Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
File: oEGdRgkuRJjImA9ydB3ICBKViRM.mft (raw, json)
Hash identifier: PZ6f+bwtdQGqD8i3gu1ijZ+lFUnxDUUZ62+cKKTRU7g=
Subject key identifier: 9A:5F:23:EA:62:C5:71:95:7B:01:70:B4:D0:5D:2E:C9:7F:6C:12:F4
Authority key identifier: A0:41:9D:46:09:2E:44:98:C8:98:0F:72:74:1D:C8:08:12:95:89:13
Certificate issuer: /CN=a0419d46092e4498c8980f72741dc80812958913
Certificate serial: 01A1366C8E056C94B9782CF81E3DA668E486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
Manifest number: 011A
Signing time: Tue 13 Oct 2026 18:00:46 +0000
Manifest this update: Tue 13 Oct 2026 18:00:46 +0000
Manifest next update: Wed 14 Oct 2026 18:00:46 +0000
Files and hashes: 1: bYlwrMMouNe0wX8geEjx6w5BJcQ.roa (hash: L0irFgfGqAy5AaADSGRWA2XK+/VEh5b8QXvaP7jtIlM=)
2: oEGdRgkuRJjImA9ydB3ICBKViRM.crl (hash: 3LL0LuasGP0QnzJtJ34LEMXO/SSKHHGcTxYp24oFYQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:6c:8e:05:6c:94:b9:78:2c:f8:1e:3d:a6:68:e4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0419d46092e4498c8980f72741dc80812958913
Validity
Not Before: Oct 13 18:00:46 2026 GMT
Not After : Oct 14 18:00:46 2026 GMT
Subject: CN=9a5f23ea62c571957b0170b4d05d2ec97f6c12f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:2e:ad:3c:3f:d1:1f:09:ff:8c:75:4f:0c:
53:24:4b:40:e3:f2:05:8b:45:01:fb:3f:8d:37:25:
ac:9c:bf:cc:51:45:6b:e3:bc:43:fc:bf:f5:90:2a:
eb:64:2c:c2:76:a1:fd:d9:ba:1b:23:db:54:7a:43:
05:57:fc:db:f4:54:fb:3b:83:26:8f:91:61:34:23:
d5:f6:87:e5:f3:8f:f2:86:ed:3d:62:27:35:a0:18:
01:71:d6:97:86:0f:f9:e8:0c:f7:45:9a:9f:20:44:
3e:44:16:ed:50:41:d3:a7:2e:6f:b3:f8:9e:5c:6f:
f9:50:40:8b:50:c3:e2:90:3a:e0:df:4e:8b:b8:94:
ad:dc:e0:3c:d5:e8:e0:99:9b:71:eb:0a:ee:7e:43:
51:68:e1:ea:d5:52:8b:45:43:1a:d9:3e:f7:58:e9:
34:3d:60:99:c7:f0:8a:6e:1c:88:ef:e3:e4:2d:c1:
24:0a:31:08:54:f1:04:0e:25:4f:01:94:c2:76:22:
59:b1:a7:85:60:78:e4:43:e4:76:19:37:ab:fa:96:
06:ec:3e:08:b8:e2:9b:42:3e:ec:0d:22:97:a7:e1:
85:fb:0b:89:62:99:25:0f:08:be:81:0b:97:5c:61:
b4:24:8d:b0:e2:ed:c3:e4:54:21:c1:5b:b7:83:65:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5F:23:EA:62:C5:71:95:7B:01:70:B4:D0:5D:2E:C9:7F:6C:12:F4
X509v3 Authority Key Identifier:
keyid:A0:41:9D:46:09:2E:44:98:C8:98:0F:72:74:1D:C8:08:12:95:89:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ff:f4:26:eb:3c:ca:12:4f:63:16:2f:8d:b8:4a:08:d7:d8:
04:21:8f:f3:a6:50:a2:2b:61:a6:fa:e6:bd:a9:44:91:bf:42:
1d:9e:5d:82:a2:a0:4a:04:72:a5:d9:3b:88:f4:15:70:bd:0a:
6a:b5:ac:37:aa:30:ac:a7:cc:0e:a4:9c:22:5c:84:ec:b7:a6:
2d:c9:6a:e7:3d:d6:14:cc:d6:08:07:82:89:90:a0:52:70:19:
0f:f9:09:d6:6f:bd:6a:c7:58:b6:7b:a3:45:4f:77:44:3d:b3:
08:e1:08:2d:95:6c:8e:23:73:c8:af:71:6a:1c:26:eb:59:0f:
93:b5:71:d8:1c:9f:fa:f5:60:27:92:9f:0d:e1:ff:85:c5:93:
7a:13:18:5a:9f:b0:41:90:14:17:60:9a:d9:bd:b1:59:09:ac:
c9:84:89:c7:1e:b5:8b:a2:64:b5:43:a6:b7:53:09:17:ac:a4:
91:6a:89:1e:a7:11:f0:64:0f:68:ec:cd:e0:b0:b4:5e:8e:62:
aa:68:5b:98:5e:ac:24:3b:08:95:79:da:70:b2:34:04:50:ec:
80:14:ed:b7:b9:af:02:1a:76:a1:65:54:a4:33:2b:09:f4:58:
93:4f:d7:65:c2:76:03:bf:dc:99:64:76:f1:17:ae:c5:4c:06:
63:56:58:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:53:03 2026 by rpki-client