Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
File: oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft (raw, json)
Hash identifier: kXXeNqa/PakmqN0seTWL4uCqriF2cGwfBN//feMLVeI=
Subject key identifier: CB:7E:C6:BF:31:59:86:DC:D2:C7:C3:01:B5:70:8D:CE:99:1C:AD:09
Authority key identifier: A1:87:2F:51:32:98:C3:00:A4:6B:41:B9:AE:62:E4:86:9E:93:B7:4C
Certificate issuer: /CN=a1872f513298c300a46b41b9ae62e4869e93b74c
Certificate serial: 01A0DF868BB3C6B48C86559C496C2E1AF4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:02:11 +0000
Manifest this update: Sat 26 Sep 2026 21:02:11 +0000
Manifest next update: Sun 27 Sep 2026 21:02:11 +0000
Files and hashes: 1: 3tTUOt9tIqClY-Pcn5ixcWgVkHs.asa (hash: 9PxpYct4ZYiB2ZINKKmfgomCpciPW9Ne+TgfTCByrxM=)
2: oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl (hash: idUQkeuOeiKYs+iS+7DrHN0ljb/aVNAtQJjfgibNlzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:8b:b3:c6:b4:8c:86:55:9c:49:6c:2e:1a:f4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1872f513298c300a46b41b9ae62e4869e93b74c
Validity
Not Before: Sep 26 21:02:11 2026 GMT
Not After : Sep 27 21:02:11 2026 GMT
Subject: CN=cb7ec6bf315986dcd2c7c301b5708dce991cad09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:4b:44:04:ce:e0:07:b8:9f:9d:96:7b:8d:
c3:cf:77:91:90:fe:5b:00:fb:ad:42:93:08:31:89:
b1:20:71:37:55:9c:17:fd:5d:f2:75:46:a8:b6:d1:
65:b6:b8:fc:a5:3c:55:27:86:e7:68:ab:56:b1:d7:
77:9e:90:b6:02:8b:b1:5b:f7:75:71:c2:da:72:7c:
bb:48:7d:6b:b3:ef:49:07:7f:3e:27:16:5a:43:8e:
ef:9a:bd:23:46:e5:80:ca:43:3a:23:d7:82:94:51:
29:3d:80:db:3c:f3:27:10:4a:a5:76:dd:96:78:19:
8f:00:39:ca:09:ce:54:04:fa:56:5d:92:22:e4:24:
70:22:b2:85:8e:a2:93:de:60:d9:43:8a:46:ca:94:
7f:86:38:46:39:5a:18:78:a0:06:4d:ee:91:0f:35:
d0:ca:bb:d7:d4:c3:4e:10:0a:48:3a:ff:90:b7:08:
8f:df:bf:61:14:e6:65:5b:1f:91:c2:4c:64:94:b2:
6d:4c:66:19:9d:8d:5e:a5:8d:ff:1c:fa:66:3f:f6:
da:cd:81:c0:e3:95:13:fa:09:4f:60:45:88:81:c2:
89:15:c2:03:a7:33:dc:1b:9c:e5:cb:c7:22:63:1a:
af:21:9d:2b:64:9c:8c:37:d9:79:e1:75:0e:e5:25:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7E:C6:BF:31:59:86:DC:D2:C7:C3:01:B5:70:8D:CE:99:1C:AD:09
X509v3 Authority Key Identifier:
keyid:A1:87:2F:51:32:98:C3:00:A4:6B:41:B9:AE:62:E4:86:9E:93:B7:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b8:54:d3:73:07:b5:f9:94:68:fc:52:c2:65:95:c4:e2:cf:
03:03:f3:8f:98:4d:18:ac:94:84:37:29:7b:b0:ce:4f:88:4c:
94:f6:d1:a3:d4:74:bd:7a:19:8d:2e:77:bc:8d:af:b4:16:e2:
63:2e:a4:ec:e7:ce:39:33:eb:cf:58:5b:32:dd:a8:83:06:f7:
45:0b:40:59:90:21:e5:1c:30:4c:78:43:96:3d:16:9a:f3:bf:
49:cf:77:72:33:a6:e2:d8:8a:5d:92:f8:54:22:c3:93:82:74:
f7:78:3d:0f:97:49:cc:f8:a6:6b:05:02:f5:9c:83:4d:e6:62:
91:6b:3c:81:97:f5:ae:00:6d:f4:ab:7d:8c:6e:85:c4:83:ec:
b3:67:de:e7:3c:48:72:f1:ff:3a:0b:36:eb:96:44:09:c9:cb:
0d:4b:e2:4d:b8:15:cc:ea:09:9a:dd:bb:ed:e5:c5:18:49:9e:
af:fe:73:54:a7:da:22:ed:53:4c:74:74:2a:c3:5c:29:e6:36:
5f:3b:02:3d:1e:e2:55:94:ab:81:26:fe:6a:dc:3a:4a:be:e5:
85:64:47:ce:3b:15:8b:1a:cb:6b:3b:15:df:95:2f:12:94:a0:
8e:6f:1e:b4:88:fc:ca:c0:97:99:5a:9a:9d:5f:9a:ee:84:25:
14:f1:12:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:17:06 2026 by rpki-client