Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
File: o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft (raw, json)
Hash identifier: 8KqIL6h346Odaihe0+/UwIVJ+5T/KM1D0Q0XKiuVTYQ=
Subject key identifier: C1:B2:82:C8:2A:A1:25:D2:7B:BA:C2:40:78:97:FD:53:D6:48:40:AC
Authority key identifier: A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
Certificate issuer: /CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Certificate serial: 01A0CA4747FEE8F88C13F44805FDFC174D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:04 +0000
Manifest this update: Tue 22 Sep 2026 18:01:04 +0000
Manifest next update: Wed 23 Sep 2026 18:01:04 +0000
Files and hashes: 1: V7RlhBqRdFHnFoFKubNeYK3a_5M.roa (hash: YvfqxwL6yWgifq6rmEH5uPSg0BfD7f+oaBIAHta6WNA=)
2: o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl (hash: RptEXuGgyfoNkVYNQu/cpGN3U2LHY5aylgMp/d61RnE=)
3: ylN60AZhnKa9fysVT9Ct3y5pIEg.asa (hash: vR5tYjzsZcCd1G4IMkymwkD1U1eYDXZY3+cXITuftZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:47:fe:e8:f8:8c:13:f4:48:05:fd:fc:17:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a5cbf1c29e0219d0d9ebe1182621cca8993069
Validity
Not Before: Sep 22 18:01:04 2026 GMT
Not After : Sep 23 18:01:04 2026 GMT
Subject: CN=c1b282c82aa125d27bbac2407897fd53d64840ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:4a:b2:90:af:a3:cf:cf:8f:a3:ed:e8:fa:
b2:cb:cb:28:61:df:84:f0:4a:b9:62:66:ad:de:99:
e8:f7:7c:b9:79:73:4e:81:b8:2c:90:d4:fb:69:4b:
76:cc:dd:35:70:b3:77:a2:4f:af:4d:69:5f:3b:25:
6e:7a:bd:4b:41:fa:ef:5f:2b:1e:7e:30:7a:6c:1b:
1e:1a:a4:f3:f6:d4:8e:02:42:39:83:a2:3d:90:8a:
81:8c:f9:e2:36:51:2a:7f:51:7e:2c:e3:61:f9:e8:
d4:cf:50:8b:7a:fc:14:be:d4:51:dd:e6:2e:29:a2:
39:b0:cf:14:ef:3f:38:58:f6:68:af:ce:86:9b:ee:
2c:10:10:6e:34:4b:d3:d9:1d:b0:73:3e:a3:08:b0:
ed:44:92:21:4f:ba:b6:6b:9c:81:63:28:37:e9:72:
65:30:cd:05:6d:77:8e:9a:ec:7f:52:7c:b6:73:ff:
c6:ee:c7:93:3f:97:43:a2:c7:b3:ed:6d:20:13:05:
1b:d6:46:f6:cf:0d:0a:c7:33:43:8f:6b:63:f9:1b:
09:af:69:77:9a:e6:23:3d:40:ff:5e:a7:95:55:eb:
91:96:d6:1d:09:e9:7b:15:bc:5e:0a:53:69:db:03:
cc:1d:8f:26:d6:eb:4b:40:e8:e7:45:55:ba:25:7f:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B2:82:C8:2A:A1:25:D2:7B:BA:C2:40:78:97:FD:53:D6:48:40:AC
X509v3 Authority Key Identifier:
keyid:A3:A5:CB:F1:C2:9E:02:19:D0:D9:EB:E1:18:26:21:CC:A8:99:30:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6XL8cKeAhnQ2evhGCYhzKiZMGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/o6XL8cKeAhnQ2evhGCYhzKiZMGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f4:48:98:70:0a:56:a7:38:33:f2:27:a1:23:57:d2:9d:5d:
0b:fa:79:66:66:dd:49:13:86:e5:1f:30:d9:85:fb:26:b6:2b:
d7:19:68:50:70:76:12:95:ba:e6:07:6e:83:9e:66:0c:03:b0:
fb:7e:14:10:47:e9:7d:41:cc:d2:2b:28:c0:85:cd:b7:67:83:
7e:ef:a0:0d:0d:d1:6e:28:d1:cc:fd:8c:56:93:fb:27:b3:ba:
8d:70:07:6a:33:c0:31:07:65:8b:67:ac:7c:d3:c7:fa:d6:f3:
15:be:94:81:b4:47:48:3b:a5:5e:80:7d:a2:52:64:24:19:16:
e6:4a:e2:a0:57:80:b0:03:cc:4a:d1:6b:55:fd:a2:fc:a7:63:
6a:24:86:31:b2:09:ea:37:a1:46:ca:1a:e0:29:e2:0d:9c:28:
4f:36:26:4a:e6:d2:bb:6b:e2:61:1b:89:48:c8:64:2d:6b:a8:
fe:ed:c9:57:a9:41:0c:ed:68:0e:be:d1:19:dd:9e:f9:61:ba:
f2:33:71:cb:db:6c:98:33:03:d7:48:c5:55:96:15:a6:b3:e2:
70:c3:55:2c:4d:35:22:27:ba:d2:a3:13:ff:06:19:c1:ac:c4:
05:53:ca:f1:cd:80:eb:6e:ea:b9:a2:33:01:ed:a9:6b:42:ad:
9e:e3:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:10:34 2026 by rpki-client