Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: b2a/U6dwL8hySfcxrPcwWRfxgLwTa1+OXqFhap63k0s=
Subject key identifier: 70:84:D6:27:B7:F1:0F:14:15:90:66:59:93:27:16:15:96:3E:86:53
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 01A10DA77E114E64568912B0F185EB5AE098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 092E
Signing time: Mon 05 Oct 2026 20:00:42 +0000
Manifest this update: Mon 05 Oct 2026 20:00:42 +0000
Manifest next update: Tue 06 Oct 2026 20:00:42 +0000
Files and hashes: 1: 4Da2j7Bi2NbmfPUpK3LZNaUxeKw.roa (hash: sVS+CgceR72IsZG8/n9nxIxVExnNtdYxPtu3DwmNmPc=)
2: 6A3jyIMKHg4wFV2SvrfE3nKtTQo.roa (hash: W2pcnpJGAQePhmM2PwP+0VJq/IVZmkSfxPewBfpKTAk=)
3: nzg1Wy5iDrgZN6cFhF2wIXzEoL4.roa (hash: 7c3WobtnQbFwAsfBBLzCJIOIEFbRalJlUeFDgCh2yaA=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: TFo8ucmRlMnVyxqdMWKnSsOcdKFR04MWErFWaD2eoFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:a7:7e:11:4e:64:56:89:12:b0:f1:85:eb:5a:e0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Oct 5 20:00:42 2026 GMT
Not After : Oct 6 20:00:42 2026 GMT
Subject: CN=7084d627b7f10f141590665993271615963e8653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:e1:28:37:12:e7:4a:ec:d2:12:bd:2b:9e:
56:c5:b0:40:ab:3b:38:bb:61:b5:86:c2:fc:ba:6a:
d7:84:6e:18:36:a8:b8:52:93:80:35:a0:b7:6e:1b:
c8:ba:39:50:73:39:2b:da:71:e7:54:3b:00:7f:1a:
30:26:51:36:45:56:db:61:ec:cb:b5:ab:45:79:9e:
38:c0:16:3d:af:c6:28:df:04:33:07:57:82:8b:27:
06:3f:f8:41:77:23:f9:70:21:36:6a:23:42:7a:1b:
14:4c:6c:7b:86:08:44:f2:04:3a:44:d3:51:36:0d:
bf:8b:0c:2f:d4:65:e9:95:e7:3c:68:bf:3a:c5:9d:
62:08:7d:67:40:55:74:e8:29:7c:a4:9f:22:c3:f3:
50:33:c2:d0:f7:7d:be:79:7d:c8:3f:95:49:f5:9a:
17:4b:36:a5:57:96:fb:aa:a2:84:03:05:9c:a4:10:
ae:0a:21:d8:be:ed:83:4a:fb:a2:0c:88:6f:a0:4e:
fc:00:0d:f4:73:a8:e6:49:1c:d1:0f:02:fc:93:a3:
27:26:1e:4d:6d:9f:31:11:9c:d7:ff:c7:e7:56:3d:
92:67:c9:c9:4d:2c:6d:c2:40:01:bb:a8:cd:84:44:
2a:f9:83:07:c5:18:dc:42:40:92:8c:93:81:50:07:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:84:D6:27:B7:F1:0F:14:15:90:66:59:93:27:16:15:96:3E:86:53
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ce:23:bc:e0:65:5c:b2:36:1e:4c:a3:ea:0d:25:5b:9f:d0:
35:94:cb:31:dd:07:87:de:3a:b4:11:f2:26:f4:8a:90:94:51:
2f:7e:ff:19:fc:be:01:6e:bf:53:20:54:f4:26:6b:2f:e3:10:
d9:6e:5a:33:83:42:32:21:0b:74:96:0d:d6:fb:a8:bc:51:e9:
68:2e:11:66:51:20:91:ee:2f:de:6d:38:0e:77:34:90:c0:78:
33:83:23:cb:b8:9f:00:51:dc:56:b4:67:f8:69:af:71:0e:0d:
12:69:1d:4d:b4:09:e0:55:42:6a:20:ea:31:b6:03:d3:26:24:
7e:b6:78:da:7b:d3:45:e6:2b:04:7a:60:b3:52:c0:13:fd:3f:
d4:64:5d:9f:24:b1:eb:cb:5a:4b:7b:3e:fc:35:e5:fb:b6:ed:
e5:4d:c6:a7:e4:57:1a:22:5e:57:2d:31:03:2e:cb:30:11:fa:
89:20:51:3f:a4:7b:0b:f8:f0:41:9b:83:aa:3f:41:de:cf:0e:
9d:0a:16:3a:b7:e2:f3:e5:9f:6a:69:f1:94:c5:c3:0f:57:14:
2f:1f:9d:27:6f:9e:dd:60:81:a9:bb:85:46:a3:38:03:6c:bd:
f9:5c:1a:43:8a:f5:a8:70:d7:7d:b6:5b:54:a5:06:84:80:ec:
9a:31:62:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 02:01:11 2026 by rpki-client