
af:3a:5f:f7:8c:12:2e:a1:c7:ba:b6:cb:3b:86:1e:7d:81:e1:
44:d1:ab:63:67:69:f1:bb:1a:c7:95:79:d4:f8:c1:ea:68:cd:
1b:b6:51:e8:6c:75:4d:ed:48:f6:af:e9:b0:10:0a:51:02:34:
cc:81:34:28:9e:07:c5:a2:5b:b9:4f:88:ff:16:fd:36:1f:70:
1c:1e:10:30:34:f0:ac:52:eb:52:5e:32:e6:0a:ac:8b:5a:fb:
22:70:52:ce:22:44:c8:85:1f:5c:fb:63:75:05:da:6e:3c:8a:
aa:c6:8f:ca:a0:f7:a5:91:32:89:c3:01:26:26:5e:b3:cf:d0:
31:b8:e9:13:2a:06:dd:1f:25:6b:61:f0:ec:a1:4a:10:1e:11:
c7:69:4d:bb:fd:02:97:6f:8a:47:c9:15:aa:30:e5:91:d1:80:
b9:7a:bf:ff:bb:4c:6e:3b:69:53:77:72:92:b7:22:98:b1:f8:
c4:c6:32:08:af:34:09:65:5b:66:af:d0:58:e1:4c:ea:61:c0:
c5:70:52:93:de:d1:f7:3d:d8:90:8c:ad:d1:10:52:51:fe:a0:
73:c0:3b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:39:17 2026 by rpki-client