Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: c5l0hDVdqhAksDcHpVUzII2uHZC+nzvlAgpMqkU3Dsc=
Subject key identifier: A4:9C:51:38:B7:B3:F2:3C:37:64:A1:51:47:27:70:5D:19:09:88:09
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 01A0EA0903F2721B9A2503AC6BDAB8E7A6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0FBF
Signing time: Mon 28 Sep 2026 22:00:54 +0000
Manifest this update: Mon 28 Sep 2026 22:00:54 +0000
Manifest next update: Tue 29 Sep 2026 22:00:54 +0000
Files and hashes: 1: C_BG8Ml6dP3iR096R9X-fJO1n7E.roa (hash: 3QfX9jxSSnvJJan/fsFYYDVyLrGyvJpCwPAUh/Poma4=)
2: UaQ-s38Z57ecJNUbRdVAzUGv8GA.roa (hash: 4xw5dIxtZo++aDtcmN5R2tGAogLl64Jnmc82+4RR2Mo=)
3: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: ATi3g0C3hhtspDXD0ftflCmr5uayOEoqRyjY0oV1pjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:03:f2:72:1b:9a:25:03:ac:6b:da:b8:e7:a6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Sep 28 22:00:54 2026 GMT
Not After : Sep 29 22:00:54 2026 GMT
Subject: CN=a49c5138b7b3f23c3764a1514727705d19098809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:a7:a4:4d:2e:90:7c:3c:29:92:88:e6:c7:
95:91:7f:54:b7:47:db:9b:30:74:e6:7d:fc:35:c9:
2a:a2:52:9c:22:95:b2:41:bd:f2:b9:27:f6:d7:cd:
82:84:d3:db:7a:7d:cc:0a:b1:b2:02:1a:b7:3b:59:
88:e1:4b:9c:73:40:14:0f:55:30:6e:80:8f:64:7a:
2b:3a:2c:71:bd:36:26:4f:9d:b7:21:c1:72:b2:8b:
cc:2f:c8:5f:d6:f4:28:34:21:af:dc:a7:82:49:fd:
0a:94:a7:23:9a:d3:f7:2d:c0:70:7e:d6:53:fc:5a:
e7:57:eb:69:37:fe:77:f7:54:d0:d5:bb:85:8e:75:
3c:24:2f:df:85:89:55:35:8f:a8:13:a0:18:8f:4e:
22:bd:d5:0d:92:b3:d5:b0:e7:4d:14:c3:ef:6f:62:
e3:40:74:2d:43:ac:2d:2f:b7:77:69:40:93:c1:1b:
c0:f3:8b:50:62:85:f8:69:3d:78:3c:8c:c1:97:36:
0d:e9:18:8f:7c:cc:19:cf:df:89:17:1a:24:80:0f:
43:89:b0:55:e9:84:f4:09:44:68:c6:76:12:65:b1:
a5:30:28:bf:53:41:de:23:d4:a9:8b:e8:89:57:12:
d1:92:af:20:ba:5e:c2:9f:c3:6c:67:b0:c1:e8:ed:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9C:51:38:B7:B3:F2:3C:37:64:A1:51:47:27:70:5D:19:09:88:09
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b9:b4:db:19:9f:0a:18:4b:35:b6:ff:54:9e:ad:50:20:5c:
fd:d3:65:17:0d:9d:a7:cb:2f:ad:54:11:7c:71:d9:2f:d8:a8:
3a:c8:b0:64:54:b4:e4:6e:38:83:72:a7:38:2c:c7:f1:71:ec:
62:32:7a:9e:b7:9e:8d:b6:78:26:01:34:c1:e2:8f:8a:be:3d:
9e:2c:2c:9c:84:28:e0:e3:13:5e:1b:ea:b9:83:59:fc:97:a0:
47:80:94:b8:bc:5a:89:4b:51:63:d3:b6:25:13:ab:da:5d:24:
ce:2c:5c:f0:27:10:e1:7a:93:2f:ed:dc:a3:c0:f7:6f:36:23:
73:15:76:d7:d1:9c:c5:00:52:b4:cc:be:c3:2a:0b:33:33:4e:
e7:2d:f6:a1:8e:ab:26:e5:52:9b:5f:1f:a1:37:b6:cf:96:67:
64:75:59:f9:72:cb:12:ea:c2:f8:e0:0a:81:cb:17:c2:76:64:
6a:86:6f:d2:d5:fc:24:fa:72:f6:dc:10:47:87:c0:c6:d3:d5:
d8:5f:f1:28:3e:15:ad:33:44:4d:ef:37:7c:03:7b:46:12:85:
b8:3c:a1:d2:51:e4:72:83:31:8d:06:9f:4d:df:26:08:bf:b2:
08:4b:33:a3:ad:f3:78:82:98:0a:a9:b8:bf:8f:a2:07:be:04:
21:07:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 07:06:51 2026 by rpki-client