Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier: HH0pJBxKEhSi/uwXjjkNQ3KeiAiMgEwEddYHZWtVBOo=
Subject key identifier: A0:B2:C4:A0:E4:7C:3E:34:F2:F0:51:4E:6E:61:58:AB:4D:55:0D:AE
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 01A1DE39843C4420DA4B12E283C294B76BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number: 1394
Signing time: Sun 15 Nov 2026 08:01:13 +0000
Manifest this update: Sun 15 Nov 2026 08:01:13 +0000
Manifest next update: Mon 16 Nov 2026 08:01:13 +0000
Files and hashes: 1: l6dD6_YwYG2GoAyCwVNIGTIWyF0.roa (hash: mR/Sx8Gef6jaLXJaUX0OcwA84CHIBBS3pL7jXOr7b50=)
2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: dLNJllohOneYSNX2zMR29Xy8Bu1A7H6I/9vToFqxnMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:84:3c:44:20:da:4b:12:e2:83:c2:94:b7:6b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Nov 15 08:01:13 2026 GMT
Not After : Nov 16 08:01:13 2026 GMT
Subject: CN=a0b2c4a0e47c3e34f2f0514e6e6158ab4d550dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:e7:34:3a:74:aa:4a:ea:fd:49:a7:a8:50:
ad:5b:cb:c4:91:c3:cf:e9:08:d9:c7:98:e8:6b:86:
a9:7b:ee:6f:a7:94:4a:cf:b8:f7:fc:a5:5e:a8:6a:
68:cf:0c:39:f9:00:2d:ef:a3:32:a5:59:89:7e:9b:
74:94:87:a9:06:87:ef:09:f8:48:85:1c:ed:a5:bd:
0c:77:30:55:16:8b:0f:13:c8:f2:09:84:fd:31:ed:
57:5a:cb:b4:da:81:3a:e3:14:34:8b:c8:51:87:67:
d3:6b:95:46:76:e0:e9:e4:d5:39:e1:89:ad:7e:5f:
74:4c:27:53:e2:93:a3:bc:1d:94:3d:98:f6:a6:d3:
80:3b:7d:d9:bb:c7:4b:32:7e:3b:80:fe:e5:e6:52:
e2:ea:7a:56:74:69:7b:80:71:80:0f:2c:4d:1d:d4:
ca:9e:7d:c4:64:c5:15:78:0e:77:29:06:f1:e5:61:
18:2c:48:a1:d3:63:4d:c6:27:4c:b6:90:e5:c2:ae:
a2:76:40:a6:56:05:f6:33:e6:c1:66:cd:ae:42:43:
fd:28:f6:cf:75:ba:ec:5c:bf:e2:3a:f5:cb:c3:a5:
8c:07:5d:8f:64:d2:87:61:66:c6:38:0b:a4:f5:7e:
04:9e:f1:0c:12:ae:a7:94:2f:3a:2a:e3:d6:59:e7:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B2:C4:A0:E4:7C:3E:34:F2:F0:51:4E:6E:61:58:AB:4D:55:0D:AE
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f6:81:40:8c:14:8b:ad:d8:33:3d:bc:e4:c0:84:7d:82:90:
1c:31:6f:a1:55:13:56:70:b0:d3:a7:a4:62:b4:6a:34:56:1a:
66:5e:6f:c2:33:1d:58:b7:9b:3a:02:b6:b5:7e:45:0f:ba:1c:
fc:94:d8:ea:a0:f6:e0:ec:92:4f:ca:cc:07:ff:e0:31:24:16:
4b:4b:fb:0a:07:dc:d2:f7:26:f7:33:be:d6:11:a3:de:2d:a8:
15:fb:e8:24:c7:58:71:81:54:92:39:37:e7:2a:dc:67:ef:d3:
98:65:36:ef:00:07:fe:49:ee:e8:49:ef:03:81:cc:8a:d5:fb:
c3:6c:0f:01:a2:e4:29:56:9e:18:d7:e5:8c:25:a1:ac:09:99:
e4:2c:73:96:cb:65:15:34:0b:9d:18:98:53:ee:db:96:8a:d1:
d5:03:f8:15:82:81:ba:d4:10:67:bb:45:56:19:a1:08:9d:b1:
00:b1:8b:2a:3a:fc:2f:21:2f:ab:ae:b7:96:3b:04:64:4a:68:
84:ba:db:1b:82:bb:9f:e2:62:59:36:78:9a:19:a1:45:4f:50:
af:fb:d2:67:ab:54:e5:37:cd:04:6b:52:7c:b8:c5:a8:ae:96:
aa:1c:72:f2:eb:51:ab:a5:03:7f:ad:57:cd:12:66:a1:1a:14:
85:af:45:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:04:33 2026 by rpki-client