Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier: wN9UlFq6Hjhi2IAzxGX4n7dGiyVTNXBLVSlOIWKU2/Q=
Subject key identifier: 9B:C7:9F:C7:F1:CF:3C:BA:CF:C5:7F:B5:BD:CF:66:E4:D9:0A:8C:1A
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 01A0D5A6DB7A8484886101EBFC430632E238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number: 1048
Signing time: Thu 24 Sep 2026 23:01:17 +0000
Manifest this update: Thu 24 Sep 2026 23:01:17 +0000
Manifest next update: Fri 25 Sep 2026 23:01:17 +0000
Files and hashes: 1: 1j-0fRD2UKFFOwRpmh3BdgzS-KY.roa (hash: J/OpGEjDOcAf1NYGQDPN+Up9rV3l4EiqrJmyP7OZ814=)
2: 1jeMDJUiXFwN8iyBiVBPKoxXVXs.roa (hash: AMsBQ6qY2ffhJac7OKTZiKgzqFTd8W61KP5VxcegYfI=)
3: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=)
4: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=)
5: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=)
6: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=)
7: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: tcFitpO9N596CXIzCOooZSReR9fY3al7Dy45JL17EWM=)
8: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:db:7a:84:84:88:61:01:eb:fc:43:06:32:e2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Sep 24 23:01:17 2026 GMT
Not After : Sep 25 23:01:17 2026 GMT
Subject: CN=9bc79fc7f1cf3cbacfc57fb5bdcf66e4d90a8c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:43:1a:4c:ba:48:55:a8:99:5c:e3:d4:72:d6:
aa:73:83:42:4e:19:38:03:2b:8f:f9:c5:bc:10:e8:
8d:36:43:55:f8:93:8b:c3:43:0f:d7:3d:a9:f4:ca:
73:8d:cb:dd:18:86:bd:97:2e:17:f4:43:0e:09:f6:
bd:42:c5:71:75:f2:7f:92:29:fe:c1:bb:81:d8:65:
36:bf:25:d7:32:dd:2a:6d:1c:06:a3:00:fe:0e:ec:
90:72:d9:e2:6e:e8:00:c1:23:69:5a:98:a9:75:88:
39:32:f6:d6:93:a1:65:e7:4f:f7:18:92:f5:a6:ac:
f9:f8:cb:be:0c:65:96:1a:4d:91:bd:f3:54:00:77:
44:af:c4:4b:2d:28:d9:ad:a7:59:33:89:cc:d8:8b:
fe:40:2e:a7:29:d6:e9:a7:e6:12:75:09:a9:dc:f4:
80:3a:af:e7:19:3f:15:31:49:25:af:5f:40:83:6d:
a7:5e:57:cd:54:ae:e8:fa:ae:d2:32:fb:56:06:e8:
da:b7:32:eb:0d:5c:a1:d6:6b:a2:8c:9d:36:8f:f6:
23:b9:89:42:02:c3:2e:4a:ff:65:45:03:2f:89:23:
10:28:58:20:e1:aa:f1:c8:d5:b8:5b:66:13:c9:7b:
e7:f6:14:69:ca:4a:5b:7a:a1:d8:06:93:0f:ce:83:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C7:9F:C7:F1:CF:3C:BA:CF:C5:7F:B5:BD:CF:66:E4:D9:0A:8C:1A
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:cc:5f:ae:aa:e4:f3:e9:09:39:42:4b:dc:f6:9f:7c:5c:06:
f6:1b:a4:5b:7d:e7:ee:1f:f9:a0:ad:4b:3e:77:89:63:1e:e9:
13:51:6a:c4:8a:d4:04:d6:8b:c4:83:b1:f9:21:6e:21:3b:88:
7e:43:08:ef:01:1d:7e:dc:0a:11:31:52:d6:96:e4:51:7f:4b:
a5:94:c0:50:07:a9:0c:f8:51:e7:ab:96:41:7f:b6:b1:f1:91:
f0:31:58:23:7b:64:96:78:5a:78:83:cc:59:ff:75:4a:1f:91:
c3:48:fc:76:56:8f:ce:69:d3:22:66:3a:92:5f:2b:80:ff:24:
22:b3:21:b6:e3:e8:df:19:17:bb:86:ee:66:97:1e:f8:60:4d:
f3:0c:48:ef:7c:37:d9:11:0c:64:c0:d0:60:64:ee:23:58:ba:
b6:c9:fc:d0:be:40:dd:cb:3f:39:77:72:53:f2:1a:51:5f:05:
17:25:45:74:24:65:7f:57:3d:0e:87:e8:56:1d:96:f3:39:1c:
41:e7:c7:66:b7:1d:41:7f:44:1a:53:46:35:19:e5:04:70:ba:
94:c8:99:24:8e:fa:68:db:06:54:99:f6:8c:35:38:31:9e:9a:
d5:be:41:dc:db:9a:06:90:3c:22:79:93:6b:83:32:d6:f6:ec:
75:3e:3f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:07:10 2026 by rpki-client