Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: XqJO9i3qt5i9gPvcL4HuAoZaAPIdZdMthRE8wVpLvIc=
Subject key identifier: 8C:3D:D9:A2:E0:59:8C:30:AF:8E:23:77:31:14:0E:88:66:8A:84:03
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 01A0C8C63A88EF67FDC82B798D031B8D426E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 05D7
Signing time: Tue 22 Sep 2026 11:00:29 +0000
Manifest this update: Tue 22 Sep 2026 11:00:29 +0000
Manifest next update: Wed 23 Sep 2026 11:00:29 +0000
Files and hashes: 1: JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa (hash: dzTZZeqoyGDa9h33Vh04zNMf/nJhUIIZZndFjeftfJE=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: JA37plg41YSczJFhBggJQznBJ7hkM7+U38l4OM/H3CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:3a:88:ef:67:fd:c8:2b:79:8d:03:1b:8d:42:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Sep 22 11:00:29 2026 GMT
Not After : Sep 23 11:00:29 2026 GMT
Subject: CN=8c3dd9a2e0598c30af8e237731140e88668a8403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:18:50:59:d6:f9:b2:5c:3c:53:02:64:05:
c2:05:ba:98:61:5f:18:2e:a5:4a:01:10:d4:f0:93:
d9:ee:7c:cb:d3:68:89:b7:0d:20:6d:c8:aa:2b:3c:
3d:f7:90:af:7b:aa:ff:e6:40:2e:9b:34:ce:1e:b6:
c3:0b:a6:ad:6b:5a:e3:1e:00:82:92:c6:b9:e8:05:
39:65:57:8c:1c:f9:a4:75:4c:4e:7b:3b:d4:ae:76:
e7:9f:0a:f6:2b:64:24:b1:d3:ea:eb:b2:96:34:be:
e8:62:e0:7d:99:fa:2e:14:cc:8f:6c:e3:50:73:33:
83:ae:8c:af:8f:5f:40:78:dc:56:13:e9:2d:7a:b5:
92:e9:79:96:97:a7:84:04:c5:0d:e9:19:52:d0:17:
d6:3d:f6:b3:e1:28:4d:33:f7:fc:4b:81:dd:64:e2:
58:61:1a:9a:bd:e2:9e:35:47:6b:88:5d:d7:21:2c:
65:18:3c:c7:aa:71:bc:53:ae:20:d4:24:25:b9:43:
e1:18:7a:b9:63:5e:65:85:5d:3e:a6:c2:9f:2a:1d:
b0:16:04:d8:e1:53:28:88:f8:9f:f5:2c:08:02:a5:
26:77:db:2d:29:bb:43:38:0d:17:6e:ca:10:06:bc:
b7:16:eb:f9:15:75:82:5f:4c:66:09:fa:ac:b3:a3:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3D:D9:A2:E0:59:8C:30:AF:8E:23:77:31:14:0E:88:66:8A:84:03
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e9:98:c2:02:ff:0b:f8:ed:1a:aa:16:b4:cc:6e:76:72:c0:
a2:dd:a1:14:dc:0d:34:14:78:0c:82:9d:28:0e:1d:b6:ff:88:
b6:9d:17:3e:c3:d4:07:e6:33:10:d9:62:94:b0:52:f0:1f:26:
c0:dd:7d:14:54:19:54:f3:3a:0e:a1:df:f7:27:64:9d:2a:4b:
c4:3d:f8:2f:9e:b2:19:a1:e1:10:8f:64:55:fe:c1:c8:1d:2d:
b3:d2:3d:11:ed:04:69:77:f1:c2:cb:31:d4:a6:65:60:84:f4:
22:90:8a:c5:89:1c:8e:d7:fc:de:02:55:96:dd:0b:66:44:47:
0a:27:43:c5:57:9b:fa:9c:90:39:d7:b4:8e:4c:4d:3b:a3:bf:
3d:24:11:1d:83:6c:51:a1:6e:38:ba:c7:7f:7d:82:25:17:8e:
b4:e1:44:1a:e3:1a:45:ec:8f:ce:b6:96:18:62:c5:f3:f1:50:
d8:6d:06:f2:07:7f:6e:fa:84:f3:77:47:00:37:df:6a:a0:02:
50:f7:5c:23:07:a2:fd:e8:32:a8:66:7b:92:44:fe:e1:65:96:
10:79:f5:fb:3c:27:96:29:97:f6:ab:ad:2c:ec:9a:6f:89:d9:
3b:bd:e9:3a:9f:d7:34:9c:bb:f5:31:7a:19:ce:36:e3:e7:71:
cd:b8:9a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:03:43 2026 by rpki-client