Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File: oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier: EFW6I17WsdMu3uQF088r92oZVzaKBqYTbe7bjJs4PqM=
Subject key identifier: 43:44:2D:AA:BD:4F:70:5E:88:A5:42:3C:2D:E2:90:8E:3A:32:13:06
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer: /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial: 01A0F1C35DB94EE53585C788F8887F958554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number: 0BD2
Signing time: Wed 30 Sep 2026 10:01:47 +0000
Manifest this update: Wed 30 Sep 2026 10:01:47 +0000
Manifest next update: Thu 01 Oct 2026 10:01:47 +0000
Files and hashes: 1: Mob9EPRgvBzo4H6hbqTT2HdD3JA.roa (hash: kvdg8wCS9egZQzAgHG4zTvTOgP+Bu8A9k8hcSeFomOA=)
2: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: OAlfzUkyLezj/Cm863zxz/mCfmz1kFUPzcchjLarYJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:5d:b9:4e:e5:35:85:c7:88:f8:88:7f:95:85:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Validity
Not Before: Sep 30 10:01:47 2026 GMT
Not After : Oct 1 10:01:47 2026 GMT
Subject: CN=43442daabd4f705e88a5423c2de2908e3a321306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:29:6f:19:5a:1b:15:b7:2e:5e:b0:a7:7a:
24:c8:58:52:71:f4:28:54:d8:ec:4b:91:7f:e4:46:
d0:c7:ef:fd:71:25:23:11:ad:bc:b2:2b:15:45:02:
a6:ec:9c:9f:8c:c9:9c:99:d1:40:13:fe:54:56:9d:
9e:f3:81:71:26:43:92:f6:65:b9:ef:36:c1:a7:c3:
89:c1:d1:ec:5f:5b:7d:f3:95:c1:e7:dd:a0:a9:42:
cc:80:09:d8:f3:a1:e3:35:ce:f9:94:66:2e:1c:40:
54:7e:17:76:62:96:57:44:d1:4e:33:9f:21:b3:ec:
9a:57:f4:4c:ad:a4:9f:7a:6f:c6:68:59:b3:c7:1e:
28:0d:08:f0:20:b2:70:a7:b9:a9:56:cf:e4:bf:ec:
8c:1e:90:38:46:47:96:bc:5d:50:70:21:47:20:88:
99:d1:59:47:9a:59:4b:73:9b:cf:10:9b:bb:fc:42:
f1:97:24:af:f8:8d:b2:6f:09:66:52:e2:5d:2b:e7:
d4:1d:c6:65:7c:e2:dc:af:d9:98:94:51:30:61:1e:
96:00:2a:90:c2:d9:dd:b1:b5:c8:fe:2c:bc:c8:07:
3f:6d:c9:fd:f1:31:74:b4:13:4b:d7:54:68:66:e2:
54:21:bb:33:7c:b5:e5:e9:ac:3e:0c:a6:1b:06:5b:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:2D:AA:BD:4F:70:5E:88:A5:42:3C:2D:E2:90:8E:3A:32:13:06
X509v3 Authority Key Identifier:
keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1b:30:c3:45:72:3f:dd:e5:79:2a:de:07:01:e0:f2:aa:8a:
e8:9b:d1:d2:31:3e:56:ea:f4:a6:bf:e4:38:c6:b1:9e:64:bb:
0d:2b:91:2f:ff:79:78:d3:f0:7d:c0:fb:e5:c2:f2:f3:54:ee:
2e:38:3e:d6:d4:c1:27:66:ae:ab:63:32:ee:78:af:aa:b5:a2:
f9:aa:b8:f9:3c:e9:bd:05:00:23:91:cd:06:b2:cd:92:be:d4:
65:d2:91:69:89:27:c2:f8:dd:64:fb:f7:e5:ba:55:ab:04:6f:
ef:71:97:ed:5f:1d:ae:29:12:3d:ee:c7:a2:62:a7:e4:63:18:
76:81:e5:66:db:97:97:8a:dd:ba:70:bc:aa:96:d0:f9:65:27:
53:87:bd:05:28:6c:0d:b0:ca:fc:3a:5d:d8:68:a0:3a:91:75:
27:6c:5e:d3:77:0e:5b:e0:96:51:74:78:bf:61:90:b9:6e:c0:
1d:c4:ef:c4:36:f7:46:11:ce:43:f5:f3:19:e4:10:90:02:a7:
18:aa:30:17:78:af:4a:94:5f:2e:a5:6d:24:1e:6e:7c:c5:21:
eb:37:c8:df:58:0b:2d:b0:50:2c:57:75:f4:df:86:e0:66:86:
66:93:78:73:5b:4b:a9:90:f8:0f:15:c7:c1:1a:2a:be:1d:2c:
10:d6:fe:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:29:46 2026 by rpki-client