Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
File: oQIHcvYouPtR80dRNrd_60smmL4.mft (raw, json)
Hash identifier: qQf7AU1i7FtiO2z3HhJ4Ywn1ycp6tDS0eTR5zSZNNrk=
Subject key identifier: 9A:32:2F:04:5C:C3:A1:15:9B:7D:C1:FD:1C:AE:AB:3B:27:31:DD:BB
Authority key identifier: A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
Certificate issuer: /CN=a1020772f628b8fb51f3475136b77feb4b2698be
Certificate serial: 01A11F76FCB9A568E77979ECABF2237E5217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
Manifest number: 16DD
Signing time: Fri 09 Oct 2026 07:00:53 +0000
Manifest this update: Fri 09 Oct 2026 07:00:53 +0000
Manifest next update: Sat 10 Oct 2026 07:00:53 +0000
Files and hashes: 1: hyDLxp-YatfS001VZEVLL1vX8oc.roa (hash: 1H/AL2H8aeO5E6Omvo64CNw6HNYXqHAE8+uJ/gd3b5E=)
2: n38Xqr0qqFJ7oGfHYhb-VaYtVsU.roa (hash: +D4AMbYExvYotaGN2taivxR0S26uQ3AxgVQRHrzxbnw=)
3: oQIHcvYouPtR80dRNrd_60smmL4.crl (hash: o8aJ1UAv8eALUzINXLCE3wLyuoLLdVHfzCwQ5/bqSZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:76:fc:b9:a5:68:e7:79:79:ec:ab:f2:23:7e:52:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1020772f628b8fb51f3475136b77feb4b2698be
Validity
Not Before: Oct 9 07:00:53 2026 GMT
Not After : Oct 10 07:00:53 2026 GMT
Subject: CN=9a322f045cc3a1159b7dc1fd1caeab3b2731ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:73:f4:a3:ef:60:28:d8:f2:72:e2:a3:66:
2a:06:1d:8b:0d:e4:82:40:a9:dd:3a:2a:22:f7:d2:
f1:b1:45:6a:e4:40:48:1b:ad:d5:d0:77:b4:d2:62:
31:c7:5c:e6:9f:6c:01:90:7b:2c:0b:f5:5b:cf:98:
00:97:56:0f:49:34:97:88:8e:e1:fe:5c:9b:dc:37:
72:7b:84:5b:69:68:8c:8a:d2:e3:a8:90:64:eb:f6:
28:7f:ee:ea:86:c9:88:ad:6f:58:0d:a5:d7:a5:6e:
89:de:b3:b2:0b:07:44:6c:be:51:4b:d2:07:6b:c4:
74:6f:6b:8e:b5:e8:17:b8:58:d1:f7:97:b1:4f:9c:
e8:ce:c0:96:1f:6b:a0:61:a4:4c:4e:67:30:4c:2a:
39:67:be:3a:4e:30:24:b6:d3:fe:74:a6:eb:93:b6:
59:74:30:da:d2:6d:41:a0:d1:92:47:59:d9:89:90:
54:e2:61:24:39:ce:9e:c6:75:26:a1:12:1e:61:71:
55:ec:d6:0f:71:4a:e4:15:35:f0:d0:3f:91:52:1f:
dd:62:e2:fd:d1:fc:82:89:19:76:c6:e5:8a:29:7b:
aa:a7:56:49:92:46:6d:91:d4:95:27:3f:ca:3f:c1:
0d:3f:63:60:56:d0:f0:8e:37:6d:1c:20:7d:fc:c8:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:32:2F:04:5C:C3:A1:15:9B:7D:C1:FD:1C:AE:AB:3B:27:31:DD:BB
X509v3 Authority Key Identifier:
keyid:A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:90:2d:b1:26:33:c0:a2:17:73:fd:10:a0:2d:c7:1f:da:b6:
85:87:b3:64:25:04:cc:17:cc:2e:ab:23:48:ef:54:b0:fb:75:
44:f8:8c:8a:13:96:1c:ed:95:5b:60:d0:36:db:ec:ba:88:9b:
95:24:df:2a:89:a8:b7:fb:63:bf:45:45:33:a2:d6:6a:ce:1f:
b7:a6:00:ba:10:c8:4c:bd:13:7a:24:c2:6b:d5:45:c6:e3:34:
91:9d:38:e8:ba:db:22:be:0a:f7:22:ab:42:14:99:e3:da:b3:
3a:2f:7d:92:05:00:3d:12:aa:c6:fc:67:26:e9:52:39:56:9b:
f0:70:8d:79:79:39:e8:bd:84:01:c5:8b:4f:ed:09:eb:e0:d4:
06:cc:d0:73:46:8f:ec:de:ca:c0:5b:c4:fe:d0:75:cf:65:c2:
7d:d8:57:e3:7e:ee:37:bc:1a:56:b0:b2:35:e1:ca:93:3a:f9:
34:4c:97:e0:9d:96:c7:a2:89:81:42:db:a7:a1:1f:6c:ad:6a:
b5:ec:b1:8c:d8:83:be:f4:fb:99:df:b0:c1:ee:67:fd:3f:99:
fd:c9:d1:57:f4:0b:13:72:3b:66:ff:38:83:48:0c:59:3e:66:
eb:3b:b2:6b:0a:ef:47:e3:18:89:7e:b7:c9:0c:5b:87:65:43:
b1:72:ea:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:57:42 2026 by rpki-client