
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
File: oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft (raw, json)
Hash identifier: D43k7BFvMAyVi5iKcGjcO2DcMdtBKAX3KDQcCdgCrjY=
Subject key identifier: DB:9D:86:20:51:51:B1:E4:8E:42:AD:A2:3E:B6:18:1D:21:A8:2B:D9
Authority key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
Certificate issuer: /CN=a1655282be419d21222b506fb7a368c3fe5db23d
Certificate serial: 01A0CCD9B6DF9A416C13D6D86E5C9373129E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 06:00:15 +0000
Manifest this update: Wed 23 Sep 2026 06:00:15 +0000
Manifest next update: Thu 24 Sep 2026 06:00:15 +0000
Files and hashes: 1: OU2kt5pP9LNwwlGwfRZGFyH5hzI.roa (hash: 6flWuRYE3Zk0uPFYWYiQzcnSra7IhOrzHZC3EVLgp5s=)
2: oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl (hash: 597u3vze4deTyHBjf6nhLDAwvqNmX04Pu0a/fZrG154=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:b6:df:9a:41:6c:13:d6:d8:6e:5c:93:73:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1655282be419d21222b506fb7a368c3fe5db23d
Validity
Not Before: Sep 23 06:00:15 2026 GMT
Not After : Sep 24 06:00:15 2026 GMT
Subject: CN=db9d86205151b1e48e42ada23eb6181d21a82bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:60:3d:28:f0:7d:89:a9:fa:17:40:4a:0e:bf:
53:40:2f:51:23:45:aa:54:97:14:a6:7c:3d:1e:e0:
22:bd:05:7c:f7:19:4d:c8:c8:5f:08:17:61:f4:01:
4b:39:48:a7:3b:c4:19:d4:e4:09:e4:31:99:f6:30:
c2:4e:c9:23:44:0d:22:f5:07:e8:a1:0c:ba:1f:7f:
32:ee:91:44:53:55:0d:c0:1d:66:ac:24:2c:a0:1f:
76:b2:17:26:11:d1:df:64:89:52:93:e8:98:22:ea:
89:b3:76:f1:3b:92:12:f9:ec:84:68:3d:f5:19:39:
c5:e1:87:0b:bf:0b:e5:6b:c0:ee:f6:fa:65:55:f5:
58:a5:a2:8c:2d:e7:e8:22:c7:50:5d:40:c6:a0:9c:
bf:83:97:b9:83:43:4c:04:eb:eb:4f:f2:40:a2:43:
64:bc:7c:5c:a8:ab:87:d4:64:64:52:18:fa:34:9f:
7a:ca:61:22:c6:96:ff:ce:8d:51:91:70:8c:85:d6:
39:bc:0d:f1:94:a7:a2:b0:c2:cd:17:83:2a:a7:9c:
c6:af:ea:41:c5:47:eb:cc:4d:11:bd:d1:ee:da:8c:
db:9e:36:bd:ba:5f:09:de:59:e0:6e:7c:23:b9:29:
80:54:67:50:c7:28:50:a6:f6:77:30:c4:ab:9f:11:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9D:86:20:51:51:B1:E4:8E:42:AD:A2:3E:B6:18:1D:21:A8:2B:D9
X509v3 Authority Key Identifier:
keyid:A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fa:63:0b:f0:ba:57:ec:f8:00:08:fb:78:fc:0c:81:91:be:
17:83:c4:35:d1:87:5e:25:e1:11:87:a6:b5:bf:b5:cd:c3:60:
cf:a8:42:ec:0c:ef:17:b1:1a:9f:e3:3f:cd:11:af:8d:e5:7e:
5b:8a:02:6b:bd:67:e0:80:9f:37:5b:c2:be:e7:70:ce:09:0c:
50:b9:c9:53:42:1f:19:eb:7f:1b:69:21:4c:33:99:88:00:1c:
04:77:17:74:d0:3e:fb:91:6e:b7:84:b1:29:81:46:79:48:eb:
76:f0:5b:c6:16:ee:c1:36:d7:2b:8f:ce:a9:83:1c:ac:09:c4:
99:ee:29:fd:fe:bc:8f:e5:c7:f2:fd:18:01:80:08:c8:11:95:
5b:69:76:9e:c2:f5:2e:72:d5:df:34:1b:26:bd:1d:91:59:1b:
d6:6d:eb:bd:21:be:21:f1:94:df:bb:67:39:e5:a6:99:63:f9:
a1:11:ea:68:f6:26:93:d7:45:d5:8b:08:2b:f0:e7:ea:76:fd:
1a:7e:ee:96:a1:92:79:8e:ee:fb:96:e3:9b:61:51:d3:8f:0c:
96:b9:48:0d:6d:c8:6e:87:c0:a4:ba:af:50:d4:2c:e9:4a:6e:
b8:8c:b2:fe:3b:c9:ca:1a:03:50:9b:b8:34:d5:24:67:ba:22:
02:78:4d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:31:20 2026 by rpki-client