
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File: oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier: /BMrME2Ud6D4CvFYjuGprSi1m2Dr4B0PVzVHyDv2RJI=
Subject key identifier: FB:DA:D7:32:4D:5E:41:DD:59:A4:60:33:7B:B0:3D:68:65:26:B0:99
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 01A0F11EC45171C337E77378E128232F6B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number: 1A7F
Signing time: Wed 30 Sep 2026 07:02:00 +0000
Manifest this update: Wed 30 Sep 2026 07:02:00 +0000
Manifest next update: Thu 01 Oct 2026 07:02:00 +0000
Files and hashes: 1: jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa (hash: QuobanihGf2Vt3kAlHWHavYrnvmF3ftRBf2VjsfIBoY=)
2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: OtXV7ewcL2GUoMS+ZI4wZcYYPzvgCS8+C5gKemrvQmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:c4:51:71:c3:37:e7:73:78:e1:28:23:2f:6b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Sep 30 07:02:00 2026 GMT
Not After : Oct 1 07:02:00 2026 GMT
Subject: CN=fbdad7324d5e41dd59a460337bb03d686526b099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:fa:0c:da:04:79:9a:6c:af:9a:dd:b4:c6:
e5:5f:2a:8f:97:37:58:ad:d4:65:19:58:9f:0b:9b:
2f:80:b2:32:19:c0:9f:3a:7f:c8:21:f8:4f:45:1c:
2a:7a:c1:c9:e2:61:5f:61:45:a0:b6:8c:b1:a4:d9:
7d:79:50:a4:b6:08:fc:4e:0e:a1:ed:a7:f4:f5:2b:
90:ad:b3:b5:95:f1:a5:de:d6:d5:b5:24:eb:7b:0a:
29:74:1a:72:71:c0:63:ee:bc:16:29:7f:9c:db:9e:
00:b9:57:7d:43:af:2b:b7:89:9a:8b:bf:3d:4d:0a:
47:4b:96:bc:28:fb:15:c3:4b:93:d9:79:db:c2:21:
1d:a6:87:d2:63:5c:99:f6:26:2f:95:33:4e:ac:b3:
b7:a9:ad:57:2e:91:80:79:4e:20:e3:e9:1a:b7:fb:
98:c8:63:3e:86:09:14:4a:90:cd:cc:0b:80:49:11:
f8:f2:3d:4e:07:86:43:a7:87:28:44:89:a0:e3:f8:
8f:df:bd:76:c6:29:97:8f:12:3c:6d:ee:cf:a0:0d:
e4:32:46:23:c8:5f:d7:be:b8:61:fb:c6:d2:b8:45:
1d:66:45:07:46:9d:02:44:fb:4c:01:6b:0f:06:32:
8b:00:d4:64:ef:f4:10:fd:2c:42:ce:6a:14:9c:fd:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DA:D7:32:4D:5E:41:DD:59:A4:60:33:7B:B0:3D:68:65:26:B0:99
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:43:b8:fb:c2:c5:28:89:b1:22:65:54:9f:39:71:f3:69:7e:
79:74:6b:74:ba:10:eb:69:e2:39:68:3e:d6:b4:75:83:c5:79:
ea:6d:79:24:dc:dd:43:f4:ce:0c:42:67:b3:39:26:73:fd:41:
b7:53:2e:62:eb:43:fc:06:8d:93:75:8f:6f:3e:87:da:bc:10:
f1:ec:64:73:88:5f:85:a1:48:3f:87:52:1d:ed:b0:73:5d:33:
57:4d:b5:37:2a:8e:db:0a:a1:c4:80:08:37:80:da:d3:70:ff:
f4:06:7f:da:d6:bd:23:66:45:69:84:bf:6f:31:8a:25:f1:29:
fa:c1:a4:a7:be:ed:e1:dc:c3:48:04:99:c1:cd:da:84:79:8d:
bb:c1:57:e5:f9:5d:99:b7:83:40:17:2d:45:56:a5:1a:d8:f5:
a3:8f:0f:4a:a0:93:79:36:a7:b7:87:98:77:9b:09:ac:e4:95:
dc:08:fe:89:6e:0a:d9:c8:c0:ab:ac:27:46:36:70:25:9c:43:
dd:99:dd:50:43:58:20:ee:fc:e0:ec:d5:01:69:d5:49:79:71:
ae:b2:a4:5e:a6:63:a1:45:97:e8:9d:5e:89:2b:ad:c5:24:8f:
da:25:2e:95:6c:56:c9:6f:93:d8:ff:40:2c:10:2f:bb:8c:d0:
71:ca:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 16:52:03 2026 by rpki-client