Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier: Rk6f+38QyMbszFAnKQzGOwoCnspZWrz8ayQpLuA5RF0=
Subject key identifier: 7B:40:6F:23:E6:46:E7:27:52:24:A2:6E:D1:F8:2F:83:4A:B5:57:AC
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 01A143F220B217E747F904D01D28F2D23F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number: 168A
Signing time: Fri 16 Oct 2026 09:01:43 +0000
Manifest this update: Fri 16 Oct 2026 09:01:43 +0000
Manifest next update: Sat 17 Oct 2026 09:01:43 +0000
Files and hashes: 1: GhCvmgJfuG506WuiaBMBgDUJQZU.roa (hash: I8NuJF/bk5fAsj3b12qVIfzMf7umbiG0VV3yAbXwHJo=)
2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: RSDMU+32LrEKGLRqxysvjgYwI5u/KIxONa1V/pbdX3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:f2:20:b2:17:e7:47:f9:04:d0:1d:28:f2:d2:3f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: Oct 16 09:01:43 2026 GMT
Not After : Oct 17 09:01:43 2026 GMT
Subject: CN=7b406f23e646e7275224a26ed1f82f834ab557ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:3d:61:41:29:ec:0d:15:f9:6a:b5:a1:9d:
19:cb:c8:41:c0:66:17:af:bf:6c:79:c4:9a:77:a8:
04:4b:e6:e7:41:df:44:d2:16:9b:42:f1:fb:84:4e:
e8:45:49:f6:ab:71:a2:0f:84:18:2c:43:4a:fd:51:
30:14:bd:ae:85:e4:31:73:a1:ac:87:32:64:ea:9c:
48:a3:fe:4a:4c:87:73:dc:e7:5a:ad:45:9f:56:fa:
07:2a:99:00:a4:8b:e0:23:5c:a4:88:f9:e5:3a:6f:
81:16:ff:d5:bd:b8:e4:bb:53:be:1b:1a:de:ea:f2:
73:9d:46:79:ca:ce:c9:24:f3:35:e2:fa:e3:33:f1:
9c:d6:27:90:c8:08:e0:ef:fe:24:b6:27:45:a9:fe:
7e:d9:19:8b:5e:1e:25:3a:e7:f9:53:7c:1d:76:b7:
98:36:e1:df:64:37:78:74:6b:c7:3a:96:96:c7:3f:
fb:a3:d1:ac:48:23:12:f2:44:81:62:2a:e4:b1:61:
8d:8f:8b:a4:3c:e6:f6:b6:da:ab:9d:dd:a7:80:5f:
aa:98:2d:7b:d1:64:95:43:77:1d:9f:22:ad:af:8b:
ae:c7:ba:4e:26:08:9b:7b:23:36:da:45:8d:78:a1:
48:e7:49:0c:8e:42:99:19:ce:a2:c5:69:f4:35:be:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:40:6F:23:E6:46:E7:27:52:24:A2:6E:D1:F8:2F:83:4A:B5:57:AC
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6a:74:fc:7f:cc:47:74:05:1c:93:0e:af:af:e9:65:ef:ba:
28:e6:63:5e:0d:72:8e:66:58:cb:b7:fb:37:59:0e:2e:22:14:
33:03:18:74:1e:e7:8a:9c:f6:11:27:00:7a:ef:e6:0f:60:3a:
c9:d1:d9:66:a6:2b:12:b6:6c:89:a5:d7:73:83:d6:d0:1a:bf:
b7:82:80:43:05:bc:18:9b:8d:83:57:9f:f0:58:a6:ae:44:d4:
ef:5d:e3:ab:5a:1c:c3:cf:de:a0:68:a9:62:a1:dd:3d:46:57:
79:96:5b:ce:c5:f3:a8:8e:35:ad:4b:83:2e:c4:67:fc:22:1a:
ec:aa:9a:e5:01:9c:58:81:7b:01:ab:3d:3f:fa:66:ad:7b:b7:
76:e3:d4:29:18:31:41:c1:57:0f:dc:7b:8e:7f:b7:98:2c:db:
43:f5:3e:52:3a:bc:08:93:b3:41:4b:b4:6f:12:45:3c:b1:c7:
3a:2e:5c:88:3b:19:49:a6:a5:51:0d:e0:41:a5:53:2f:31:58:
17:f5:61:0e:70:85:9d:3e:12:3c:28:c4:fa:bb:6e:2c:e9:69:
c8:20:17:26:da:be:f0:a8:74:7f:e7:61:c9:30:93:35:83:52:
cc:5c:49:a4:d0:f7:d3:d9:a3:d0:b9:9c:bc:43:1d:50:e5:4a:
20:5e:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:24:43 2026 by rpki-client