Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: VXAB8HJglscgdVBOEkW2mUfr7fZQ0RELwhowRQgm9Kw=
Subject key identifier: 00:65:60:D7:B7:4B:A5:65:FF:CE:FC:FD:73:DD:0C:E7:B6:8F:F2:4B
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 01A126C3139F85EFE54B254D2F57FC39737C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 17:01:21 +0000
Manifest this update: Sat 10 Oct 2026 17:01:21 +0000
Manifest next update: Sun 11 Oct 2026 17:01:21 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: dD4hPqRIwuS4gPv3V1YdoeN3zWT34J3PNTPzl6b4hwk=)
2: nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa (hash: WwxgQJEoxT9RlD+HkKWEjQjejeBr0IIFvMv1CfM5j4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:c3:13:9f:85:ef:e5:4b:25:4d:2f:57:fc:39:73:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Oct 10 17:01:21 2026 GMT
Not After : Oct 11 17:01:21 2026 GMT
Subject: CN=006560d7b74ba565ffcefcfd73dd0ce7b68ff24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:4e:a3:ff:1d:e1:81:0d:aa:95:2b:74:4f:
bc:36:f2:0f:da:89:3c:47:a3:f9:d7:fb:1e:2c:b0:
e0:ba:13:8a:34:f8:74:30:b9:86:dd:f1:84:eb:2f:
09:d8:74:8f:55:87:c9:c4:d3:f7:53:59:a6:90:72:
1e:a7:60:c5:fb:27:62:92:24:8f:a2:61:63:57:bd:
2d:95:19:52:25:6e:d3:34:9d:20:88:01:d4:fa:09:
bb:5b:b4:76:c5:e4:a5:2f:14:93:eb:e7:bc:00:2a:
00:61:c3:1e:8c:88:95:5c:0a:67:85:6b:72:62:11:
a6:9a:57:e7:9c:db:6e:d5:52:39:9e:4f:2f:61:f1:
f2:83:a2:17:d8:f5:dc:40:f1:df:15:2e:0f:c6:84:
1b:4c:48:f0:06:7f:9e:e5:b8:14:08:65:99:14:45:
9a:96:49:1c:08:0d:2c:52:00:cd:8f:f2:ee:99:6d:
8f:d1:99:28:9e:07:3e:0c:61:f8:3d:0a:32:58:6f:
49:72:dc:0a:dc:d4:25:59:b6:a0:16:7e:fc:2e:f7:
bd:89:3f:f5:92:ea:2b:4d:48:1b:6b:5b:c4:6f:6e:
4a:b3:d0:8c:15:ac:5d:93:e2:af:e8:6a:29:c4:b2:
f1:e9:b5:7d:7d:d2:59:a8:b2:a9:f5:f5:23:91:23:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:65:60:D7:B7:4B:A5:65:FF:CE:FC:FD:73:DD:0C:E7:B6:8F:F2:4B
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:87:22:4d:ec:8e:0d:c7:e8:93:d5:53:57:c6:de:f6:c7:61:
42:6c:66:43:50:78:3c:d1:7d:e2:66:5b:0c:97:de:7b:e6:ee:
98:37:ea:f1:c2:08:cc:cd:1c:4c:c8:eb:cf:2c:11:d8:98:41:
aa:62:ea:40:b3:96:67:7d:51:36:1a:9e:27:24:ad:47:e9:c2:
33:60:2a:00:65:c0:e6:d1:f0:68:06:29:ab:1c:35:ab:69:a7:
b0:51:30:c6:ee:da:b2:14:72:75:57:27:ab:72:be:e2:20:00:
75:91:3d:1d:f3:3d:e6:bf:22:6f:48:d2:e2:d6:d9:5c:d2:3a:
4c:90:df:a2:20:d4:5a:32:a7:7a:68:c3:77:58:ed:a6:74:16:
6a:17:5a:c7:2f:7f:6f:a2:c6:46:ab:6b:61:b4:c6:55:fd:7a:
ce:c0:be:57:f9:26:43:3b:93:de:42:d2:9e:52:28:a7:81:c4:
27:d8:9a:28:f5:33:56:79:65:b8:28:14:cd:b3:0f:5e:27:c9:
43:de:ee:fe:ea:24:eb:a5:b7:3b:37:98:9f:cf:78:07:86:21:
35:86:76:e8:08:c7:47:a2:8a:df:cd:68:39:06:6c:db:96:6d:
bb:1d:c5:06:f2:54:8d:76:d0:df:7d:d2:89:d1:1e:15:3c:10:
65:fb:c9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:02:32 2026 by rpki-client