Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
File: oCN2bGLetRKXFVcI7MtCHIsEeAo.mft (raw, json)
Hash identifier: s5Du916gPcAOb6KWPV+ilFUHPfTZeqtIhpyZ6gB1EEE=
Subject key identifier: 89:AA:96:BF:4E:56:3F:C3:C1:AA:D7:97:8B:00:BF:BB:99:D5:E3:86
Authority key identifier: A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
Certificate issuer: /CN=a023766c62deb51297155708eccb421c8b04780a
Certificate serial: 01A11C759B1395DBF71096211B803402A928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
Manifest number: 17E5
Signing time: Thu 08 Oct 2026 17:00:31 +0000
Manifest this update: Thu 08 Oct 2026 17:00:31 +0000
Manifest next update: Fri 09 Oct 2026 17:00:31 +0000
Files and hashes: 1: g0-HGh4bznaFgiFX5KCpF3Q8z70.roa (hash: kuqsXcay0qN76iKLs/AKqPrHvwfsG46t73MVLxZfYe0=)
2: oCN2bGLetRKXFVcI7MtCHIsEeAo.crl (hash: lPmyBBxPBENncosFaTWZF5qg0XMfj/PqRmscl3fSPE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:75:9b:13:95:db:f7:10:96:21:1b:80:34:02:a9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a023766c62deb51297155708eccb421c8b04780a
Validity
Not Before: Oct 8 17:00:31 2026 GMT
Not After : Oct 9 17:00:31 2026 GMT
Subject: CN=89aa96bf4e563fc3c1aad7978b00bfbb99d5e386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:21:ac:f6:ba:9b:d1:e5:9a:72:27:56:e1:a0:
06:17:0f:8a:39:11:b6:34:a9:d5:00:f6:34:e4:74:
80:32:17:9c:f4:09:99:3f:6a:df:f6:a3:f1:98:50:
08:da:ed:90:5a:ed:9b:35:80:c8:e9:4a:1a:f6:fb:
c6:5a:82:bd:0c:de:4e:97:92:a2:26:67:82:5d:a4:
50:9d:8d:d1:64:e0:b0:43:cd:44:48:76:59:55:6f:
ba:c8:3f:b0:d0:d9:57:f6:2d:37:07:7a:1a:28:a0:
a0:f7:2c:be:09:4f:61:a7:36:4c:f2:6d:6e:75:dc:
b8:e1:fa:9d:bb:f3:be:08:65:b4:54:e2:1d:cc:7c:
a2:87:88:55:e3:43:e6:98:fa:ed:d3:93:3a:4e:00:
5f:ac:b5:8e:f7:17:2f:c1:96:9b:bf:9e:2c:97:e5:
dd:f2:f1:b5:93:9c:48:d6:22:67:9a:fc:29:d1:85:
b3:38:22:63:c5:83:c8:aa:ac:23:f1:09:77:e9:5c:
8c:f5:56:74:85:89:94:98:a4:4b:ac:3b:bb:c5:4d:
50:76:6b:60:6f:cf:72:b6:86:2a:cb:23:40:9d:64:
3a:d6:49:09:9a:bc:b4:14:81:c5:dd:dd:4a:03:0c:
a8:2c:a4:b9:a5:f8:d1:a7:bd:6e:e7:c4:36:80:de:
27:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AA:96:BF:4E:56:3F:C3:C1:AA:D7:97:8B:00:BF:BB:99:D5:E3:86
X509v3 Authority Key Identifier:
keyid:A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:99:e9:21:2e:ad:f2:40:7f:89:44:d6:b3:d1:f3:55:04:a5:
71:b1:98:4e:2a:99:b7:1c:14:1a:70:bb:e2:02:8b:4f:ff:e4:
49:31:b4:b6:17:3c:95:d0:6c:af:0a:87:6a:f9:ac:27:b1:7a:
45:78:78:09:2e:dc:7f:3a:36:b6:06:a1:3e:92:40:82:a3:c4:
fd:9b:81:63:74:9c:56:fa:22:c5:7a:99:0f:05:5f:3b:7e:84:
77:80:e7:cb:a9:f2:68:81:20:fa:5f:c3:78:c3:bf:0d:75:b8:
9d:0b:7c:d4:4c:09:c8:43:b1:92:ec:d5:85:86:4e:b5:b3:8c:
81:70:d9:2f:fd:40:ae:af:9a:06:fe:4d:fe:39:f1:bf:ba:e1:
00:91:87:05:c9:ee:9c:87:c2:61:d5:3d:22:d6:6a:65:bd:db:
e9:2f:5a:c3:dc:0f:b0:26:c9:dd:49:d6:5e:39:a4:0e:33:64:
61:d8:03:3e:63:f5:5a:26:17:16:f2:13:99:9c:bb:63:03:8b:
e0:b4:f5:e6:3b:fc:ab:0e:62:8c:bf:a3:93:7c:91:e2:4d:b0:
cc:4c:6f:c9:3c:74:dc:34:dc:34:f9:4c:e0:45:04:a7:c3:9c:
0d:65:69:06:3b:d1:04:f6:76:e0:16:61:db:a7:53:1b:54:36:
15:23:0d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 03:23:33 2026 by rpki-client