Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: gIufCyM8i6x1NHVBh/Dm5xSgv+MQZk66E/OHgajkXJs=
Subject key identifier: 2C:3C:5B:37:9B:DE:28:CF:26:20:92:C5:28:A1:87:03:A2:0A:D1:2A
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 01A0F5687D7DC13ECD18CD2DC0EB594D75E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 09C6
Signing time: Thu 01 Oct 2026 03:01:00 +0000
Manifest this update: Thu 01 Oct 2026 03:01:00 +0000
Manifest next update: Fri 02 Oct 2026 03:01:00 +0000
Files and hashes: 1: AhYsuHNUbK8a0XunNi5rUoZZd74.roa (hash: +Iz4KrzXh/10Mx5yBgfEhonyL6CqUOw7mbJ6px2LQGs=)
2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=)
3: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: GwLFbZGd1s6S2FWfrK+kydcsZvBd3Szm8AWglUZW0YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:68:7d:7d:c1:3e:cd:18:cd:2d:c0:eb:59:4d:75:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Oct 1 03:01:00 2026 GMT
Not After : Oct 2 03:01:00 2026 GMT
Subject: CN=2c3c5b379bde28cf262092c528a18703a20ad12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:3a:ec:0f:b7:14:2e:c4:66:ba:c1:d3:28:
34:36:70:4a:2f:a1:04:24:78:3b:75:37:98:3b:21:
12:a1:be:54:a3:1a:0a:1c:95:fc:66:12:3d:dd:5d:
dc:7a:9b:bb:79:67:c7:71:26:3e:45:28:86:66:93:
e5:b5:e9:ae:ca:49:67:ba:0b:7b:92:5e:cd:8e:93:
62:46:f7:a6:1b:ef:57:93:2a:0c:0c:c4:56:2e:38:
fb:2b:2f:45:eb:25:6e:bd:93:53:f4:39:86:58:de:
25:2b:0b:7e:85:cb:93:a5:7a:64:40:c8:20:13:4e:
f0:f7:eb:7e:08:5d:6f:ff:e3:42:53:2a:a9:a9:88:
0b:16:af:2d:23:30:4b:e2:1a:3a:6e:07:37:95:9d:
5f:2b:10:0a:93:b5:fb:8d:27:bb:7d:62:fc:8a:bf:
bc:9a:a9:e6:d5:7d:b0:2f:29:51:e5:a3:e0:f8:f1:
16:6a:5f:e4:6b:e3:c5:14:fe:c8:17:65:af:c3:85:
4c:68:64:c8:86:46:6f:34:9e:72:f6:19:31:9c:5d:
2f:5e:74:6e:d6:db:14:ae:38:79:5d:2e:63:43:a2:
0a:4f:f9:da:7c:12:a1:7e:38:bc:73:2f:2e:1d:d9:
08:0d:40:83:87:c7:80:68:2b:a7:45:d6:d0:22:5c:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3C:5B:37:9B:DE:28:CF:26:20:92:C5:28:A1:87:03:A2:0A:D1:2A
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:43:52:39:2f:a3:7a:5c:9b:3f:1f:9a:30:14:19:ec:41:88:
52:9b:b8:3e:5d:e6:17:82:f4:5e:8e:23:20:0b:32:9f:a3:fc:
f2:d7:da:60:d4:0a:2e:e4:2d:7d:f7:96:65:3a:d5:15:32:ab:
c4:a5:4d:d8:d3:35:05:12:d9:74:92:a9:db:cf:b8:fb:de:c3:
4d:8a:e8:a7:c8:c8:48:30:0d:d2:f6:18:f3:8d:a5:0c:56:db:
8f:e9:37:77:54:55:71:5b:e3:cb:e5:a8:d9:05:a5:3b:59:d2:
2c:8b:c1:54:07:d9:49:70:bd:12:6c:38:00:bb:97:1c:64:19:
9f:9e:81:4a:e8:e3:f6:27:4c:a8:ec:a6:38:cf:fb:db:b0:7a:
55:cc:7a:0d:c6:30:f3:fd:d2:4a:ef:9d:9c:ef:df:f9:85:a2:
9d:05:d4:b6:d5:51:df:b2:21:7e:b8:d9:2b:ff:0e:22:bd:f5:
45:b0:d7:b8:a0:ba:fd:8b:6d:10:4e:8c:cb:61:d3:27:4c:e2:
45:74:7a:91:34:7c:e7:7a:19:70:80:af:c7:38:2d:f9:61:5b:
cd:5a:1a:db:1a:02:1e:37:95:20:3e:14:54:1d:00:24:59:62:
a0:1f:87:20:d2:12:f3:d2:91:c1:91:0b:d3:c0:cb:6b:a3:59:
ac:cd:d4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:56:52 2026 by rpki-client