Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
File: oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json)
Hash identifier: ARyrgKuiExDvsooWnBYCiHAk2+QowH289q6+yoUv6RY=
Subject key identifier: C7:35:F8:D3:BF:AD:B2:23:D8:B0:CA:51:B8:91:BC:0D:41:2F:53:1E
Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Certificate serial: 01A1DEA7840DCCE6B246F456D6B73F2D6D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
Manifest number: 0C6A
Signing time: Sun 15 Nov 2026 10:01:22 +0000
Manifest this update: Sun 15 Nov 2026 10:01:22 +0000
Manifest next update: Mon 16 Nov 2026 10:01:22 +0000
Files and hashes: 1: AtniHnWS_m5XJnsdI3EUIOstzH4.roa (hash: KMRx9/qM9+4wF0F9XLzExOU323HbvcZo4zC4bgJQesg=)
2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: IvwWQUtBmTmPUdT5GF25yNG1YZ2D2Xc6hbw2rtFws8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:84:0d:cc:e6:b2:46:f4:56:d6:b7:3f:2d:6d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Validity
Not Before: Nov 15 10:01:22 2026 GMT
Not After : Nov 16 10:01:22 2026 GMT
Subject: CN=c735f8d3bfadb223d8b0ca51b891bc0d412f531e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ae:64:e5:4d:86:1e:9d:92:9b:ca:40:ce:49:
3e:db:02:b9:20:2e:b7:b8:af:ef:00:ee:5e:82:6b:
24:3a:d8:30:34:7d:e0:81:4a:10:1e:10:02:40:28:
dc:10:66:44:07:e8:60:8d:74:da:04:a0:03:37:1d:
80:24:e9:49:5c:b9:7c:c3:52:e6:3b:f7:ff:5c:95:
86:8c:0c:1c:ae:15:e6:29:f2:f3:bd:0f:3a:ea:1d:
5b:24:f5:4a:39:d5:22:ea:49:5c:d5:67:35:2c:8e:
24:61:c7:f9:5c:e6:6c:28:78:0c:ec:0c:9d:ef:3a:
01:27:ee:e8:b6:f9:b4:00:6e:c2:e7:2f:42:89:62:
29:07:74:a9:62:25:18:05:90:ea:87:ec:d8:36:b8:
86:cc:3a:ee:61:fe:b9:6e:7c:2b:89:1d:2c:21:c4:
36:92:31:eb:e1:1c:80:a3:51:46:6e:7e:9f:7f:69:
3f:0a:39:6e:68:c1:83:51:ae:b9:1f:41:af:f6:0d:
a2:72:c0:b2:37:e9:c5:c1:50:65:14:97:a9:1b:ec:
46:08:89:53:b0:25:4e:0a:75:bf:60:10:ee:78:05:
3d:24:21:22:7a:64:9b:85:b3:4d:7a:11:71:e6:89:
86:ae:f6:7b:e9:24:d6:c9:35:94:e1:a9:22:75:71:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:35:F8:D3:BF:AD:B2:23:D8:B0:CA:51:B8:91:BC:0D:41:2F:53:1E
X509v3 Authority Key Identifier:
keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a6:c0:59:35:d1:41:2e:b4:ec:2c:f4:7d:9d:75:70:dc:af:
53:0a:24:f1:bc:67:fa:8b:0b:ed:0b:8a:6a:06:12:ef:be:54:
ee:41:7e:26:be:6e:8a:46:fb:99:84:29:42:9c:43:a0:9f:de:
43:4b:01:9d:17:60:2e:d0:b7:a2:01:02:ea:79:03:c4:d1:b2:
d4:50:5e:ea:49:52:3b:2a:ec:21:db:95:7d:41:21:19:61:e3:
4d:48:0e:07:16:4a:96:88:8d:fc:5e:a4:8d:04:a9:36:eb:16:
92:25:46:2e:45:15:1d:68:94:28:e8:69:4d:6b:c1:3a:1e:4b:
21:02:4c:5f:3b:cc:76:61:c6:fd:ed:4a:01:97:fd:ee:7e:5b:
28:54:75:2f:63:09:bd:71:17:50:37:77:59:bb:1b:c7:f2:bf:
80:d1:82:bd:70:e9:8f:8e:8e:5c:45:92:91:b5:84:f3:50:95:
98:46:a2:39:ed:7c:91:6b:f9:64:a1:9a:be:c2:34:93:85:27:
67:24:6e:c0:6e:cc:78:ac:db:eb:2e:1b:9e:74:d3:78:53:ef:
56:0d:f9:89:ac:9d:90:56:73:f9:6f:ef:d6:0a:68:51:fb:f0:
5e:45:c1:ab:d7:30:45:30:87:7f:1e:90:29:56:c0:8c:4c:8d:
81:4c:d2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:49:55 2026 by rpki-client