Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
File: oCbLucfoHNxJ0b6zRtutyR80rsE.mft (raw, json)
Hash identifier: Pk/2cjSwNyp9qy/s14aDxhKxgZTE5CkfFkZqXhz/oxE=
Subject key identifier: 53:1A:21:C8:C3:A6:FF:A6:84:5C:39:DE:1C:E2:B9:61:53:F5:4B:1E
Authority key identifier: A0:26:CB:B9:C7:E8:1C:DC:49:D1:BE:B3:46:DB:AD:C9:1F:34:AE:C1
Certificate issuer: /CN=a026cbb9c7e81cdc49d1beb346dbadc91f34aec1
Certificate serial: 01A10FCCD6C01F1CA75B5A28956219F9013C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
Manifest number: 0106
Signing time: Tue 06 Oct 2026 06:00:44 +0000
Manifest this update: Tue 06 Oct 2026 06:00:44 +0000
Manifest next update: Wed 07 Oct 2026 06:00:44 +0000
Files and hashes: 1: jKeaW7g3-vwDVoHOZK2KpCN1sWA.roa (hash: sqHWrvNe0MvxI2kDDh6irgL9TZbFavXwZmxBezSbKWU=)
2: oCbLucfoHNxJ0b6zRtutyR80rsE.crl (hash: AJSOw6lLQ3ZJllPXu/9dk8DCe5kaa5SKWuCWmVlvyws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cc:d6:c0:1f:1c:a7:5b:5a:28:95:62:19:f9:01:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a026cbb9c7e81cdc49d1beb346dbadc91f34aec1
Validity
Not Before: Oct 6 06:00:44 2026 GMT
Not After : Oct 7 06:00:44 2026 GMT
Subject: CN=531a21c8c3a6ffa6845c39de1ce2b96153f54b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:dd:18:18:7b:13:f1:7d:07:ca:dc:19:d0:
23:48:ff:ac:3a:1b:9a:97:eb:8a:9a:c4:e0:2b:6e:
b9:0b:ee:0d:03:48:07:38:c9:ec:b0:07:c3:3f:8d:
0c:f9:fc:b0:dd:4b:94:7a:6f:ad:d2:d6:e0:8c:97:
59:a5:04:8b:ac:1f:8b:6e:a2:91:63:1d:14:f6:e7:
bf:f9:d2:18:78:a1:1a:85:54:e3:fa:05:04:62:8c:
55:be:a8:ab:a1:bf:6a:c1:82:fe:e1:40:09:00:59:
25:a8:3a:97:37:8d:e8:09:6a:1d:ba:33:ad:89:98:
55:10:d6:22:5a:b0:f8:71:1d:d9:33:3c:0c:5d:90:
51:97:77:f4:8a:49:87:77:e8:0f:02:ae:ce:80:b3:
5f:d5:49:f8:fb:df:dd:a1:ae:98:22:af:1f:39:20:
f6:6a:f5:20:55:4a:b3:7e:90:7f:c6:3c:d8:24:b6:
a7:95:be:cb:32:88:c4:ab:94:31:d4:0d:95:5b:24:
9f:3b:e9:e6:0e:76:c0:74:21:c1:7d:3f:b6:13:c3:
1d:74:49:92:5f:fe:6f:ad:6c:2f:d6:0c:ca:9c:d5:
50:02:44:e6:10:d4:38:d7:52:b7:9c:a8:dc:32:8b:
4f:11:a6:00:03:7d:d7:42:ef:61:26:3c:7c:e5:3a:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:21:C8:C3:A6:FF:A6:84:5C:39:DE:1C:E2:B9:61:53:F5:4B:1E
X509v3 Authority Key Identifier:
keyid:A0:26:CB:B9:C7:E8:1C:DC:49:D1:BE:B3:46:DB:AD:C9:1F:34:AE:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4d:b4:51:66:eb:f7:89:11:9a:b5:fc:c2:1e:1f:4d:cc:82:
4a:35:c6:b2:7d:17:bc:59:ec:42:85:21:78:94:1c:6e:b1:a5:
74:6e:72:48:58:bb:d9:b9:f6:aa:a8:f6:32:f6:4a:8f:24:30:
9b:dc:82:38:c0:2f:5a:2a:02:02:19:5a:b9:07:c6:9e:06:14:
76:dd:0a:04:34:92:5b:2d:25:57:41:d3:66:87:94:cc:2a:92:
4b:fc:44:72:e9:8b:60:eb:24:05:7e:c0:17:43:44:a0:a6:a3:
86:50:ad:ff:86:dd:b3:fd:9c:c7:35:a2:ef:da:74:79:5a:84:
ac:f6:2a:55:a4:4e:1b:57:b6:94:9c:ad:45:c0:14:87:4f:00:
95:40:4d:15:7a:64:c4:70:56:09:0e:06:fa:fe:f8:60:6f:9b:
80:bc:67:06:e0:1f:2b:68:24:05:3c:eb:0f:a9:10:c0:d6:20:
d9:18:45:a6:52:09:e8:6d:a0:5d:e2:32:ab:78:54:8e:4f:20:
a9:e6:c2:96:0f:b2:98:c1:ed:b6:25:c7:99:96:51:b6:ae:f4:
0a:64:3a:27:36:96:7f:15:41:26:e6:79:6e:31:a8:80:19:2c:
bd:93:f1:21:6f:bf:24:f7:29:1a:d9:5e:89:cd:9f:fa:7b:3f:
36:d7:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:43:21 2026 by rpki-client