Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: m0l5+jBD5HSllpU5nzOT/Yls5LbQcsrVAPKKUh/JHwo=
Subject key identifier: 0F:15:C8:1B:95:E0:F3:8D:16:CF:D6:2F:07:00:43:A8:5D:13:29:58
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 01A0D614ECA685BE558AFCD690C00CBDE374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 0FDC
Signing time: Fri 25 Sep 2026 01:01:30 +0000
Manifest this update: Fri 25 Sep 2026 01:01:30 +0000
Manifest next update: Sat 26 Sep 2026 01:01:30 +0000
Files and hashes: 1: 3hMHIVOHYf4xHOB_QIaghE5RKyU.roa (hash: iiTzIP6NLT0/sC8FwGaVheusdiRxnlTvSAKBPuTjCdI=)
2: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: uOw1wOCc4JyYGBWVImDinwO6uI8CyYMNJcox/2rwB0k=)
3: ylTUix0nZCbBGNa6yxbMJ3pbJDQ.asa (hash: oRmCnqZJex+p+VhWAUp4LwTMwfCm/4vGc6Wx1HLZbm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:ec:a6:85:be:55:8a:fc:d6:90:c0:0c:bd:e3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Sep 25 01:01:30 2026 GMT
Not After : Sep 26 01:01:30 2026 GMT
Subject: CN=0f15c81b95e0f38d16cfd62f070043a85d132958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:00:b1:96:ca:00:e1:ff:09:10:de:ca:fc:
68:79:9b:f9:7e:cb:11:e1:c1:89:ef:59:e1:57:7c:
66:c5:22:3c:1b:98:72:5c:8d:fe:7a:7e:50:3c:61:
45:c7:aa:80:aa:04:98:6b:72:dc:90:86:c5:1b:4a:
7f:d7:48:84:e3:ac:25:6e:84:a3:77:44:67:15:fc:
f5:0a:7e:9f:65:db:7a:98:7f:29:17:8f:63:20:9a:
18:62:0d:23:9e:69:bc:b9:3d:d7:56:d9:46:98:41:
e5:39:a0:4a:95:fc:7f:2b:48:7d:3c:fb:6f:61:cf:
89:b3:f8:ba:1d:dd:d4:84:94:a1:0f:1e:04:7a:22:
6c:fd:11:26:51:71:20:23:bb:07:25:8e:86:9d:03:
8f:a2:f2:36:14:dd:39:04:56:c9:17:81:90:ea:d5:
6d:cf:2c:c4:14:3f:08:1e:51:4b:0a:3d:24:8e:5c:
d8:87:fe:e2:38:ba:f3:b5:09:f6:ca:1c:2e:ce:90:
03:35:87:9f:da:bf:3f:4e:e5:99:a7:87:d1:ce:ac:
50:86:95:7b:d4:10:b6:98:e1:ae:78:8c:55:e3:cc:
97:33:cd:38:8b:80:b0:fb:b4:b8:05:71:b4:6c:8a:
42:22:b3:3d:97:0a:86:87:7f:c4:88:28:94:c4:d2:
4e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:15:C8:1B:95:E0:F3:8D:16:CF:D6:2F:07:00:43:A8:5D:13:29:58
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:44:fd:1c:e8:65:9a:a5:4c:cb:00:ae:01:de:e7:2b:7f:a9:
ee:c3:fc:f0:77:94:62:0f:15:cb:76:fb:26:1d:2d:e0:8e:56:
6c:de:d4:21:1c:91:4a:35:70:9f:8c:cb:17:c0:ff:73:35:e0:
c5:f7:f7:d4:cc:6e:08:8b:a7:ba:ee:cd:b2:73:81:05:4c:3b:
41:6b:cc:67:e3:fd:ce:0c:b2:81:77:b7:d0:25:11:0c:71:ec:
4c:bb:19:68:5b:55:92:5c:32:e1:bb:da:59:74:6c:ac:58:9c:
24:a4:72:d6:bc:d2:7a:aa:7c:e7:dc:a5:8d:36:c3:96:a1:74:
a4:c3:eb:04:51:ce:ea:62:2d:c4:d4:65:ab:f8:cd:2a:3c:08:
66:8c:72:a3:7d:7c:fe:00:78:78:cc:60:63:86:a3:87:27:f9:
11:3b:7c:7e:98:e1:32:b4:0d:2f:23:5c:7b:20:c5:80:10:2c:
4c:43:89:0b:e7:13:ef:7a:5c:2e:46:d7:d2:3b:5f:c1:c8:bb:
c4:a1:59:62:1a:c5:77:93:3b:49:ff:53:8a:07:c2:78:dd:17:
4c:91:03:29:8a:83:7a:cc:54:b2:c2:68:98:3a:20:63:10:63:
74:10:dd:92:36:6b:f3:21:6b:fe:7a:ba:66:3e:3c:2d:50:7c:
d0:1c:86:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:09:35 2026 by rpki-client