Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: QFKRvOek+Z1NrdbJ0Ff8ioZ3PavkiYPtAPxvz1lAyvM=
Subject key identifier: 2A:11:0A:84:C0:F4:14:79:B6:5C:00:C2:A2:FF:BA:01:F7:C7:19:EC
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 01A0D4CB26879706AA85C8A181A2558853A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 0547
Signing time: Thu 24 Sep 2026 19:01:18 +0000
Manifest this update: Thu 24 Sep 2026 19:01:18 +0000
Manifest next update: Fri 25 Sep 2026 19:01:18 +0000
Files and hashes: 1: 0sunuK8mYCHK4l0By1mDKNLTXQU.roa (hash: Bp/kxKZVCpRcoYpimQ/V45yUfQ2UHcCMtSwdBAO1PEo=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: rCM01wLkj1KLUVRchyRSaODLtCP+l49uQMm5DFEcAQk=)
3: qxHzPA9O-8GpBxVTvr_9Ai6EB2w.roa (hash: GWiMwB08/vtuFeBPkac8MF40YEUg4abdNc1TrrvX9Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:26:87:97:06:aa:85:c8:a1:81:a2:55:88:53:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Sep 24 19:01:18 2026 GMT
Not After : Sep 25 19:01:18 2026 GMT
Subject: CN=2a110a84c0f41479b65c00c2a2ffba01f7c719ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:d6:5f:35:8f:ac:d0:57:cc:94:e8:57:d5:
ca:fb:ed:81:c4:11:08:0b:85:40:ae:8f:ac:f5:60:
2c:64:2e:c4:3e:7d:f1:cb:4f:54:e5:70:5c:52:db:
da:58:d5:e1:04:07:63:e2:1d:2d:07:9c:2e:21:e6:
3a:06:1a:dc:8c:a7:3d:fc:3a:de:c0:50:69:50:c5:
79:bb:f0:c2:a0:3a:d1:15:cf:14:e6:ca:78:99:37:
f5:1c:bc:6d:30:74:fa:81:b5:cc:3f:17:e2:f7:de:
da:87:f2:c2:7b:01:cd:2a:16:a3:32:d4:17:8a:f5:
0c:2c:37:97:38:6b:a1:d6:97:46:8e:d0:8b:85:c3:
f3:58:ac:5c:86:b6:af:7c:25:33:d6:ed:4b:c2:08:
56:de:9a:6d:6f:0c:d6:a8:bf:4e:79:f1:67:d5:b1:
24:5c:8f:03:a6:0d:cc:67:00:8f:f6:e6:50:da:d5:
3c:38:56:25:78:1a:73:b0:2a:62:57:43:16:22:9f:
ce:e7:81:6a:df:02:d2:f5:62:da:b6:c3:68:d2:20:
f2:7e:9a:2d:0e:75:6b:91:63:b4:c7:12:69:01:ac:
6e:fd:a1:58:66:5f:e6:d0:22:a4:69:35:35:3a:60:
39:5c:f0:c0:8d:99:52:31:29:8f:2d:f7:d1:00:bc:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:11:0A:84:C0:F4:14:79:B6:5C:00:C2:A2:FF:BA:01:F7:C7:19:EC
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:06:6c:68:f5:46:b0:2b:6b:8f:14:bf:69:fa:2c:83:81:26:
4b:3c:98:7c:32:cb:57:a6:1e:ff:b3:14:bd:fa:31:45:51:fc:
10:6d:1e:6c:47:40:c4:f6:a3:60:44:9d:7d:8c:94:cc:4f:b6:
7a:a1:31:ed:88:6f:ab:79:dd:85:4d:2a:85:79:1c:1f:1b:92:
a7:5c:ff:83:5c:0a:8e:6f:0d:4a:82:a2:75:d2:b8:94:b6:3b:
a1:8e:ae:5f:3d:df:d0:ce:90:ab:c6:89:84:ab:75:5e:26:82:
9f:c1:15:80:91:93:2b:ff:1d:9a:34:c6:73:d4:da:2b:9b:d6:
58:be:0f:f3:99:0a:65:d3:b1:ab:4d:68:39:a1:8e:0e:64:0b:
37:e3:42:47:b5:82:0c:a1:ae:e1:b9:c7:5c:27:3a:47:d8:59:
c2:17:ec:2c:56:ea:35:2a:24:9d:2a:27:09:fd:cd:c8:e9:6d:
b2:bc:63:24:ab:ff:b1:1d:b5:62:0a:a6:20:3e:68:98:18:e9:
54:df:0e:d5:bb:f6:4c:b2:9e:37:5d:2a:f3:0a:b5:75:3e:75:
4d:ed:bf:ca:67:fd:6c:3e:2e:47:e9:9c:2c:72:4a:e3:9a:0b:
08:c7:0d:a7:5e:d2:9d:99:01:39:11:30:71:9d:54:38:7d:07:
1d:d7:3d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:03:36 2026 by rpki-client