Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
File: oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft (raw, json)
Hash identifier: L8p3IPJ+mQk0584VbuJRpZg2Zhynwh3JaeB6pOqFyhE=
Subject key identifier: F7:54:EF:F6:3D:2B:BA:56:75:8F:D4:E3:0E:46:BB:3B:ED:D7:BE:A1
Authority key identifier: A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
Certificate issuer: /CN=a06bd308f743288af4cc2119973ec8dc028937f0
Certificate serial: 01A0D7277DBE43307515CC69408039600D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
Manifest number: 01DF
Signing time: Fri 25 Sep 2026 06:01:24 +0000
Manifest this update: Fri 25 Sep 2026 06:01:24 +0000
Manifest next update: Sat 26 Sep 2026 06:01:24 +0000
Files and hashes: 1: TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa (hash: XJE7IcrW6rhvGDyAahOo4XtEMNvbsvjLkV3AEh+8sYU=)
2: oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl (hash: L5xkGU1aJBa2xvGIEgjeOrEo3+OBVXbp5GxcEp7swj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:7d:be:43:30:75:15:cc:69:40:80:39:60:0d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06bd308f743288af4cc2119973ec8dc028937f0
Validity
Not Before: Sep 25 06:01:24 2026 GMT
Not After : Sep 26 06:01:24 2026 GMT
Subject: CN=f754eff63d2bba56758fd4e30e46bb3bedd7bea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:49:58:04:cd:ef:de:78:15:78:c9:bb:fa:
25:4f:2b:7d:22:7b:9b:c8:c6:76:6f:3f:29:1c:6c:
00:df:22:ed:7a:cc:de:d2:1e:06:d5:a7:c0:bb:a5:
46:9e:35:e8:1e:40:ad:75:74:ab:62:2b:b8:17:7f:
f2:cb:f0:52:df:56:ed:ac:f2:38:43:33:15:d4:e0:
33:7d:f2:d4:59:ee:9b:59:18:77:d3:a0:09:1c:e5:
97:43:ec:f0:be:98:21:29:bd:69:cd:53:ad:12:46:
2c:36:d1:41:45:3f:d3:7b:fa:d7:35:ac:17:68:93:
7b:64:3b:c8:e1:22:aa:8f:17:92:51:c5:a4:63:03:
72:dd:90:24:c0:06:d7:fd:a9:53:6a:98:0d:fd:08:
bf:7b:69:64:53:df:f9:c6:79:ec:e2:55:25:01:f5:
a1:b4:a6:34:d0:f8:7b:11:57:57:ca:b5:fc:e5:46:
b9:63:ba:a2:a9:68:6a:10:f0:22:51:9c:d6:08:38:
09:51:f0:7e:9c:10:1d:2f:a4:fa:fd:9b:8b:a1:7d:
7c:0a:7c:62:29:18:1f:58:c2:e9:68:af:d2:4b:57:
49:39:90:7c:2b:d1:15:0c:43:78:73:ca:f3:16:62:
00:49:75:6f:0a:ef:be:22:d3:50:3d:8f:88:7b:d8:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:EF:F6:3D:2B:BA:56:75:8F:D4:E3:0E:46:BB:3B:ED:D7:BE:A1
X509v3 Authority Key Identifier:
keyid:A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:35:d1:39:84:de:99:b0:ed:53:20:e4:2a:e0:46:7b:19:ef:
12:8a:e9:02:9e:3f:e3:c4:35:8d:78:7a:6f:c2:f6:2f:79:f7:
37:0d:6b:19:a8:b5:3b:8b:af:d0:a8:72:8b:4f:29:db:7e:57:
73:92:c9:10:fe:20:59:5b:4e:3b:5e:9d:fa:84:57:57:2d:d6:
68:4f:17:12:b8:a9:61:ef:8e:de:17:3f:6d:c1:2b:65:5f:92:
63:b4:7d:43:96:a7:00:f0:23:27:cf:24:2c:7d:32:81:63:4d:
1b:be:c6:04:a8:e9:26:f6:8d:27:94:06:6c:3e:28:8b:93:81:
6c:bd:bb:2d:20:83:74:6c:d0:85:17:50:c0:d0:df:b2:87:0a:
be:70:1f:94:49:9c:30:48:47:a0:8a:f8:30:80:a2:a0:6b:41:
90:8b:01:4c:7e:d1:ef:b7:d7:bb:14:36:95:93:e0:7c:2a:ae:
6b:3c:50:88:94:37:a7:00:73:96:ed:4c:02:ce:79:2e:d4:8f:
39:9d:09:54:0e:a1:62:c7:66:9b:65:02:82:8c:cb:23:71:3a:
47:9d:5e:3a:35:6d:91:c0:18:52:e0:b7:27:28:6e:3d:da:ae:
7c:2e:02:c2:b4:8c:f3:cf:75:7d:eb:b6:8e:54:2c:10:fe:42:
d8:01:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:27:19 2026 by rpki-client