Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
File: oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json)
Hash identifier: /hf7NU8sNjs3PzKQ5IZ2ti1jkTZabSfpEowWN4pPRuU=
Subject key identifier: 42:42:6A:45:E1:B8:50:8E:BB:0D:B8:32:24:03:A4:F8:D3:23:02:73
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 01A1013688658BD5AB62AF0BD25811394B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
Manifest number: 068F
Signing time: Sat 03 Oct 2026 10:01:53 +0000
Manifest this update: Sat 03 Oct 2026 10:01:53 +0000
Manifest next update: Sun 04 Oct 2026 10:01:53 +0000
Files and hashes: 1: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: p+w79pmV8zt/M88LXIXx/b++J7eMV9KMTyYlYMNCnmA=)
2: xE-BgKSVBYFhggPNmKsU1prxN0g.roa (hash: YpkmYJyHUw54oWyFNUMkFF7WgnbU7Uo2+GiNtKKeUKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:36:88:65:8b:d5:ab:62:af:0b:d2:58:11:39:4b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: Oct 3 10:01:53 2026 GMT
Not After : Oct 4 10:01:53 2026 GMT
Subject: CN=42426a45e1b8508ebb0db8322403a4f8d3230273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:72:8f:99:58:6b:e5:f5:31:6b:a4:12:e3:
33:e3:45:04:74:8f:87:42:cc:71:fb:62:a3:2b:3c:
97:2f:67:dd:20:13:19:89:a8:aa:27:7e:f4:ff:80:
c2:91:c7:89:c9:2d:db:38:1c:47:ad:7a:c1:01:3d:
07:74:97:f7:c2:95:b9:68:2d:42:fd:04:64:b2:66:
89:c1:69:9e:66:10:3b:af:b8:a6:ae:af:c8:09:bd:
ed:e4:6f:53:00:7b:37:14:1a:64:e1:6f:83:e0:d2:
35:27:c1:a4:f3:1f:e7:84:2e:7f:5c:fd:c6:97:05:
1b:ef:2b:f7:96:47:9e:16:17:bc:52:16:b0:7b:e5:
13:d9:60:61:e3:cc:0c:4e:c8:26:c2:99:cc:4a:9b:
7c:68:37:27:fd:05:17:87:05:db:32:1f:e0:c9:2f:
7f:6c:79:45:e1:53:aa:99:2d:9d:73:d0:ee:63:85:
8b:10:bb:66:49:62:de:12:be:4d:e4:31:06:fc:be:
e5:ad:93:84:23:e3:ca:84:e1:ff:32:22:f0:64:d6:
c9:91:1c:4c:3d:37:4c:96:af:59:0f:a4:ab:3f:03:
1a:86:e2:65:2f:47:08:dc:cc:0d:ab:db:7b:b6:1c:
32:88:cb:78:f8:2e:7f:7d:27:62:2e:13:88:df:94:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:42:6A:45:E1:B8:50:8E:BB:0D:B8:32:24:03:A4:F8:D3:23:02:73
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f6:c3:8c:a2:52:7e:be:79:94:5d:6f:d2:e1:b7:48:ef:60:
91:ea:95:e0:37:8a:de:3b:10:33:66:42:ae:f6:99:69:af:5d:
34:f8:db:a2:ae:28:f9:18:06:96:49:5b:0f:de:33:8e:01:32:
30:0c:01:91:a0:ad:88:39:0c:24:e1:77:ac:1f:e8:cd:76:67:
3d:9a:5c:6c:5c:8e:bf:7e:29:7f:57:de:21:49:09:67:e6:e0:
3d:2f:34:a0:3b:20:f6:11:7f:0d:08:6b:08:15:ad:98:0e:64:
72:b3:47:45:20:69:6b:9c:08:fc:40:aa:af:ea:72:f0:71:5d:
3d:a9:ec:a9:b6:0e:c5:ed:c5:b5:da:12:11:63:2f:8a:4e:a4:
35:4f:34:cc:57:f2:f9:aa:79:50:4d:b1:b9:76:c5:ad:b4:7e:
e5:6e:41:ae:25:b8:19:bb:7e:6e:fb:72:ff:8d:47:d7:a8:ec:
52:e1:18:95:1c:ef:3b:48:22:6c:a8:5b:3a:37:50:1a:67:50:
c4:58:70:15:bb:4d:f3:d6:0c:d2:ba:2f:41:d9:c2:94:3e:a0:
f7:4a:95:8f:58:ee:24:fe:c8:49:19:d4:e5:bb:6d:22:44:f7:
47:78:9e:c8:a1:f6:e4:e9:dd:00:66:03:e3:2c:10:08:4d:ed:
49:19:5c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:53:42 2026 by rpki-client