Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: NOlAjGvpSwAQLw2SsMf4F5kw19AyEMqnIN7EsRFl3yc=
Subject key identifier: EB:09:41:99:BF:40:B7:45:14:4F:5C:64:57:0A:C3:4D:1E:D2:A9:DB
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 01A0DD97826961EDC9EEE66C850D9858D856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 0601
Signing time: Sat 26 Sep 2026 12:01:29 +0000
Manifest this update: Sat 26 Sep 2026 12:01:29 +0000
Manifest next update: Sun 27 Sep 2026 12:01:29 +0000
Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=)
2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: 0rwHQgy+WQuXg5rGoLDYvnWkL/hZcuY9q5M7bcOh5+w=)
3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:82:69:61:ed:c9:ee:e6:6c:85:0d:98:58:d8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Sep 26 12:01:29 2026 GMT
Not After : Sep 27 12:01:29 2026 GMT
Subject: CN=eb094199bf40b745144f5c64570ac34d1ed2a9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:78:16:f4:18:ce:3c:60:ff:60:74:1c:e0:
f8:7e:7e:89:45:5f:e5:f6:8c:5b:ed:7d:ee:1d:b7:
ac:82:c1:89:62:7a:10:29:8f:a6:60:4e:3c:4f:9d:
f7:b6:8b:17:e7:de:a6:52:ac:4d:10:36:51:09:17:
cd:fc:ac:87:b1:0e:f8:f5:83:94:93:f4:cf:93:05:
49:d1:a5:0a:b4:33:32:90:e2:7b:d5:69:51:77:26:
71:b8:16:44:2c:69:77:2a:50:03:24:83:29:a3:a4:
f2:9c:b7:4d:97:ff:6a:7c:ae:99:d6:ff:89:48:8b:
1f:9e:61:c8:7f:b0:07:9b:5f:4b:c0:a9:09:e9:b8:
33:1b:ce:c3:9a:32:fa:b8:d1:73:dc:ad:6c:c4:fb:
bc:84:56:fb:9b:80:0b:58:0e:82:2f:17:0e:e5:5a:
5d:c2:ee:bd:15:ca:15:c5:c4:24:43:94:23:f8:e8:
3b:e8:24:ff:07:f1:08:57:15:f4:9a:46:43:23:32:
b6:6b:01:98:b9:a1:f7:6d:37:ce:24:30:60:24:e4:
94:24:9a:ce:1a:da:7f:2b:b4:28:bf:27:3a:15:7f:
8c:70:fa:e7:7c:b4:5d:1e:e7:9c:c3:03:2a:e9:b9:
e8:b9:b7:fb:ec:d4:89:8b:2f:05:4e:db:f7:ec:cc:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:09:41:99:BF:40:B7:45:14:4F:5C:64:57:0A:C3:4D:1E:D2:A9:DB
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:27:10:a9:e4:2c:0f:7e:77:27:c1:2c:8b:bd:58:ff:df:56:
50:28:a3:3a:54:34:df:8c:46:08:c5:d1:a1:59:6d:8d:5d:3e:
fa:08:db:b3:92:d8:41:3a:4d:a8:50:ee:09:92:6c:59:8b:ce:
75:b0:fc:d1:6b:cc:5e:b8:10:4d:b7:8f:08:d6:af:dc:10:d1:
62:8f:ff:a7:28:bf:58:66:ed:f0:23:c3:56:d6:60:9d:41:ba:
31:61:51:64:2b:60:e3:8a:89:a1:1a:6a:64:eb:e5:f9:2e:ef:
76:c6:1c:d9:de:49:49:89:40:68:48:2e:8a:93:cc:2a:ab:ce:
e6:20:95:08:79:f4:57:5b:2c:de:d3:35:68:5f:cd:5d:3d:fe:
27:7c:9a:fb:a7:0c:6d:c8:cd:0a:3f:5f:44:77:47:b7:c5:f3:
a7:bd:97:56:7a:d1:43:6c:1f:fd:6e:5a:4e:5c:5b:10:6c:ec:
a3:3b:f1:2b:19:98:86:ac:11:90:90:28:aa:d2:07:d8:27:99:
89:ef:13:0d:f8:81:8b:4c:3d:f7:15:b8:6e:00:7f:da:a1:d5:
af:f4:cb:7a:9c:5f:b8:14:21:56:31:41:55:25:98:30:9c:40:
e4:b8:c4:2a:25:38:79:e8:26:6b:9b:e8:cd:fa:d6:70:e5:f3:
5c:d9:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:28:44 2026 by rpki-client