Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: shZYP2xRL1MocgZ9Fwk76l9Vxgf7FsLp3MDZcoOb7dQ=
Subject key identifier: 77:E4:A0:5C:27:C3:DB:E1:D2:02:23:7E:12:DE:C8:F1:85:37:79:D4
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 01A0C6D84C7206AE95424A4C6E27DE5602A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 198B
Signing time: Tue 22 Sep 2026 02:00:59 +0000
Manifest this update: Tue 22 Sep 2026 02:00:59 +0000
Manifest next update: Wed 23 Sep 2026 02:00:59 +0000
Files and hashes: 1: PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa (hash: ClKyMhw4ls8O+22d3zwyr4Of9HO2Cqaa8e0NaPqWqxo=)
2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: WQ1O97fTPBfr0N1NoEHAAB5VO2c/EBh2b9+2VAahpTE=)
3: pteb03Zrz-92mfGhlVuUAxWiO1c.roa (hash: Tlsfv5MPyjgb+Ws3wZ+t04Extj+nRQ2rvjb3jvw/n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:4c:72:06:ae:95:42:4a:4c:6e:27:de:56:02:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Sep 22 02:00:59 2026 GMT
Not After : Sep 23 02:00:59 2026 GMT
Subject: CN=77e4a05c27c3dbe1d202237e12dec8f1853779d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:32:89:2a:c9:f1:0d:65:d7:39:42:43:c5:
46:04:96:b0:1c:c7:5c:0e:40:81:f4:65:59:d3:d3:
b9:d8:94:7a:1f:79:47:4f:cb:f6:93:00:32:df:89:
b2:57:d7:0e:57:d9:2e:9a:fb:bf:24:89:cd:39:99:
7f:2d:43:a0:37:98:2a:fa:58:8b:4c:a6:6e:f2:88:
7c:b1:57:70:15:e9:8c:9f:cf:21:8a:17:ce:20:9c:
3d:95:ac:d1:e2:ef:24:f1:fc:e6:85:00:10:e3:01:
ec:bd:d9:22:c6:7c:0e:98:15:5a:ae:75:00:0c:95:
f6:70:70:53:3c:f2:82:1f:a5:3c:37:d3:7e:7e:b2:
5c:05:8e:79:54:62:6c:28:1c:d7:0d:02:a9:90:ce:
b4:a0:41:8e:08:9c:a3:5d:c2:8f:a2:70:d9:ff:11:
24:da:62:61:f3:bb:20:79:97:c4:69:79:82:4b:a8:
a3:f6:bc:99:e4:98:82:f2:64:3a:e7:ad:fa:65:fd:
0b:a7:4e:24:7b:34:f7:a3:6e:66:f7:e9:79:bc:ad:
28:aa:ad:50:9b:ff:6d:63:4a:2f:52:69:48:32:5a:
20:16:b9:58:ac:88:68:96:28:33:2d:fc:45:06:3f:
c7:b5:f1:49:05:4f:63:a0:08:9f:bf:e7:d8:29:d9:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E4:A0:5C:27:C3:DB:E1:D2:02:23:7E:12:DE:C8:F1:85:37:79:D4
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:33:8c:35:54:01:29:86:92:20:9a:3b:5d:e9:9c:4c:07:2a:
82:6b:1f:93:7e:e5:84:e6:fd:e1:98:ce:8e:e0:1d:51:bb:df:
22:61:b2:ac:ef:26:05:7c:38:5c:fe:3d:b9:d8:74:99:d3:63:
8c:93:33:2b:53:53:3e:64:51:15:5f:49:a7:69:d5:1f:ba:ae:
2e:c3:59:c6:d1:27:e4:34:7b:ed:72:fc:33:42:fa:9f:87:77:
23:5c:df:37:c7:21:79:a4:81:a9:04:7e:0b:a2:e5:ed:2e:98:
62:32:43:5f:02:cb:1b:ad:9c:e0:2c:af:4b:e8:97:c9:11:8a:
28:5d:69:77:27:6f:f1:f0:6e:28:f4:e3:82:02:9f:b6:76:4a:
35:69:48:88:3b:9e:92:d9:27:1d:55:2c:1f:55:63:17:de:c6:
6d:f4:2c:1b:13:73:08:22:9b:7d:83:64:08:15:74:2a:35:36:
fe:ec:3b:0f:ff:d7:63:e7:f0:81:9e:c8:c1:be:c0:dc:3a:61:
33:54:b6:ee:07:f4:85:b6:e1:87:ce:d5:30:59:d2:85:ab:5a:
e3:66:59:4f:00:52:93:a8:de:d0:d6:61:bf:29:8d:6f:77:69:
f9:1b:3b:44:31:2b:0d:55:09:11:6e:7f:90:86:04:3b:58:b6:
7a:63:46:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:35:52 2026 by rpki-client