Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: Z3QKqFIGVk3SI7mjIXwCx2LLjbzM4TnPjD1QS5SNIWE=
Subject key identifier: 0C:76:3C:8A:2C:C5:92:BF:1B:BF:84:E1:98:B4:2E:93:B0:7F:05:20
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 01A1DCEFEE40CCD9A4C631630DB46691A279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 02:01:13 +0000
Manifest this update: Sun 15 Nov 2026 02:01:13 +0000
Manifest next update: Mon 16 Nov 2026 02:01:13 +0000
Files and hashes: 1: acv-v2eHqlrCvjloaRGiMlCidZI.roa (hash: oC/VXdmhm0cHY+VKvZYv7E0OaLtC7J/ULHsMcrTf+MI=)
2: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: V5PSuyZm0fkZz7ERDlCHSzUz4Z7Q1/9dhaU32KX8ooY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:ee:40:cc:d9:a4:c6:31:63:0d:b4:66:91:a2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Nov 15 02:01:13 2026 GMT
Not After : Nov 16 02:01:13 2026 GMT
Subject: CN=0c763c8a2cc592bf1bbf84e198b42e93b07f0520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:14:f1:74:d1:90:de:b5:b1:08:29:f8:6d:
e5:31:56:2d:83:6b:48:21:91:ca:5d:6e:99:11:c5:
04:99:90:fe:40:5d:40:a7:25:cd:03:b7:88:3e:16:
b7:11:4e:9c:99:22:92:1b:7b:e4:b3:e1:13:0e:ac:
51:f4:fd:d2:51:04:ac:72:9f:02:38:f4:ca:21:77:
ed:e4:eb:ba:fc:a8:07:48:97:d0:6c:74:9d:ce:0d:
ec:05:61:f3:4f:de:d6:b8:0d:22:3f:2d:d5:48:0f:
93:9f:2e:42:da:24:87:e8:e2:28:a5:87:52:64:3a:
59:c0:ee:b9:1e:c5:16:c5:cc:cf:14:c0:f0:a1:2d:
c5:74:53:58:b3:f9:51:05:42:8c:c4:1d:dc:dd:7b:
12:cc:64:10:29:80:f3:f0:02:6b:43:67:fe:b2:76:
89:72:2a:59:8d:24:45:8b:7b:94:de:51:a6:21:d8:
08:22:fd:2c:a5:a0:aa:1e:06:70:a1:93:9c:8e:df:
d7:79:51:75:d3:47:cf:e4:cf:0a:59:ff:af:97:24:
ad:94:74:6b:8e:8e:08:ec:6c:34:b8:59:11:30:22:
20:1d:8e:00:ca:ae:ef:77:0f:6f:57:29:22:c6:f8:
dc:43:de:70:a5:8f:30:5e:6e:61:fa:e7:5f:48:4a:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:76:3C:8A:2C:C5:92:BF:1B:BF:84:E1:98:B4:2E:93:B0:7F:05:20
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:34:4e:bd:fb:21:3b:34:81:3f:c8:39:6b:8a:5c:45:2b:b4:
a6:d7:3d:60:4b:8a:35:5a:fe:18:c2:09:6f:94:14:5e:b7:6d:
72:4e:d7:36:ef:46:97:da:24:88:2b:ea:63:2f:8b:87:73:7c:
b9:cc:ec:37:59:be:b4:5f:e1:28:9d:a4:ec:3a:5c:18:aa:81:
00:10:96:07:f4:66:0b:13:42:56:b2:c9:d1:f5:80:06:29:0a:
20:ad:d2:53:0b:74:6a:b1:a3:a9:96:ee:94:dc:a8:c7:78:29:
59:a7:e4:0b:69:21:53:bb:9a:5a:c8:6c:28:34:44:14:b7:da:
8b:6d:46:8c:b7:ee:24:85:ee:7c:1b:de:51:24:63:97:f4:55:
12:78:15:6d:76:45:67:58:59:89:b8:11:b8:da:53:1c:e9:26:
94:ee:42:3f:8e:da:8d:23:99:a6:e4:97:f9:3e:0a:c9:d2:89:
9d:4f:19:12:aa:71:b7:88:e4:62:16:ad:11:fd:2e:e1:90:89:
d0:5f:26:70:be:11:6a:c2:98:81:00:84:88:db:7b:8e:a2:52:
37:42:27:8d:0a:08:f9:c7:70:aa:42:1e:cc:73:78:2c:20:21:
fb:41:fc:38:de:8f:3c:4f:93:d5:d5:4f:6a:ed:b1:10:6a:c0:
63:ab:82:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:10:09 2026 by rpki-client