Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: WAD/wWOU3o2p10guelgZR7nPo6/hduvERBPIL2I5gp8=
Subject key identifier: AA:A4:8C:F5:44:76:46:63:3A:2D:8B:C6:34:0E:8B:D9:63:65:2A:CC
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 01A0C3A05447B607408BEF288F125F590237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 11:00:59 +0000
Manifest this update: Mon 21 Sep 2026 11:00:59 +0000
Manifest next update: Tue 22 Sep 2026 11:00:59 +0000
Files and hashes: 1: HbGW1bIuKJtcKHzffUf-4COhdZM.roa (hash: XbWavlk3zf17or5OmaUS0jVlWZ00ZlHjNhNZCQ7iW5c=)
2: gbJe-QJELQjG77ZNjAeXTNXNFEw.roa (hash: 1fpv/Uz2JKbxfrghTnax/Tb7Em3yN34FPhCyAtrNWL8=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: NzBFGFDHFIMUNo0dp1wAAc99FVWit97Lq+oFihyClIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:54:47:b6:07:40:8b:ef:28:8f:12:5f:59:02:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Sep 21 11:00:59 2026 GMT
Not After : Sep 22 11:00:59 2026 GMT
Subject: CN=aaa48cf5447646633a2d8bc6340e8bd963652acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:be:1c:16:ae:85:05:75:a8:f3:ce:a6:9f:5d:
b8:f9:84:4d:0b:0d:f7:ea:cb:b9:77:c5:70:48:f9:
cb:dc:61:4c:ac:11:81:c5:f5:27:24:d4:8c:78:2e:
7f:b6:27:a5:e9:8e:4b:a7:09:ba:05:1f:db:45:6e:
6f:2c:90:0e:28:05:a8:c9:d6:c6:22:09:92:82:46:
03:be:6f:e7:e7:c9:21:af:18:a4:14:fa:61:13:eb:
f6:ae:53:44:b7:58:94:6c:f0:9a:db:92:c8:5c:40:
6e:bd:a7:48:61:1f:df:50:ea:ec:d6:ff:9b:05:75:
88:00:2a:4b:fd:02:9e:7a:5b:db:ca:a5:ab:2a:f2:
26:d5:9d:6d:eb:a9:34:86:38:da:79:9b:5b:4f:41:
24:30:c7:06:5e:68:00:17:c5:08:eb:b0:90:ec:a5:
db:69:2b:5e:4f:08:b9:0f:4d:00:92:4d:9c:3a:8a:
53:df:e4:f5:df:d3:62:1c:e6:fe:9e:d1:90:d5:86:
06:6d:bb:1d:ac:27:f8:97:89:37:62:a3:d0:8f:45:
97:b2:55:6a:0c:ee:3a:35:92:c2:bb:43:18:d4:5a:
c9:71:05:a1:9c:be:ee:35:1b:07:c3:35:7d:6c:a2:
8a:eb:3b:04:0b:8b:2a:51:f9:ab:f6:ae:77:7b:18:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A4:8C:F5:44:76:46:63:3A:2D:8B:C6:34:0E:8B:D9:63:65:2A:CC
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:58:79:a1:98:47:1d:14:c8:9d:d0:80:44:5e:b9:7f:f9:be:
30:0c:db:9d:b1:f9:31:90:78:df:e1:9d:5f:30:cd:e3:93:e5:
41:c8:5a:ad:f9:5b:a6:c2:5b:34:fe:0a:fb:22:2f:de:26:3d:
97:2c:e2:c3:04:e9:c5:eb:10:79:0b:3f:59:48:45:25:9b:93:
3b:3a:04:69:11:1f:e3:d2:d0:7f:c8:08:30:49:e2:e6:fc:8f:
b3:2e:41:9d:fc:e2:3c:5e:ee:16:f1:46:44:a3:f0:2e:4b:82:
4b:a2:34:55:03:0b:f3:d6:63:d6:50:74:c2:92:24:03:68:ec:
40:6c:e4:22:0e:94:42:df:1f:d9:f8:92:df:53:e0:69:84:04:
cf:e7:94:9e:aa:c7:8d:47:31:09:ef:ef:00:bd:ef:aa:b0:90:
09:46:cd:fb:42:7f:46:be:01:70:88:6a:ab:f7:e4:e9:74:5a:
3e:60:d7:72:47:44:b6:3b:6b:f8:9e:06:11:0c:6f:73:72:6d:
7d:60:c0:28:b7:b5:32:9d:c5:86:17:80:63:47:45:2b:26:ce:
3a:4b:1b:3d:e4:9f:81:a5:78:53:fb:85:2f:5e:b3:90:d0:89:
f6:b4:71:f5:68:4f:a4:4a:e2:bb:43:a9:82:1c:cc:65:da:24:
7a:aa:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:29:54 2026 by rpki-client