Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier: 6NPXU7eb4rUkyzyu2wQicCoSStarFemo/VtjDnPcf+M=
Subject key identifier: 7F:A6:14:3A:BA:5C:75:27:46:CD:C3:BF:2B:E5:C0:B8:5F:6D:55:A3
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 01A0DBE02846DA5EF4FB37EB5A421DBD096C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number: 17AC
Signing time: Sat 26 Sep 2026 04:01:35 +0000
Manifest this update: Sat 26 Sep 2026 04:01:35 +0000
Manifest next update: Sun 27 Sep 2026 04:01:35 +0000
Files and hashes: 1: lh0K5-Z5Aaz0j8wGnxp6HsFtPYk.roa (hash: JhDyY/3KKD4NQI4A4Yynp5xK7eSjDNrmxGYBJDA+6gE=)
2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: /Fsno6rtiGDsDjwsJaZRMs/IocDB1RcNukKtw2q+tYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:28:46:da:5e:f4:fb:37:eb:5a:42:1d:bd:09:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Sep 26 04:01:35 2026 GMT
Not After : Sep 27 04:01:35 2026 GMT
Subject: CN=7fa6143aba5c752746cdc3bf2be5c0b85f6d55a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:bc:22:b2:c6:99:ca:80:83:3c:c3:87:f1:
32:b3:06:f9:a2:00:35:12:b4:07:6d:61:e8:79:d3:
e8:1d:b0:90:a3:dd:a2:63:6d:63:c4:36:33:d4:3d:
dc:16:31:61:7a:54:ff:bc:3a:be:20:bc:95:fd:83:
ab:58:55:d0:fe:89:7f:84:13:0e:66:e0:89:6b:d0:
70:52:a8:bb:9d:63:78:3f:46:e4:fc:74:e8:74:1f:
6b:9b:81:a6:60:52:81:64:f0:38:b7:97:3e:81:65:
14:74:53:ce:96:9e:9d:83:de:d4:4d:79:7a:e8:f9:
76:8c:c0:52:41:53:dc:18:e5:54:34:32:c8:72:ec:
e7:ac:c5:0a:2e:55:37:ea:43:6a:63:a3:ae:68:56:
ac:4b:63:fa:60:23:6b:9c:92:50:d4:3d:99:d3:89:
a7:b7:7b:27:87:f6:17:f4:23:89:fd:54:6d:22:72:
6b:d2:d8:44:0a:d0:54:c1:d9:44:3a:ec:f9:10:9a:
0d:75:6a:01:04:dc:75:6f:1c:d6:77:7b:92:dd:68:
8b:47:b9:5c:9f:d7:58:cf:a5:d7:c3:4d:32:84:af:
28:92:ca:8d:5d:86:ef:99:cc:22:b3:2d:3b:e2:aa:
33:30:43:98:86:28:1f:04:04:f9:b1:4d:9b:44:c5:
12:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A6:14:3A:BA:5C:75:27:46:CD:C3:BF:2B:E5:C0:B8:5F:6D:55:A3
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9b:d0:11:c8:d2:8e:dc:93:d3:91:24:95:b2:02:45:59:a9:
9f:b9:66:c6:f2:28:92:9d:3c:c1:64:6d:72:b3:e0:3a:0c:a5:
9d:15:db:13:fd:12:e0:ee:9c:5f:63:95:d9:47:97:93:57:a2:
d2:d8:0c:31:d0:e6:bc:e0:fd:ae:d1:b8:2e:f7:8d:88:11:57:
63:a3:b5:19:fb:95:a1:73:44:8d:3b:e0:77:9d:9c:49:6a:93:
ea:df:3f:0a:9e:d0:65:6f:86:f0:40:25:3d:d1:03:b9:0f:dc:
a9:76:8f:9e:fa:6a:cc:09:94:52:59:f4:d7:08:be:61:94:c1:
7c:be:bb:47:7d:c3:d8:24:81:85:af:f5:04:a7:5d:f8:d3:8b:
ad:4c:22:0d:76:cf:5a:7e:4b:6e:02:4e:fa:2c:c4:ad:4f:69:
d6:05:a4:c3:52:9a:c5:cd:fd:e9:60:9c:ed:98:7f:16:49:8b:
45:06:e1:c4:46:5b:7a:4b:85:be:9e:de:10:58:97:97:bd:df:
6c:fe:95:83:fb:32:2b:69:55:52:50:0d:c8:ac:45:67:01:ad:
81:5d:4d:9e:ee:f7:28:6a:3a:a8:61:13:b0:b1:8e:54:2b:e8:
49:9c:a5:ba:5b:b3:13:35:db:8d:c4:d5:20:50:f4:d9:19:d9:
42:b4:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:04:40 2026 by rpki-client