Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: oC/da7TuuVq8nwh9UsiDAPGb4r8uW5hdkGzY6SxkLv8=
Subject key identifier: 91:CC:40:5B:E6:1A:0F:06:AB:9E:5B:F1:F8:1A:50:8D:CB:F4:BE:51
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 01A1DBA6B9CC851030441F5C7A416E37674A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 1AF8
Signing time: Sat 14 Nov 2026 20:01:39 +0000
Manifest this update: Sat 14 Nov 2026 20:01:39 +0000
Manifest next update: Sun 15 Nov 2026 20:01:39 +0000
Files and hashes: 1: HbGW1bIuKJtcKHzffUf-4COhdZM.roa (hash: XbWavlk3zf17or5OmaUS0jVlWZ00ZlHjNhNZCQ7iW5c=)
2: gbJe-QJELQjG77ZNjAeXTNXNFEw.roa (hash: 1fpv/Uz2JKbxfrghTnax/Tb7Em3yN34FPhCyAtrNWL8=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: CMZCBYHakiqFxU0kOndbWqifxaE69ywFMz22ZaebWhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:a6:b9:cc:85:10:30:44:1f:5c:7a:41:6e:37:67:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Nov 14 20:01:39 2026 GMT
Not After : Nov 15 20:01:39 2026 GMT
Subject: CN=91cc405be61a0f06ab9e5bf1f81a508dcbf4be51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:24:7e:68:14:53:3a:04:0e:ba:d8:f6:98:
af:f2:d5:11:56:ce:e4:08:bc:9c:7b:39:ea:b8:89:
9c:92:dd:bd:6d:3d:13:71:f4:e2:b3:3a:7b:37:5b:
47:e4:cf:c3:71:3a:cf:0c:d6:8e:07:7a:a5:f2:19:
7c:18:6a:a9:c8:43:cd:62:be:98:74:13:52:82:51:
b2:e7:0a:2a:dc:41:9c:8c:39:65:3b:3a:95:8c:95:
5d:4d:37:52:48:07:5c:bf:52:f3:d7:96:bf:03:a3:
6c:94:13:4f:ac:1e:3c:ff:8b:e8:d7:16:86:2e:b5:
ae:e9:43:66:e1:c2:a5:b7:74:88:69:d3:6b:fc:ac:
53:fc:f5:1c:4e:2a:36:97:82:53:85:dc:18:69:c2:
7c:d6:15:b0:00:eb:84:36:f1:19:59:0f:06:e0:da:
32:98:0c:b1:48:19:9e:7d:15:1b:3e:3d:57:37:24:
30:cc:e8:29:81:24:21:01:7f:6d:ae:13:59:7b:84:
a5:90:74:a6:2a:16:8a:73:5d:83:b1:fa:52:9b:46:
08:54:11:46:b5:40:34:1a:d8:c7:3c:34:83:f4:4d:
c9:f2:e2:b0:aa:ac:fa:21:35:da:3b:95:e3:06:e9:
24:13:e4:d8:c0:ee:33:36:7e:15:2f:cb:3c:93:b5:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CC:40:5B:E6:1A:0F:06:AB:9E:5B:F1:F8:1A:50:8D:CB:F4:BE:51
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:29:08:5c:e3:fc:79:90:24:3d:69:b6:c1:53:9c:94:2c:73:
73:38:a0:b7:6f:17:c7:f3:e2:88:be:47:74:a8:d3:11:07:c0:
56:f2:89:9b:be:36:62:42:09:34:03:6d:b2:bd:0a:bf:b5:57:
ed:e2:f3:a6:79:36:c9:bb:6d:d9:cf:fa:53:6f:68:fc:9c:54:
6c:35:fb:18:ce:13:c5:fd:bb:8c:79:b4:e0:69:87:7c:78:bb:
2f:2c:a9:ad:c9:02:86:77:5a:be:88:b0:47:8d:80:dc:1a:52:
c1:0d:1b:39:e1:fe:56:d5:bc:0c:6c:5a:97:5a:d5:b6:88:df:
70:cf:9e:c0:88:ae:2e:d0:0d:71:b0:4f:b1:be:84:c2:48:12:
ac:5a:5f:f4:8e:7e:57:3d:05:ad:ae:6e:95:bb:57:9f:c5:63:
c1:18:63:c9:64:39:79:cd:b1:f1:54:df:31:10:cc:89:0f:0e:
63:fd:1f:68:fe:39:ce:48:5c:3e:08:14:8a:d1:36:2e:06:09:
71:6c:1d:13:66:15:f6:46:fa:49:09:e2:c4:86:83:20:3f:29:
1e:d2:5e:01:52:1b:be:c9:83:2e:58:a7:7a:9e:59:5f:6c:aa:
2a:c4:a1:33:2c:5b:39:37:d4:b9:1f:9e:0e:42:ca:79:2d:b7:
85:f9:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:08:02 2026 by rpki-client