Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: IxBnEkdgEN1yaweKdsVd45oHAsBrCAfnrJv4Ie+twaw=
Subject key identifier: 2A:79:55:2A:22:EF:E2:2A:DE:FF:94:9B:D4:3B:EA:98:3B:61:42:5C
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 01A0D3B86ABEF53E980C0BC39E7838CD30F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 0910
Signing time: Thu 24 Sep 2026 14:01:13 +0000
Manifest this update: Thu 24 Sep 2026 14:01:13 +0000
Manifest next update: Fri 25 Sep 2026 14:01:13 +0000
Files and hashes: 1: 4Da2j7Bi2NbmfPUpK3LZNaUxeKw.roa (hash: sVS+CgceR72IsZG8/n9nxIxVExnNtdYxPtu3DwmNmPc=)
2: 6A3jyIMKHg4wFV2SvrfE3nKtTQo.roa (hash: W2pcnpJGAQePhmM2PwP+0VJq/IVZmkSfxPewBfpKTAk=)
3: nzg1Wy5iDrgZN6cFhF2wIXzEoL4.roa (hash: 7c3WobtnQbFwAsfBBLzCJIOIEFbRalJlUeFDgCh2yaA=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: ZWDVwRzqqudQziyzkEbyuFutwxcYJ0W+Nh2IEKfBH94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:6a:be:f5:3e:98:0c:0b:c3:9e:78:38:cd:30:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Sep 24 14:01:13 2026 GMT
Not After : Sep 25 14:01:13 2026 GMT
Subject: CN=2a79552a22efe22adeff949bd43bea983b61425c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:b2:c2:4a:2d:45:73:56:da:1d:7f:55:20:
c9:ce:f6:67:19:49:b3:1c:1c:5a:55:20:89:5b:72:
4d:52:78:10:cd:0b:b1:3a:0b:bd:47:52:5d:19:99:
77:60:46:4a:46:97:b3:0d:31:ca:da:17:d5:20:d0:
55:63:88:18:2f:af:0d:69:4b:5a:d3:95:3e:9b:d7:
c9:c9:0e:16:e2:1e:39:aa:fc:ee:09:12:a2:b0:54:
af:31:7a:ed:7c:99:37:85:32:9c:00:ef:bf:f8:04:
11:10:e3:07:60:81:87:d1:29:e8:c4:82:af:28:f8:
e0:0f:ae:d8:2c:5b:ed:a7:0d:c8:65:3a:3c:64:25:
5f:45:5f:27:11:a2:3d:71:fb:82:e0:9c:73:c9:cf:
65:fc:84:de:36:53:80:cc:73:a2:06:9a:4f:02:f3:
db:42:12:61:88:46:fa:95:23:9c:13:68:45:c0:d0:
d5:4f:aa:75:d0:c3:e6:6b:32:22:3e:6f:1b:2b:bc:
b1:8c:1a:77:29:04:5f:50:30:f8:1e:5d:64:d6:cc:
6e:d6:57:aa:cb:f8:ac:04:27:28:0e:81:fd:04:5a:
86:7e:3d:4a:41:d3:be:88:b2:29:80:77:35:9d:99:
c7:67:54:5e:bb:20:b2:a6:29:f3:e2:6c:b8:91:aa:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:79:55:2A:22:EF:E2:2A:DE:FF:94:9B:D4:3B:EA:98:3B:61:42:5C
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:de:fe:fc:d5:98:51:e4:1a:3b:9d:12:40:b0:08:0b:85:a1:
b6:51:61:c5:31:68:84:39:a4:c5:f4:d0:59:77:1a:16:2f:70:
43:50:0e:4b:fe:21:52:1e:51:09:b4:7a:d5:4f:be:65:59:0d:
1d:34:17:8f:58:81:45:fc:58:b8:62:2e:30:36:c1:da:77:2c:
a1:9d:4a:7f:11:1a:69:6c:ee:df:29:81:6c:67:29:d3:0e:b6:
bf:b2:74:70:ef:f6:e7:ae:41:54:0f:81:71:9b:c1:49:5b:4f:
a2:d8:fe:7b:26:f0:22:bb:04:ff:7a:3b:71:63:30:4b:a0:71:
2a:64:ac:0e:8a:9d:8b:4a:c0:24:62:39:03:9a:ca:22:03:d9:
78:9c:84:55:6a:99:6a:67:a5:39:ba:27:51:25:16:1d:7e:42:
d4:5c:16:a8:34:07:5a:69:b2:53:ed:51:25:76:fe:0a:88:1f:
85:a9:d0:ee:15:e3:7c:1c:04:cb:8f:86:a3:ea:3e:fa:52:9d:
1e:33:03:fd:97:75:14:e1:e0:d6:61:bd:82:ae:21:2c:46:63:
ce:10:6b:00:f1:36:05:ba:5b:6f:13:4b:c6:2f:af:b3:c0:6d:
1f:63:21:1e:fd:af:b9:d9:17:d5:de:1f:d5:b9:99:e0:3f:ab:
45:4b:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:14:32 2026 by rpki-client