Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: GyHqA30pzYW7iRkgO7Cw98SLMjUkE29WoJ0C70QMmSk=
Subject key identifier: 6D:31:DF:9C:7B:DD:C7:28:BE:E2:F4:D9:7D:DC:9D:4D:AA:12:95:5D
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 01A0F29F178BDF7688D2B4FB3FBCA980D5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 1A7E
Signing time: Wed 30 Sep 2026 14:01:47 +0000
Manifest this update: Wed 30 Sep 2026 14:01:47 +0000
Manifest next update: Thu 01 Oct 2026 14:01:47 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: 2BoLRS2GJC/9Bz3WKJrJAMnY/fpUgc/UJhYRnhTXP7g=)
2: nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa (hash: WwxgQJEoxT9RlD+HkKWEjQjejeBr0IIFvMv1CfM5j4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:9f:17:8b:df:76:88:d2:b4:fb:3f:bc:a9:80:d5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Sep 30 14:01:47 2026 GMT
Not After : Oct 1 14:01:47 2026 GMT
Subject: CN=6d31df9c7bddc728bee2f4d97ddc9d4daa12955d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:e9:f3:af:1b:e0:c7:6e:c3:10:56:6e:bc:
45:ae:bd:ad:a4:73:b1:06:23:0c:23:a9:5a:8a:a3:
e7:30:26:9e:c1:8c:e0:2c:ef:62:cd:c7:7f:99:c4:
f5:e9:c0:18:eb:59:26:9f:48:21:e7:3a:82:86:48:
db:d8:60:28:a6:40:7d:dc:9f:4d:40:28:e5:4b:c9:
3a:ca:12:d8:5c:ff:14:47:ab:71:f5:43:bf:dc:80:
27:66:9b:19:49:2b:5e:2d:0a:0a:1c:c4:54:45:91:
24:bc:10:45:52:4b:d6:05:7a:01:c2:d2:b2:99:bd:
71:5b:0d:f4:84:56:65:46:ee:ff:80:fe:de:93:8d:
2b:dc:df:b6:2f:df:3e:ca:e8:fb:f7:75:92:5f:a6:
25:32:f3:e4:77:2c:2b:0b:ab:3a:fc:93:e5:3c:80:
37:47:8a:8a:81:6e:69:52:53:f4:1b:65:ba:94:c0:
04:22:b2:83:4c:53:01:89:c7:69:77:21:cc:e6:cd:
e8:ef:22:ae:b4:80:07:20:c4:1a:35:82:ce:c1:e4:
4b:7c:a3:e8:4f:7a:8f:95:4b:77:ae:43:9b:b4:ea:
b9:48:3a:c8:59:74:99:6f:55:1d:09:f7:95:91:ac:
70:f3:23:7c:5f:3c:15:2c:93:37:1f:54:83:b2:34:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:31:DF:9C:7B:DD:C7:28:BE:E2:F4:D9:7D:DC:9D:4D:AA:12:95:5D
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:67:e5:7a:04:35:7d:a7:d9:6d:dd:be:5a:d5:e7:01:66:e8:
f7:24:42:35:12:22:55:16:c0:1f:3b:9d:09:b9:bf:6d:a4:29:
79:3b:70:82:ab:bc:44:49:2d:68:0b:9d:09:bf:a5:6c:81:16:
9f:98:e7:63:a7:97:f4:c9:a1:26:a8:05:57:c0:98:48:45:5e:
de:06:8a:c3:a5:ca:4c:ab:3e:3b:2e:1e:6e:ac:74:ea:c2:b1:
24:b7:e3:27:39:a3:9b:0f:63:b3:5a:84:53:94:80:4e:5c:b2:
fc:71:fb:24:8f:77:3c:c4:44:6c:cd:a6:d9:d2:a7:a6:b2:43:
4a:2e:77:69:36:ff:69:c4:49:60:da:f9:ad:cf:43:ec:32:5d:
43:c5:ce:be:4c:ad:24:8b:b0:f5:fb:02:8d:89:a4:b0:3d:79:
af:d7:e2:12:a4:5c:f6:39:d2:fd:cd:27:a3:75:38:30:de:28:
26:e0:e2:0c:16:ee:d7:08:1e:e6:97:b3:cc:ff:db:f0:b1:81:
94:b9:0c:50:ec:bf:d7:66:45:cd:c3:ca:b0:40:a9:00:38:80:
d2:97:18:1e:11:80:2d:c3:5e:da:33:82:c8:76:8f:d9:6e:10:
2a:ab:0b:9e:7a:e1:3f:5d:a2:63:83:ce:5d:62:bb:39:9c:30:
5b:68:c5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:54:34 2026 by rpki-client