Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: PqMusvgt5Hiw+OdT4FKVREYMcZyEcXpve1EPKCUKJZg=
Subject key identifier: BD:D6:5B:E7:56:CB:83:A4:B6:53:02:CE:F2:A9:56:70:1B:93:39:F7
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 01A0EBC08F86664838898B7568AB2A86F8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 1774
Signing time: Tue 29 Sep 2026 06:01:00 +0000
Manifest this update: Tue 29 Sep 2026 06:01:00 +0000
Manifest next update: Wed 30 Sep 2026 06:01:00 +0000
Files and hashes: 1: CC_uQGJB-X8dNzS4njkHHnRy0EE.roa (hash: kLWeBF22uNWLbsgPVVSSeJVxiHQO+5+Sj42QETQzuhc=)
2: K1Er1aBJx6bVqmO9OdMkkQAcoks.roa (hash: jgg7YMoJBVhZFbz63ciqQ92UHrRAMfSOORFFb9rl/W4=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: i4RmdkrMBBuiV4vsp98uMghPsOpgyxdND44XMizsJnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c0:8f:86:66:48:38:89:8b:75:68:ab:2a:86:f8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Sep 29 06:01:00 2026 GMT
Not After : Sep 30 06:01:00 2026 GMT
Subject: CN=bdd65be756cb83a4b65302cef2a956701b9339f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:a6:f1:ac:e5:97:a7:c5:92:3d:20:bc:73:
20:83:bf:ef:0f:b4:39:42:c7:d1:a3:09:50:e5:fb:
03:72:16:8a:f6:c2:44:bd:bb:ba:2e:a3:11:a7:ad:
d2:0d:42:2e:95:d9:bb:11:70:5d:a6:77:bc:c6:16:
2e:98:56:5d:48:5c:f4:22:2f:7d:af:ed:85:41:96:
f8:17:67:b4:fb:55:52:ad:58:70:39:90:08:63:2c:
60:61:69:da:26:28:ae:73:ac:1d:7c:e6:e5:4d:f7:
7c:61:47:69:ee:d0:74:17:79:bb:15:62:d5:70:2f:
83:17:91:e4:ad:ff:db:60:9e:df:47:36:47:7b:37:
43:28:7a:2d:8b:63:33:b1:8e:4c:99:d8:2d:83:9b:
67:0d:e7:94:f0:3e:6c:58:a8:fd:77:4f:5b:a3:b0:
d4:d8:77:7f:4f:eb:81:a4:23:ac:23:9b:50:76:8f:
c1:3e:d9:5b:63:c2:24:e9:da:ca:31:41:64:1a:43:
26:cb:f5:11:5b:0c:c8:3e:96:0e:c2:3b:9c:10:46:
ee:d7:71:13:83:ed:ce:5d:f5:98:7e:f8:1a:bf:e6:
6f:5d:da:83:61:0b:9d:52:f7:40:31:33:71:c7:95:
b9:c4:07:33:63:9e:68:ac:c2:06:68:9b:29:5a:ba:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D6:5B:E7:56:CB:83:A4:B6:53:02:CE:F2:A9:56:70:1B:93:39:F7
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b4:c7:6a:1f:e8:ac:90:c8:a8:67:bb:16:6e:23:cd:43:60:
77:93:0e:a3:96:84:4c:78:8f:5c:86:0e:27:6b:8d:1a:55:d8:
76:e8:a6:8e:af:8c:cb:8a:b7:fd:4c:0f:1c:35:fd:fd:66:ea:
1e:f9:24:e5:a4:55:97:9d:d4:6b:60:f4:23:ed:14:86:ec:7a:
30:9b:3f:d0:be:10:2d:1a:51:f8:c8:e5:c2:d7:d3:2d:6f:95:
d9:5c:05:9a:a5:ed:d8:e7:c7:6d:f6:7b:c6:87:9b:13:1e:c8:
05:1c:cd:07:fb:d5:41:82:8f:86:10:fd:8d:fd:b3:a8:6c:b3:
fc:72:91:99:a5:54:f2:c3:8b:6f:c6:b2:8d:cb:ad:e5:d7:24:
ee:ea:7d:24:56:ec:00:46:88:16:9f:80:f2:10:f6:fe:aa:b7:
80:2e:9c:20:94:9f:71:23:22:3d:85:eb:f7:4c:f9:6f:9c:12:
e3:94:0f:a2:56:69:70:8d:e1:56:0d:38:46:96:d3:80:b7:1b:
f3:95:79:5c:66:8d:0c:5b:69:c5:16:67:bc:0a:07:d0:e2:23:
b9:2b:5c:67:f4:d6:7d:66:c3:27:97:ef:b4:7c:35:43:a6:3f:
cb:24:2f:3f:d6:62:e6:79:08:a4:3e:91:55:1a:46:e8:81:f1:
1b:08:af:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:28:16 2026 by rpki-client