Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
File: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft (raw, json)
Hash identifier: 4f/sQMZw4nAkOhn5/mvT72IBRFzs27BWEZlv10hX+4o=
Subject key identifier: 8A:FD:8C:83:B1:FF:19:2F:68:96:D1:C5:A9:8F:6A:C8:C5:3D:AD:DF
Authority key identifier: A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
Certificate issuer: /CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Certificate serial: 01A13CDC662FF2EC4D87DC32BDE5F53C02F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
Manifest number: 0833
Signing time: Thu 15 Oct 2026 00:00:39 +0000
Manifest this update: Thu 15 Oct 2026 00:00:39 +0000
Manifest next update: Fri 16 Oct 2026 00:00:39 +0000
Files and hashes: 1: mRzXoHd1mByeqxe7zEzrQOkUywA.roa (hash: 8SKmwd2mxeGHXUa+EavAITPtq3W4rgD8HwfvXh+DLAw=)
2: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl (hash: kgpxHf3o0WTSni3JdzGyHk47XVxhrxyYN86fYHP+jSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:66:2f:f2:ec:4d:87:dc:32:bd:e5:f5:3c:02:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Validity
Not Before: Oct 15 00:00:39 2026 GMT
Not After : Oct 16 00:00:39 2026 GMT
Subject: CN=8afd8c83b1ff192f6896d1c5a98f6ac8c53daddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:f7:ab:2f:f5:d9:d9:2a:93:ae:19:2e:8f:
0f:9c:76:a0:d7:ef:1f:67:dc:32:4c:e9:be:d5:00:
f2:a2:25:b1:80:17:06:a1:80:9f:5b:55:84:76:ed:
60:02:c0:30:20:c4:30:3c:ca:98:8f:f9:fe:e3:49:
f1:94:d7:3d:95:bb:5a:21:02:94:c6:1c:fd:29:5d:
4d:b2:b6:61:20:cb:55:ef:98:54:83:b9:57:92:a0:
1f:48:77:33:93:64:34:8c:18:31:ce:70:f5:1d:6c:
b0:29:bb:8b:8c:53:1d:97:7b:ab:19:54:1e:86:01:
93:38:f7:7f:e8:b5:17:09:9c:eb:04:10:10:7a:65:
27:7b:1e:5e:d4:4a:a1:da:0c:bc:9a:b8:df:d5:d7:
e3:e2:c9:51:f0:2a:95:1d:f4:68:01:20:95:9e:68:
87:56:c5:b5:07:db:93:62:ad:b8:de:d5:d9:1e:f7:
35:53:9c:de:20:72:76:6b:94:b1:b9:7a:e5:b6:d5:
7e:1c:61:2b:6d:9b:0f:3f:f7:e2:dc:e0:9e:96:08:
e5:e1:a4:e9:74:1a:2f:9c:03:fc:ca:60:e4:c7:dc:
77:15:d0:3b:14:bf:63:c6:c3:f5:80:ae:a8:8a:f4:
15:09:63:a6:13:e8:50:52:eb:12:e9:00:a7:b7:7a:
1c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FD:8C:83:B1:FF:19:2F:68:96:D1:C5:A9:8F:6A:C8:C5:3D:AD:DF
X509v3 Authority Key Identifier:
keyid:A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9b:98:e4:11:a5:46:23:e7:7b:7f:77:27:bd:b0:e7:0a:0e:
c3:5e:bd:89:76:88:05:0e:d1:2b:7b:2b:30:17:af:c2:00:cf:
fe:cb:a4:2f:41:25:b8:df:8b:4a:6e:b8:d3:75:3b:ab:58:1e:
c7:1b:87:99:d1:6c:51:72:49:40:9a:07:a3:74:e4:ee:af:f6:
8f:98:90:63:b2:7a:12:1b:95:38:b9:00:41:6a:86:c1:31:45:
81:0a:a7:88:33:96:29:43:6a:1a:3e:41:eb:a1:0c:08:e7:2f:
7b:88:98:93:72:24:22:fe:8c:7b:95:0f:08:40:da:97:1a:00:
09:ce:5b:14:b3:8e:83:80:7d:20:05:51:cc:e4:db:24:5f:50:
ee:47:81:40:9e:58:09:12:0b:97:2e:04:c8:9b:45:68:85:ab:
01:d8:31:19:58:bb:ba:6e:be:88:ec:36:5f:eb:0a:60:58:b6:
e3:30:39:2e:49:d4:b7:9c:24:ba:84:8a:5f:a6:92:89:a0:d7:
25:a0:55:57:3d:0f:f0:02:54:3c:fa:b5:c4:80:39:1e:7f:f4:
30:30:89:86:71:ce:6d:d3:02:8e:86:14:d0:0d:77:fc:03:a9:
28:52:d1:0d:1e:be:7a:20:d7:13:91:f3:47:cd:53:ab:a9:54:
86:f3:17:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:29:16 2026 by rpki-client