Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: XYVzOGSgw2Ob8nYEx+Gsa7JnrVuIT00xymcGkp9V0ZY=
Subject key identifier: 5C:FA:A2:DB:BE:F1:1F:63:62:DD:08:25:FD:8A:9C:85:04:21:64:02
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 01A0D2A64AA55D54A2B7051555CFD54DCCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 09:01:48 +0000
Manifest this update: Thu 24 Sep 2026 09:01:48 +0000
Manifest next update: Fri 25 Sep 2026 09:01:48 +0000
Files and hashes: 1: iwdbfX3VeEC-dJ7spuyrMGzAZEA.roa (hash: rGk72/1YdyFUc4NyU+VKerIA+XWmcskQTcATzTBlTBs=)
2: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: nYtu21WIdR+m9YZbuN4XDqPaDSQPV/rjGfyJ8ibumfA=)
3: sLLmkteo_FcFXMtUJhw6fFKVofY.roa (hash: a9XJ/mxkvDOm7bLMm8792DO+WjUzGL25z/Umu2rG3g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:4a:a5:5d:54:a2:b7:05:15:55:cf:d5:4d:cc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Sep 24 09:01:48 2026 GMT
Not After : Sep 25 09:01:48 2026 GMT
Subject: CN=5cfaa2dbbef11f6362dd0825fd8a9c8504216402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:3a:47:50:11:91:3b:85:c1:44:6b:2b:70:
3f:f4:36:18:b4:4d:bd:04:e6:b6:57:25:e5:c2:a4:
d7:2f:d1:35:e0:85:4e:2b:6e:94:af:4d:c8:ec:81:
21:4b:9a:ee:7f:88:74:01:9f:4d:af:f7:9d:3a:dc:
f4:2f:b9:31:c8:81:f4:78:fd:02:93:09:e7:03:a7:
f3:0b:a1:d3:83:21:85:01:fc:90:a2:0f:16:a5:a6:
cb:e0:9d:9f:a3:6b:6e:06:84:16:41:89:d8:5f:72:
e6:ce:3c:e6:80:1c:81:4c:34:4a:65:96:0f:ad:bf:
a5:58:07:31:a0:f3:1b:70:9b:ca:04:58:90:2a:8e:
33:72:86:84:46:16:44:cd:2a:70:4d:fc:a1:0b:d3:
c1:9b:8b:22:83:1b:20:6b:90:81:a1:b7:fa:c9:1c:
13:13:b2:e7:9e:77:6a:15:09:c1:b0:26:d6:3c:5c:
71:80:18:25:b5:28:6c:c3:01:49:c2:56:0e:3f:a1:
83:12:51:01:d6:ea:24:38:23:85:94:7f:23:b4:94:
f6:37:16:cc:6f:a2:c1:68:f5:e0:62:b9:c3:23:d1:
e0:96:62:ea:00:ff:12:fc:9c:74:c9:8f:d1:2a:96:
17:9d:fe:36:f4:4d:44:38:20:4c:49:db:8c:fe:e8:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FA:A2:DB:BE:F1:1F:63:62:DD:08:25:FD:8A:9C:85:04:21:64:02
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:65:68:e6:cf:c3:6b:49:70:cb:4e:f7:b7:3b:ec:41:49:d5:
b0:7c:52:e1:f8:f1:8d:68:a7:60:97:40:cf:7d:01:a7:fb:d7:
e5:45:2e:0d:fc:30:26:df:03:cb:a7:9f:e0:71:aa:58:59:59:
1c:dc:3c:c6:3e:a9:4c:8b:7a:25:b4:74:99:20:04:31:0e:49:
55:b9:e6:0f:60:2c:e3:c9:5c:85:2d:b0:69:80:c5:32:c5:7a:
de:99:ca:93:40:47:7c:bd:53:d6:46:cc:f5:b3:b0:e8:2c:44:
f8:01:cf:77:b2:bd:cc:1c:79:e3:e2:a8:b8:d5:e4:4d:31:26:
a8:ee:8d:f0:d8:4d:68:51:e8:9e:72:3f:a1:de:a7:d6:1e:43:
a8:62:af:d1:fb:18:8f:3b:f6:87:a1:e5:ab:e6:c7:5a:75:4b:
f8:c2:c2:1e:ab:c2:53:21:00:d4:b5:33:f2:5b:aa:9d:2f:9b:
f8:8a:bd:66:03:5e:c2:17:ed:97:cb:6e:38:e9:7b:6d:f6:44:
a7:91:6c:e0:1c:a2:13:66:58:a3:d7:d3:b9:a0:65:3b:21:4e:
7a:55:d0:6c:06:43:0c:e6:10:1d:01:75:44:0f:f3:6c:5e:9a:
aa:fb:21:e3:85:8f:69:9d:4b:0b:8b:e3:63:21:89:f5:7a:04:
aa:0a:6f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:12:09 2026 by rpki-client