Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: EgCN1MREJvrlCq+Vjpn7frCSinTq2hG1/C2tBGqib3k=
Subject key identifier: A1:16:C4:67:96:EA:85:0D:D4:40:CE:83:46:02:6F:0E:1C:14:03:B9
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 01A144CD177C3D34C9E5A64F51A409F40B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0FEE
Signing time: Fri 16 Oct 2026 13:00:53 +0000
Manifest this update: Fri 16 Oct 2026 13:00:53 +0000
Manifest next update: Sat 17 Oct 2026 13:00:53 +0000
Files and hashes: 1: C_BG8Ml6dP3iR096R9X-fJO1n7E.roa (hash: 3QfX9jxSSnvJJan/fsFYYDVyLrGyvJpCwPAUh/Poma4=)
2: UaQ-s38Z57ecJNUbRdVAzUGv8GA.roa (hash: 4xw5dIxtZo++aDtcmN5R2tGAogLl64Jnmc82+4RR2Mo=)
3: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: vBefwmA8HvxYPTcRzzr+7irOhb67msQJXxMRd9a4tlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:cd:17:7c:3d:34:c9:e5:a6:4f:51:a4:09:f4:0b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Oct 16 13:00:53 2026 GMT
Not After : Oct 17 13:00:53 2026 GMT
Subject: CN=a116c46796ea850dd440ce8346026f0e1c1403b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:ba:c6:c7:3e:69:67:da:79:c6:ee:79:00:
31:52:72:d5:1f:cb:a0:a2:c4:f4:dc:55:b9:86:a6:
e1:3a:81:01:3d:fe:42:2c:35:f4:06:6f:73:90:ba:
25:3b:b2:01:5d:d9:a9:d9:4f:e1:0d:3f:6f:9e:3d:
5d:4c:45:54:67:c3:b5:c4:f6:41:94:da:85:9d:68:
ba:c0:28:ab:aa:2e:c1:4d:52:e2:2b:49:47:18:e4:
29:23:4a:bb:2f:f0:65:2a:88:8d:9e:74:5f:15:d5:
b8:ef:dc:0c:0d:2a:10:7b:e8:e3:8c:54:cb:96:ab:
bf:a6:e2:b1:ec:7c:3d:71:12:fb:9f:dd:08:54:98:
07:78:f0:79:88:5b:8b:53:9b:cc:fe:28:e6:e9:35:
70:67:d4:5b:f6:84:01:0d:78:64:52:eb:52:c2:10:
5d:fd:af:1b:22:da:2e:e9:33:c8:38:dc:0f:55:09:
c3:fe:27:af:a5:3f:fc:1b:da:29:de:a9:15:08:2e:
30:15:f4:63:fc:34:fe:b6:c2:4a:5d:bb:7c:9b:bc:
7e:ee:95:e2:7d:76:7a:72:c0:c1:f1:30:52:5e:95:
9d:c4:69:91:70:88:95:d7:b2:ad:3a:02:5a:03:1d:
ee:b5:c5:76:54:a3:d3:c6:e3:f3:a6:39:7e:cf:6f:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:C4:67:96:EA:85:0D:D4:40:CE:83:46:02:6F:0E:1C:14:03:B9
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b4:f2:a4:97:58:0a:75:0d:77:bf:f8:80:29:60:65:8a:89:
73:f5:a7:08:0a:f8:6a:11:ea:d3:96:22:af:3f:79:5c:0b:fa:
66:0c:43:d1:dc:1f:b9:ba:cc:1b:38:3b:8a:9c:f3:46:7f:d4:
27:42:3b:62:e4:c4:16:27:0d:12:10:bf:12:ac:34:68:de:d7:
5d:91:c8:b5:93:6f:4d:25:14:44:fc:3f:fd:5b:14:aa:3f:af:
19:6d:0c:cb:87:f6:c9:c3:a2:90:ac:03:94:1a:72:ec:af:0f:
8d:a3:12:67:b1:97:33:d7:c5:87:83:f3:87:a7:55:42:fb:64:
e7:a3:fe:33:42:43:1d:8c:9a:8f:dc:09:83:4e:ff:28:75:b3:
23:62:a4:38:7a:4c:99:ac:67:13:6f:f8:8d:8b:b4:e5:52:6a:
6a:08:bb:d3:d7:cb:8e:9b:43:1b:37:8f:da:18:e4:45:1f:7c:
7a:62:e8:99:6c:b6:46:3b:9d:e1:72:7e:d9:1a:83:f2:23:1b:
99:ec:d2:1c:0d:38:0b:d2:09:5e:32:6e:55:ed:3a:27:55:28:
9f:54:6a:23:54:25:67:55:0c:1e:c6:0a:21:07:38:28:c7:c8:
18:4c:31:85:0d:e0:dc:18:59:6a:c8:7f:60:2b:56:d6:62:bd:
c0:dd:b2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:41:18 2026 by rpki-client