Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
File: oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft (raw, json)
Hash identifier: 8Imx5Vjys1S43i5RKZzEe7dR6XGRpQzJIrIZ7ESekNs=
Subject key identifier: 44:4B:3C:A0:D0:95:CC:37:2C:44:47:44:1B:83:7A:82:24:96:30:C9
Authority key identifier: A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
Certificate issuer: /CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Certificate serial: 01A1DB0206B6EA22C25763F1565D251F7FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
Manifest number: 0214
Signing time: Sat 14 Nov 2026 17:01:45 +0000
Manifest this update: Sat 14 Nov 2026 17:01:45 +0000
Manifest next update: Sun 15 Nov 2026 17:01:45 +0000
Files and hashes: 1: aPHgHDs8wZHtsWjj-BGNDzZUqVw.asa (hash: xCblPYPS0g+4wFl3k4nN7Rdc1pcGx5xLzvzdxGTb7kU=)
2: oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl (hash: zt7WZggJa0fNyNS9DQjyHtnfCqbstNk44Fm4tZTRlcE=)
3: rfnpKAqIl3YHBE0u0rKLog4npJ8.roa (hash: e2aXB5iCVJvKeAcAsidwehVczzB3FZGwEfrPbuvBxKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:02:06:b6:ea:22:c2:57:63:f1:56:5d:25:1f:7f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Validity
Not Before: Nov 14 17:01:45 2026 GMT
Not After : Nov 15 17:01:45 2026 GMT
Subject: CN=444b3ca0d095cc372c4447441b837a82249630c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:80:b1:62:4e:24:a5:5f:0f:2a:28:e3:dc:
93:8c:ff:bd:6c:25:1d:11:a1:28:bd:38:12:54:45:
c5:10:3a:1b:a0:de:51:f0:cc:e0:e2:7b:c0:6a:32:
1e:1f:18:d5:81:75:16:ce:74:08:ad:03:0e:f5:c1:
cd:09:c6:8d:67:48:99:8f:39:b1:ff:7d:de:37:f6:
f8:b7:9c:61:fc:8e:87:8a:71:1e:e2:6f:40:89:75:
3b:c1:7c:09:01:31:eb:2e:f7:56:55:2b:85:5a:e0:
11:e6:91:ad:dd:b8:9a:f0:ec:97:38:a4:f2:59:81:
20:ba:00:09:03:a2:80:e4:e1:65:c7:86:30:40:86:
67:69:12:67:4d:0b:08:2d:b5:0b:22:7d:d8:b2:69:
3a:37:76:6f:5d:92:03:ca:2b:fe:92:90:f7:79:3c:
9b:32:6c:21:14:fa:19:73:c6:25:83:1e:8b:c5:a3:
f3:4a:15:b8:03:49:0c:a6:ec:a8:12:a2:99:58:47:
99:69:21:93:ab:87:e2:97:c8:1c:6d:1b:74:a5:ad:
8c:87:e8:65:72:0d:23:29:d7:4c:01:91:60:07:91:
a7:9a:2a:06:52:9c:72:a0:42:80:44:be:61:1a:5e:
aa:57:62:d2:39:c7:9b:34:6a:86:d0:68:0e:59:72:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4B:3C:A0:D0:95:CC:37:2C:44:47:44:1B:83:7A:82:24:96:30:C9
X509v3 Authority Key Identifier:
keyid:A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:49:36:eb:72:62:f9:93:05:8b:f3:f9:12:c1:d3:a6:3d:91:
fd:cb:10:ac:ab:02:df:c0:f5:d9:5c:09:45:fd:b3:68:7d:3d:
22:5a:10:e2:bc:76:d3:d7:67:f4:b9:73:2a:63:31:16:60:2a:
dd:b9:6d:08:b5:27:b1:0e:14:42:9a:61:99:6a:51:f3:00:22:
23:09:58:2f:36:19:5f:5f:91:4b:70:7f:e3:dc:d1:86:27:cc:
f1:4f:a7:09:b1:09:58:ce:35:76:d2:e5:0f:84:87:fb:d9:78:
42:a4:3a:c9:a6:bf:12:27:40:b7:ac:ae:e0:18:1f:59:2a:51:
00:df:d1:50:21:73:97:25:19:c8:ef:23:b0:86:3a:dd:41:93:
53:89:23:07:e5:6f:6e:07:cb:ea:18:9b:72:34:27:d7:8b:53:
5a:98:e3:0c:e5:20:45:4f:bf:60:92:da:2e:8d:1e:d7:f5:2f:
ec:c1:bb:d7:fa:74:d9:8d:26:36:83:b8:8e:eb:4d:3a:fa:7e:
4d:90:9e:8b:97:8a:d5:28:d9:2e:b2:01:d6:42:e4:f6:63:74:
d9:58:00:b6:f7:56:bf:61:a2:71:86:64:ae:57:a1:eb:d4:7c:
df:29:37:66:31:8e:a6:3f:0d:70:c6:a8:e6:18:ab:8e:97:59:
5f:0e:95:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:54:39 2026 by rpki-client