Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: Na8Kh/NwNaVr90u9NhaoUUCb3/CHbEwWvAkr48yDEB0=
Subject key identifier: 03:A4:A7:A7:3D:17:FD:31:11:C3:F7:E9:00:ED:1F:54:6B:34:F6:4A
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 01A10F95915B7F74C5BA3222A03896277953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 0AC3
Signing time: Tue 06 Oct 2026 05:00:22 +0000
Manifest this update: Tue 06 Oct 2026 05:00:22 +0000
Manifest next update: Wed 07 Oct 2026 05:00:22 +0000
Files and hashes: 1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: mwaJ8/VXh887+YBmJFy4Np5J0asV8yxbf/+cGWSri3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:95:91:5b:7f:74:c5:ba:32:22:a0:38:96:27:79:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Oct 6 05:00:22 2026 GMT
Not After : Oct 7 05:00:22 2026 GMT
Subject: CN=03a4a7a73d17fd3111c3f7e900ed1f546b34f64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:be:a9:2c:75:60:92:a7:71:0c:c4:63:e4:
91:e7:37:7a:f3:97:d5:50:be:26:b9:43:e5:ee:45:
af:a4:ec:f5:09:88:02:00:50:8d:af:fe:1a:1c:80:
3b:33:5f:5e:ed:de:10:07:b7:ae:71:b5:39:7e:91:
db:85:2d:8b:dd:64:86:d8:28:3a:fd:07:66:9e:a2:
43:a0:0a:03:ff:4f:0e:a5:d0:b9:15:c4:de:fe:ad:
56:d6:d0:12:a8:24:0e:fd:43:94:f2:05:cc:f8:8d:
2b:07:85:53:f0:41:21:3d:48:b0:b0:64:5b:d3:a3:
c6:0a:17:8e:f1:d9:c1:a2:cf:77:bf:60:3f:82:ad:
65:e4:25:01:39:63:b8:22:cd:31:65:4c:2f:c0:70:
2b:0a:f2:c5:a4:08:0e:9a:40:ec:3a:d7:e8:30:5f:
ce:be:f4:cb:1c:a5:00:87:98:ac:db:e4:2e:79:55:
2e:a5:b6:97:4b:48:8d:8f:21:c5:47:28:c1:e5:3f:
06:bb:63:5e:c7:99:9a:71:a1:28:c4:64:44:8e:db:
f2:45:30:97:e9:ab:28:56:01:92:8d:7a:d4:02:e2:
d0:49:6e:e7:28:21:ff:37:f8:e8:ed:3c:b9:44:55:
bc:48:73:95:75:d2:83:34:54:f1:83:67:41:01:94:
8e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A4:A7:A7:3D:17:FD:31:11:C3:F7:E9:00:ED:1F:54:6B:34:F6:4A
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b0:84:28:7d:69:52:55:71:c9:8e:ee:78:f5:bb:38:54:53:
a4:2e:e0:af:5b:18:1f:76:04:53:b9:e6:af:0c:96:a0:1a:2b:
b2:a3:fb:1c:ba:db:77:f1:ca:54:43:fa:f7:77:d8:ea:2c:3b:
f0:e4:dd:2b:a4:21:0c:e2:c5:66:cd:8b:9d:3c:28:bf:2f:10:
07:82:94:7c:a6:65:84:0d:a8:86:eb:10:2d:9c:6e:c7:03:d3:
d0:45:a1:5e:be:2a:ed:0d:b1:34:1b:b0:ce:71:00:0f:0d:4d:
53:6e:61:45:53:2c:af:6c:ce:5d:38:73:e2:1f:86:49:d6:fd:
3b:55:7c:ab:7b:09:e4:63:3a:46:eb:9c:00:27:ec:61:4a:f9:
be:37:19:67:33:0c:7f:82:e8:8a:1d:71:6d:f2:fe:c7:bb:db:
65:06:8c:71:36:e8:45:11:11:0d:b9:e9:21:d1:16:28:f4:dc:
33:27:9e:57:70:52:a9:43:09:81:39:f0:dd:e5:e1:51:08:9a:
bc:b4:87:f8:56:da:9d:18:c7:0e:ce:09:87:ff:7c:11:ff:7b:
09:91:09:a5:d6:80:a7:10:94:5e:ce:59:cc:5a:78:e6:f0:a1:
10:fc:94:5b:7c:8b:15:47:b8:ec:bf:75:6f:8b:4d:c9:b5:45:
ee:b5:6a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:16:18 2026 by rpki-client