Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
File: oCbLucfoHNxJ0b6zRtutyR80rsE.mft (raw, json)
Hash identifier: /1NrZwPvF75cHSKFIUVqADwIyy6R5G5apzt/ebKF+aY=
Subject key identifier: 51:5B:FE:CE:BD:E6:68:A4:13:4B:0E:C0:E5:C1:17:4A:7E:D1:EE:B0
Authority key identifier: A0:26:CB:B9:C7:E8:1C:DC:49:D1:BE:B3:46:DB:AD:C9:1F:34:AE:C1
Certificate issuer: /CN=a026cbb9c7e81cdc49d1beb346dbadc91f34aec1
Certificate serial: 01A0D5DE129FE4C77F20B43571D5BC84BF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:35 +0000
Manifest this update: Fri 25 Sep 2026 00:01:35 +0000
Manifest next update: Sat 26 Sep 2026 00:01:35 +0000
Files and hashes: 1: jKeaW7g3-vwDVoHOZK2KpCN1sWA.roa (hash: sqHWrvNe0MvxI2kDDh6irgL9TZbFavXwZmxBezSbKWU=)
2: oCbLucfoHNxJ0b6zRtutyR80rsE.crl (hash: I55WcEIQ1LfxX2JIHBKwRnRxl72D1dCHZeBCuvJi9J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:12:9f:e4:c7:7f:20:b4:35:71:d5:bc:84:bf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a026cbb9c7e81cdc49d1beb346dbadc91f34aec1
Validity
Not Before: Sep 25 00:01:35 2026 GMT
Not After : Sep 26 00:01:35 2026 GMT
Subject: CN=515bfecebde668a4134b0ec0e5c1174a7ed1eeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:a5:aa:f1:b8:42:2e:43:f7:1a:2c:88:92:
11:ce:24:2f:67:30:38:2b:25:11:23:24:9c:14:1b:
99:3b:40:2f:6a:23:d0:42:07:a8:39:55:2b:2e:47:
cf:30:ce:27:67:73:52:9c:bd:82:ed:53:01:20:75:
06:54:2e:8f:a6:58:59:c4:4d:f6:a1:b6:24:f9:4b:
b3:67:96:80:d8:af:39:ed:28:96:cf:14:90:10:62:
4f:c1:dd:e4:6a:a0:79:80:4a:11:ca:b6:c0:5a:69:
24:c1:fa:25:46:f9:08:46:90:39:02:db:c2:8a:29:
08:a0:44:1b:d0:9e:8a:f6:32:82:97:09:d8:1e:8a:
60:7a:16:25:7b:97:1e:1a:f7:db:06:b6:0e:c5:ce:
67:1c:84:13:60:ab:e6:3a:87:bf:1d:12:b6:a2:09:
8a:b0:0c:4a:52:95:3f:b1:31:59:ad:77:a1:1e:e5:
f8:ec:23:ea:49:eb:30:bc:43:85:43:be:f1:79:0f:
fa:a8:dc:d9:3c:94:9c:a7:d8:2d:3d:9d:67:7e:06:
3a:09:df:53:32:33:9e:16:8c:4b:d5:b9:8b:16:b0:
7a:3c:d3:59:be:15:25:91:c1:6b:09:62:1b:8b:fe:
de:48:1e:c5:0d:dc:be:20:78:44:07:f0:5c:c1:1a:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5B:FE:CE:BD:E6:68:A4:13:4B:0E:C0:E5:C1:17:4A:7E:D1:EE:B0
X509v3 Authority Key Identifier:
keyid:A0:26:CB:B9:C7:E8:1C:DC:49:D1:BE:B3:46:DB:AD:C9:1F:34:AE:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2a:9c:ae:24:d6:a6:59:47:78:2e:91:6d:2e:83:3f:e2:d7:
c4:27:1a:03:40:41:83:75:03:6a:ea:53:fc:e5:dc:40:d5:f9:
5e:99:c7:eb:bc:ea:e5:4a:e6:66:56:ee:f5:0d:d0:c8:80:ef:
4a:41:a7:59:7c:12:fd:b0:3c:f0:0b:3f:15:a6:8f:28:91:6e:
b3:01:64:c5:c6:90:c4:9d:d8:d6:43:61:dd:a2:0a:6b:fc:c1:
d3:95:68:a3:c2:84:77:31:20:82:fc:4f:aa:58:d4:93:7f:f3:
14:0f:8e:86:eb:61:ef:ec:3a:13:34:98:19:b7:87:4e:b4:c3:
7d:92:ec:b4:46:ed:4e:fb:33:95:62:a0:2f:2b:eb:42:14:66:
43:56:f1:a2:f7:30:f7:3e:43:fb:ac:2d:f1:72:e0:ef:7e:9c:
da:b9:7e:df:4c:82:87:f9:b7:6c:49:32:74:f6:a0:61:c5:45:
e3:c0:de:2e:28:d7:07:e4:23:6f:b4:46:7e:80:b3:6e:de:04:
26:7f:dd:89:e0:d2:d7:c3:0f:d3:64:0f:b6:d6:3d:11:58:da:
e7:ac:dc:dc:6a:06:1d:86:0b:e6:63:2e:ab:3b:79:e1:b8:b0:
d2:c7:03:e2:f4:b2:66:17:ab:cd:b1:eb:11:88:c4:39:fd:51:
de:06:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:10:48 2026 by rpki-client