Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
File: oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft (raw, json)
Hash identifier: lIKo23b/YiimVN/QYh65Xo0rPHVoWWU18se1hIyPTVM=
Subject key identifier: 1D:37:BB:3A:7C:16:08:43:46:70:31:8D:67:45:AC:1C:0B:5A:42:B2
Authority key identifier: A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
Certificate issuer: /CN=a06bd308f743288af4cc2119973ec8dc028937f0
Certificate serial: 01A0D538D612F67DE22E69BE3C7D483BA3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
Manifest number: 01DE
Signing time: Thu 24 Sep 2026 21:01:06 +0000
Manifest this update: Thu 24 Sep 2026 21:01:06 +0000
Manifest next update: Fri 25 Sep 2026 21:01:06 +0000
Files and hashes: 1: TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa (hash: XJE7IcrW6rhvGDyAahOo4XtEMNvbsvjLkV3AEh+8sYU=)
2: oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl (hash: Hvk7HDldU2kC0VySQYoRU9Zw5S/IPlP8PnMXC4Hca+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:d6:12:f6:7d:e2:2e:69:be:3c:7d:48:3b:a3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06bd308f743288af4cc2119973ec8dc028937f0
Validity
Not Before: Sep 24 21:01:06 2026 GMT
Not After : Sep 25 21:01:06 2026 GMT
Subject: CN=1d37bb3a7c1608434670318d6745ac1c0b5a42b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:40:4d:86:cf:2a:14:ef:3c:0e:63:21:8f:
d9:02:21:88:62:d4:a3:12:84:b5:b9:cd:8e:97:a4:
69:f1:ae:e3:c1:8f:7d:71:43:86:f4:3c:56:26:ec:
05:66:31:8d:04:a5:24:72:cc:c9:76:39:dc:94:3f:
a9:7e:db:81:46:de:ce:73:a5:a1:21:eb:57:f5:ad:
7e:20:5d:f2:65:a7:b3:4f:e8:27:3f:73:c2:89:7f:
64:d0:81:ca:9a:4c:59:b5:7e:24:5d:37:96:ee:8f:
65:aa:d5:8c:c7:a1:ab:ab:1a:d5:cd:81:03:c9:8c:
d0:21:f4:93:e5:04:fc:62:ad:eb:c5:48:d3:ff:c8:
9f:26:d0:ee:28:72:ae:5e:a0:fe:73:69:d7:69:a4:
bc:7d:8e:29:03:13:64:f3:c5:84:d2:64:10:86:0e:
6f:61:89:90:3d:31:71:a9:3b:d9:58:59:aa:6c:c7:
14:cb:4a:46:dd:a3:bb:3c:21:b7:ae:5e:03:15:a2:
5f:e6:5a:e4:3c:52:f6:8b:84:0d:11:ab:37:c0:cc:
93:19:a4:61:1b:ca:07:bb:36:57:d5:f9:a9:3c:33:
cb:9e:b1:18:fa:1b:3d:ea:75:a8:2e:db:4e:88:38:
e7:23:75:73:94:13:38:ec:b8:b8:6d:ec:c8:d0:e9:
d1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:37:BB:3A:7C:16:08:43:46:70:31:8D:67:45:AC:1C:0B:5A:42:B2
X509v3 Authority Key Identifier:
keyid:A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:f4:21:50:f4:b0:4d:fc:03:b2:0c:ad:0e:d5:5b:10:75:cd:
f0:1e:59:a2:12:d4:1a:3d:c5:cf:1a:e8:21:09:2c:d9:69:b8:
ef:7b:ff:a7:1c:28:35:66:70:fe:02:53:a5:3f:84:17:48:e0:
5d:c3:cb:92:1c:bc:7e:19:31:63:9d:4e:83:3a:70:b9:21:e3:
82:46:6d:a5:dd:4e:2d:0b:a7:d0:14:82:12:bf:65:bb:cb:75:
1c:c7:9a:3c:a1:92:e1:9e:74:bf:f7:bd:75:43:05:2c:97:93:
be:b8:65:ef:f7:4d:97:8c:40:f6:01:68:07:aa:9b:fd:dd:23:
aa:96:14:f9:df:b8:cd:c8:06:56:8a:cd:bc:a2:e6:d7:72:cb:
57:84:a9:af:fb:c2:ce:3a:c2:ea:94:c3:7f:08:64:9f:a4:77:
fc:3a:6a:af:a6:33:c8:cb:7c:43:7f:42:e3:54:ba:2f:2b:84:
c2:77:8c:87:2d:69:92:c3:b8:76:68:01:7b:c7:6f:20:5f:c6:
6d:df:c7:f4:57:f6:ad:7c:3d:5d:23:78:85:4c:5d:83:fd:43:
ef:00:52:b5:c2:18:db:8d:da:f0:33:84:bc:f2:fa:e4:6b:9b:
af:bf:44:8f:3e:5b:ff:b6:7f:62:d7:74:73:f5:90:1c:84:f5:
7d:48:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:55:17 2026 by rpki-client