Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: i5BySHOg3nvEvo+TVRoeofs+rI444oKfyvQtf/E0Lcw=
Subject key identifier: 5D:D4:02:47:42:B0:D0:B6:A7:B5:EB:22:98:FE:EB:C4:B1:C0:A4:D2
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 01A0D5029D1715277D7E77845D360E04B76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 20:01:53 +0000
Manifest this update: Thu 24 Sep 2026 20:01:53 +0000
Manifest next update: Fri 25 Sep 2026 20:01:53 +0000
Files and hashes: 1: HbGW1bIuKJtcKHzffUf-4COhdZM.roa (hash: XbWavlk3zf17or5OmaUS0jVlWZ00ZlHjNhNZCQ7iW5c=)
2: gbJe-QJELQjG77ZNjAeXTNXNFEw.roa (hash: 1fpv/Uz2JKbxfrghTnax/Tb7Em3yN34FPhCyAtrNWL8=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: R1z+yTag8QepCJlQSeCQ7hPnOM3+nlb82n+MYG5O1hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:9d:17:15:27:7d:7e:77:84:5d:36:0e:04:b7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Sep 24 20:01:53 2026 GMT
Not After : Sep 25 20:01:53 2026 GMT
Subject: CN=5dd4024742b0d0b6a7b5eb2298feebc4b1c0a4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:0c:e8:97:19:dc:56:77:d7:21:fa:ac:14:
a5:3b:b8:6d:c5:b5:62:60:11:49:29:76:ba:a8:aa:
d5:17:80:4c:4e:8c:dd:86:e7:f4:df:c9:29:da:81:
6a:c9:5c:69:36:a8:7b:65:1b:85:f4:3f:72:5a:52:
40:b9:aa:5b:14:f2:06:87:24:70:2c:8d:13:40:c5:
a2:04:28:fc:5e:65:8c:94:42:44:db:23:cb:86:0a:
f6:c4:ed:0d:e5:54:7d:bc:af:ad:67:eb:fc:fc:f6:
d7:3e:7a:a9:cb:81:26:83:c0:21:8a:05:de:2d:a7:
62:cf:62:57:95:79:c4:0c:33:c7:5c:b6:b7:da:59:
d3:0d:8d:16:16:da:03:8b:4a:69:4d:cb:0b:2f:41:
55:ba:16:24:11:33:6b:cd:55:48:5d:7f:99:3b:eb:
44:a6:80:ed:cd:d2:6c:9a:f3:21:f7:2c:cd:40:14:
25:7c:1c:cc:07:4a:9a:d1:e7:86:66:ac:a2:da:c5:
af:2e:72:a3:eb:bf:b5:e0:8f:a4:19:aa:58:5a:fa:
53:4d:7e:83:fe:50:40:b7:7d:04:9b:9a:46:79:f6:
65:1e:fd:d7:f0:0f:be:fa:47:28:d7:44:31:88:b7:
62:99:96:86:bc:fe:e8:9c:47:dc:30:d7:87:cd:7a:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D4:02:47:42:B0:D0:B6:A7:B5:EB:22:98:FE:EB:C4:B1:C0:A4:D2
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:72:b5:d8:30:59:96:7d:f4:db:2a:89:64:a6:81:02:38:82:
2c:49:a2:b8:81:35:4c:96:66:b1:4f:8d:6c:67:e3:ac:d5:19:
49:71:1a:d5:68:16:ba:0f:ca:2d:db:7e:3a:68:88:49:44:2c:
6d:9c:aa:0f:4d:96:b0:81:92:e6:48:a6:35:4e:21:d9:51:08:
7a:58:77:69:e8:b8:64:b6:1e:58:c8:0d:a2:10:3f:cf:12:cb:
fe:94:61:d5:63:c4:7d:43:11:d4:56:b8:53:8f:77:c3:82:72:
b6:c2:4a:bf:3d:7c:26:d4:54:42:ae:f1:0c:82:30:97:dd:9e:
02:bb:3f:bd:3f:71:f5:01:22:89:3e:ea:5b:bf:a2:38:e7:e3:
46:eb:8d:4e:00:df:86:81:18:09:81:75:62:6f:ad:58:25:ab:
08:e7:13:78:07:25:fb:54:e2:6d:b7:82:80:ee:c2:e7:6b:3a:
0b:12:27:31:a4:f6:f0:ca:3e:40:0c:f8:46:c9:5e:8d:a8:3e:
e9:c5:a7:d1:7c:f4:8a:19:3d:7d:0f:c6:49:f8:a2:46:a7:80:
0d:2e:c0:f5:cc:c1:f7:05:07:ce:05:02:23:3d:80:db:6a:7e:
0a:c4:e8:bc:2a:57:6f:f0:47:8e:ce:0f:95:ac:61:9e:93:fd:
62:8f:64:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:07:26 2026 by rpki-client