Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier: iv3Jy6yXPBPL6J8Wez0VLGft0iVKAtO6auElBm3BYEo=
Subject key identifier: F0:62:79:B2:90:69:FB:D6:CC:56:5E:0C:F9:18:7E:99:69:72:5B:00
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 01A0E7E3BA0AC90DAF409A43A46D1D827F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number: 0F38
Signing time: Mon 28 Sep 2026 12:00:56 +0000
Manifest this update: Mon 28 Sep 2026 12:00:56 +0000
Manifest next update: Tue 29 Sep 2026 12:00:56 +0000
Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: pwQmIMbVt9oEVDp/1aZQnC2riC2X+0rIqctMXlIkgfU=)
2: ReyUn6tKBOELp3PqtRdTiZN56xc.roa (hash: o1NTV7KD/4RS51aQo1dWC0QW0kteepHZMeaZiAB8YZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e3:ba:0a:c9:0d:af:40:9a:43:a4:6d:1d:82:7f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: Sep 28 12:00:56 2026 GMT
Not After : Sep 29 12:00:56 2026 GMT
Subject: CN=f06279b29069fbd6cc565e0cf9187e9969725b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:99:f2:02:55:84:93:74:92:e6:77:74:a0:
da:fd:b4:47:e8:11:5d:ca:27:a9:32:e4:58:59:f8:
6b:4f:96:21:8e:de:6f:b6:0f:6b:0e:52:0d:1c:0c:
dc:95:0b:e4:e9:0d:87:ed:47:58:1b:16:e6:f3:a0:
d6:ef:86:dd:4c:9a:60:32:2f:cf:59:33:70:ef:b6:
a9:c5:f8:66:af:d8:67:55:8a:ff:78:ef:6f:f8:a2:
b0:c4:9f:15:07:4a:9b:e7:ba:6f:f8:3a:4d:6e:ed:
03:a9:63:44:f1:98:ad:69:b5:84:99:73:01:d3:c7:
aa:3f:a5:45:9a:a6:3b:b4:b9:1c:08:23:1f:f1:f4:
1e:d2:d5:d8:de:88:ef:14:65:3f:6e:35:6c:63:9f:
7f:35:86:40:9b:cc:3b:b0:39:88:7c:1c:9d:93:ea:
0e:6a:08:95:6a:36:1e:bb:b5:d8:31:38:d8:aa:f9:
bd:9d:bc:8c:63:87:0c:67:19:29:a2:19:e0:3c:7e:
9d:1f:4f:9f:c4:fd:45:8a:d6:f1:39:31:d5:fa:62:
dd:85:db:86:18:18:14:49:b3:99:2a:b5:ce:c3:f4:
d6:ca:6e:46:8c:4f:76:29:9c:16:ca:59:51:49:2b:
9a:eb:ad:6e:86:30:8f:64:ab:be:bc:cb:63:6b:9b:
38:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:62:79:B2:90:69:FB:D6:CC:56:5E:0C:F9:18:7E:99:69:72:5B:00
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d6:7d:b0:9b:40:7e:77:d2:2c:44:1f:3b:45:dc:5c:1f:a4:
66:8a:ba:e6:fd:b4:08:ca:1a:a8:d6:d2:15:fd:aa:c7:69:c9:
2d:03:93:23:fa:fc:7c:65:06:69:3c:78:55:2c:27:54:6d:e0:
a7:89:c5:fe:35:69:bc:56:16:c9:f9:d7:1e:1d:7f:db:4e:34:
eb:c4:c2:2c:aa:1e:35:fa:6e:2b:59:6f:a8:b5:d3:d5:98:e0:
11:80:58:e5:63:00:83:95:44:fe:35:48:dd:dc:49:c5:d3:b8:
87:d3:07:de:4e:5a:de:93:17:fd:a4:e4:fe:ab:ff:cc:a7:e3:
c8:1b:10:08:82:cb:0b:a4:38:4c:34:85:6b:89:59:33:64:54:
53:13:f1:1c:74:34:b7:a9:8c:1c:06:6e:3c:72:ac:b8:45:89:
8e:5f:f1:11:ec:43:ff:a4:b6:de:28:8c:5a:48:90:90:cb:01:
7d:29:a6:f4:04:41:60:36:0d:43:0e:a4:f7:cd:9a:51:3c:14:
57:6f:36:26:eb:6f:fc:48:1d:6a:1d:d8:69:d9:28:6d:be:8d:
08:07:6e:2a:9c:8d:75:65:94:d2:8c:77:a0:52:41:e4:85:20:
e1:02:1c:e3:6f:9e:df:6f:ee:ea:2d:b4:3a:65:50:b3:a6:f9:
21:eb:c2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:11:45 2026 by rpki-client