Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.mft
File: Oi05yYtAVrNsu_aIXo_dblcPzIE.mft (raw, json)
Hash identifier: 7NRHp9JH1v9hGbimlcjRigZjid3hP8xNIHoAAvWesFQ=
Subject key identifier: 22:DF:DA:0F:65:01:7A:64:05:C1:0C:F5:2F:6A:E4:C4:FC:8F:E1:7A
Authority key identifier: 3A:2D:39:C9:8B:40:56:B3:6C:BB:F6:88:5E:8F:DD:6E:57:0F:CC:81
Certificate issuer: /CN=3a2d39c98b4056b36cbbf6885e8fdd6e570fcc81
Certificate serial: 01A0D12492921BCC964CFD43A6593DC763CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oi05yYtAVrNsu_aIXo_dblcPzIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.mft
Manifest number: 61
Signing time: Thu 24 Sep 2026 02:00:29 +0000
Manifest this update: Thu 24 Sep 2026 02:00:29 +0000
Manifest next update: Fri 25 Sep 2026 02:00:29 +0000
Files and hashes: 1: L8ht9E8DcXzWCPeSSyyZ36n8uB0.asa (hash: aLGxu4UYr6iu82UJ+37AS1m8rImlWGsXHrpCEYFbFSk=)
2: Oi05yYtAVrNsu_aIXo_dblcPzIE.crl (hash: cN8APmEkKL/lh8zXx2d9NsI/ecS/kEINIYQO5sLxkVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oi05yYtAVrNsu_aIXo_dblcPzIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:92:92:1b:cc:96:4c:fd:43:a6:59:3d:c7:63:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a2d39c98b4056b36cbbf6885e8fdd6e570fcc81
Validity
Not Before: Sep 24 02:00:29 2026 GMT
Not After : Sep 25 02:00:29 2026 GMT
Subject: CN=22dfda0f65017a6405c10cf52f6ae4c4fc8fe17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:46:70:75:2c:3a:de:a2:47:98:bb:ff:1b:
90:7b:9e:76:3b:54:bd:e6:40:bf:d0:a6:7b:5f:88:
62:f2:b9:63:74:c9:89:9d:a1:bd:cc:b0:c9:a3:d7:
41:84:2f:a4:80:2c:8c:e4:d1:0f:cc:6a:be:70:37:
74:dc:26:3d:14:49:18:dd:bf:eb:2d:8e:40:a2:2c:
59:a7:c1:a8:77:92:7d:b2:ef:2c:e0:c8:c6:46:36:
32:d3:d6:34:cb:53:de:9d:ff:8a:d5:d8:15:23:0e:
3c:26:f6:e4:b8:3d:ec:6f:98:66:18:f6:b3:cd:66:
e7:6d:da:08:ca:6e:6b:cd:cb:6b:1a:f3:23:75:86:
ee:53:66:db:31:dd:f8:cf:38:d1:79:2f:80:35:b5:
c9:eb:01:82:9f:f8:64:26:90:07:55:7c:93:b0:32:
dc:96:98:27:88:35:cc:55:41:a9:f5:dd:d4:ff:91:
92:10:8b:13:b0:f9:80:13:75:e9:75:8d:b7:93:5b:
51:76:cf:74:28:88:07:92:6f:25:70:ba:d7:ae:fd:
d7:d1:68:cb:9d:3b:f0:ad:83:8b:4a:c8:0a:d7:8f:
a6:81:b2:c0:6c:79:54:a4:7f:77:45:ae:fd:79:3f:
01:a3:e2:7e:fc:28:9e:f1:1e:20:3b:bd:21:fb:4c:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:DA:0F:65:01:7A:64:05:C1:0C:F5:2F:6A:E4:C4:FC:8F:E1:7A
X509v3 Authority Key Identifier:
keyid:3A:2D:39:C9:8B:40:56:B3:6C:BB:F6:88:5E:8F:DD:6E:57:0F:CC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oi05yYtAVrNsu_aIXo_dblcPzIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0490e1-dadb-4889-9fff-0f8c0ba15ca1/1/Oi05yYtAVrNsu_aIXo_dblcPzIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:38:e7:53:53:c5:e3:f5:c8:2f:5d:36:b0:43:67:39:df:04:
0b:ef:0e:db:eb:7a:b5:83:e0:f8:d5:ed:59:e1:ec:30:71:07:
74:99:da:d9:1b:34:4b:87:b9:58:a3:b1:29:3a:61:1b:00:33:
71:38:3b:0c:25:0a:01:a4:b7:46:48:c1:f3:7a:af:c1:05:d6:
ad:d4:9c:d5:7c:e4:12:81:db:a9:3a:ff:94:91:cd:3b:2c:33:
7c:4d:11:07:62:74:a0:fe:bc:8b:12:cb:63:90:aa:c6:42:2d:
1d:04:ac:a6:2f:0c:74:a8:87:d1:5a:44:2f:e6:24:28:2f:15:
1d:68:c4:81:06:26:be:fe:3b:bc:c7:f8:a2:d8:a0:39:77:b5:
c1:65:9b:52:18:d4:a9:e1:a0:7d:a8:18:49:91:f3:b3:41:64:
86:5a:b8:67:c8:10:81:8b:96:81:a6:f2:96:c1:98:3d:ce:31:
ee:6f:69:0d:c8:7c:a8:22:56:d3:28:f4:0d:51:72:2b:e4:a0:
21:40:a1:ac:1b:39:0e:53:5c:15:12:74:ad:1b:70:99:d2:15:
f9:e4:53:b0:1e:2e:24:c3:2d:75:36:63:4d:00:6a:55:24:99:
9a:42:21:bd:bd:a8:f1:ad:d7:82:2f:b9:ae:35:91:af:22:70:
33:72:07:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:02:04 2026 by rpki-client