Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier: zG3Eu/2nmVWJRQCTuDONeMfK2uwZv/+8Fc1dF1fPZCU=
Subject key identifier: 78:33:9F:0C:EA:74:BD:1F:D8:A1:49:D3:AE:BE:EB:8D:F2:CB:A3:EE
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 01A1DC4B060A3FDDA6BE63DCFE2CC54472D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number: 10D0
Signing time: Sat 14 Nov 2026 23:01:06 +0000
Manifest this update: Sat 14 Nov 2026 23:01:06 +0000
Manifest next update: Sun 15 Nov 2026 23:01:06 +0000
Files and hashes: 1: 1j-0fRD2UKFFOwRpmh3BdgzS-KY.roa (hash: J/OpGEjDOcAf1NYGQDPN+Up9rV3l4EiqrJmyP7OZ814=)
2: 1jeMDJUiXFwN8iyBiVBPKoxXVXs.roa (hash: AMsBQ6qY2ffhJac7OKTZiKgzqFTd8W61KP5VxcegYfI=)
3: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=)
4: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=)
5: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=)
6: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=)
7: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: QUapA2rUFcp4avdUh7cJCbk88IS9xYgw6gW4IlBjAI4=)
8: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4b:06:0a:3f:dd:a6:be:63:dc:fe:2c:c5:44:72:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Nov 14 23:01:06 2026 GMT
Not After : Nov 15 23:01:06 2026 GMT
Subject: CN=78339f0cea74bd1fd8a149d3aebeeb8df2cba3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:33:69:e3:bf:b2:07:2d:30:5b:72:7f:63:
2e:73:87:84:cc:41:91:2c:91:45:c4:52:1e:42:78:
6e:b9:bf:97:ca:a6:4d:da:dc:57:42:96:88:b3:bc:
e8:bc:bd:f9:f4:68:b7:cb:a0:5e:be:ef:60:83:34:
45:d1:1b:5e:06:93:08:c9:30:4a:e8:fa:61:10:32:
aa:d1:11:80:ab:e9:cb:cb:b9:12:1c:6a:34:10:eb:
7f:53:dc:8d:64:c8:94:9d:3c:e1:81:b2:6b:3c:aa:
7a:ed:fb:8f:b1:ce:eb:fb:6c:6d:b6:a0:0e:ae:5e:
82:35:a6:51:38:7a:8c:86:1a:0b:eb:f9:15:bf:47:
2f:81:a2:82:99:25:76:c2:84:4e:52:df:3f:1c:d7:
cf:c0:d4:e5:f4:16:ca:80:f5:c7:34:ac:a1:59:44:
08:a9:ef:9b:cf:26:11:7b:4f:11:e7:81:3b:00:12:
6e:0e:b5:84:0a:1a:63:37:17:e8:aa:75:1e:e7:63:
21:51:37:cd:e2:e9:ca:ff:09:67:67:d9:94:38:9f:
ca:b2:78:6f:2a:9f:8b:3c:7b:62:67:2c:ab:b2:74:
6b:fb:4c:be:4a:b0:d8:0a:a2:a1:f0:52:1b:39:90:
80:2d:32:9f:4e:d1:7a:ef:87:cd:d9:6e:fc:88:b3:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:33:9F:0C:EA:74:BD:1F:D8:A1:49:D3:AE:BE:EB:8D:F2:CB:A3:EE
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1f:3f:4d:fe:5a:c7:77:2c:66:e4:03:d0:ed:be:ee:76:f3:
18:49:eb:45:fd:0f:8d:0b:7d:eb:48:b8:ac:f9:06:44:c9:5b:
75:87:9c:dc:82:58:0e:9b:c9:45:4e:30:f2:75:56:d7:7c:6a:
86:e4:b6:cb:00:f0:ee:64:e0:af:d7:66:d8:06:5d:d6:e4:85:
40:76:45:36:79:4c:db:25:4f:bc:e6:2c:03:87:3d:42:bd:1d:
9c:f8:82:88:7b:d2:21:94:d7:86:13:9b:f1:87:bf:86:10:d7:
b7:e4:39:41:67:55:ed:33:e0:ee:41:73:b1:18:0a:09:c7:66:
17:f2:14:b9:4d:13:c4:77:99:75:5f:32:b8:85:32:ea:b6:8b:
f1:a9:82:1b:ad:21:f2:33:cd:20:c2:19:f9:50:1b:49:57:f6:
f2:a9:f1:49:26:7d:d8:5c:0f:cf:63:b8:aa:54:51:24:26:b2:
d9:18:ea:46:dd:10:22:7e:7d:30:8a:81:d2:39:42:d8:d2:b5:
ff:0e:54:e9:2d:04:3f:22:16:20:00:51:71:10:22:9e:fd:3a:
d5:7b:86:4d:31:1e:89:ee:53:18:32:97:68:16:8e:6a:f5:f0:
64:52:6d:7f:82:f6:7c:cb:c5:c5:42:82:fe:51:8b:d9:63:11:
a6:d0:ce:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:31:20 2026 by rpki-client