Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
File: oCN2bGLetRKXFVcI7MtCHIsEeAo.mft (raw, json)
Hash identifier: 6gOseeVQE+YIz/E2kyO2CoOx5OIl974LzXYhpH/q+fg=
Subject key identifier: B7:9A:B3:AD:47:CB:8A:00:50:1B:C6:5A:CE:71:40:C4:FD:48:1A:17
Authority key identifier: A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
Certificate issuer: /CN=a023766c62deb51297155708eccb421c8b04780a
Certificate serial: 01A0F7C4E53A63D9EB6C284743FF75C82256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
Manifest number: 17D2
Signing time: Thu 01 Oct 2026 14:01:10 +0000
Manifest this update: Thu 01 Oct 2026 14:01:10 +0000
Manifest next update: Fri 02 Oct 2026 14:01:10 +0000
Files and hashes: 1: g0-HGh4bznaFgiFX5KCpF3Q8z70.roa (hash: kuqsXcay0qN76iKLs/AKqPrHvwfsG46t73MVLxZfYe0=)
2: oCN2bGLetRKXFVcI7MtCHIsEeAo.crl (hash: z/mZsZPQH9Oxb/ejh7Et6WJT6CXv0wymUWmSNI1ONHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:c4:e5:3a:63:d9:eb:6c:28:47:43:ff:75:c8:22:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a023766c62deb51297155708eccb421c8b04780a
Validity
Not Before: Oct 1 14:01:10 2026 GMT
Not After : Oct 2 14:01:10 2026 GMT
Subject: CN=b79ab3ad47cb8a00501bc65ace7140c4fd481a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:ed:07:8a:dc:64:8e:4d:75:dd:81:e3:93:
23:ed:c1:0f:af:b6:36:b2:a9:56:85:7d:a7:f2:0b:
3f:0d:76:ee:9a:d5:21:76:44:75:aa:4d:69:d9:2b:
20:8e:72:2e:7a:e1:b9:e9:b8:6c:49:d5:92:ad:24:
7b:bb:cc:d6:dd:2d:ee:05:ab:ba:f2:43:84:b3:20:
e0:ae:f0:10:70:5c:27:c3:3f:33:f5:00:ac:c0:27:
51:fc:81:9e:2b:a0:20:36:25:3f:a6:75:b5:d3:7c:
3f:3d:f4:fb:98:6f:d6:09:74:fc:e1:c6:5a:e0:49:
9c:9d:37:7e:4b:17:9a:9c:a1:6a:ad:2d:0b:b0:ce:
9d:6d:72:54:76:61:81:d4:f4:e9:e3:ec:54:64:bd:
9a:2e:a4:99:40:1f:93:a3:32:9b:30:5d:57:5e:25:
31:dc:72:f9:02:ee:fd:eb:e0:e9:93:f1:fa:c5:16:
86:b9:74:47:fa:d4:6a:6c:15:ab:71:ef:7c:01:38:
5d:b8:e7:3f:b3:d3:37:aa:f8:43:1f:64:0f:69:c3:
a0:54:32:5f:46:50:ce:5f:34:dc:f5:b0:37:0c:90:
b8:87:0a:28:03:06:b7:90:67:cf:f5:8e:69:d0:3f:
d3:c5:97:18:81:92:e2:b9:4b:2d:b7:ac:05:95:88:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9A:B3:AD:47:CB:8A:00:50:1B:C6:5A:CE:71:40:C4:FD:48:1A:17
X509v3 Authority Key Identifier:
keyid:A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:94:60:bf:e8:f8:37:22:11:d6:3d:c8:47:8d:f0:0f:7e:11:
5d:c1:21:75:11:68:a7:fd:48:ec:da:f9:29:4b:76:c9:a2:9d:
c6:f2:a7:70:7e:6d:ec:d0:3a:74:8d:f1:79:23:a5:9b:fb:93:
65:13:4e:57:f9:b6:9e:d7:87:34:de:1c:dd:af:55:f1:2f:61:
65:40:1b:aa:38:85:78:3b:48:3e:23:91:61:0a:25:26:4f:ce:
44:ed:1f:09:e5:5d:30:64:68:ed:c8:40:f9:50:45:25:5e:92:
a6:e9:40:c2:9d:05:72:79:67:7d:35:f4:fa:74:d5:d1:1f:d8:
23:ea:66:69:53:f5:5f:bb:24:59:a2:04:08:5d:0c:04:72:ee:
14:63:45:46:05:8e:d1:99:2a:cc:5d:bf:f6:bd:e3:70:66:3f:
dc:b1:a7:33:98:81:f5:cd:ab:88:b2:fb:2f:d5:1b:9e:d1:d9:
07:65:49:8e:76:72:76:30:35:07:95:ca:04:f3:b8:68:01:9e:
23:c7:26:03:6f:27:6a:a3:de:c9:56:96:75:10:cb:8c:0e:e2:
f7:18:15:33:15:b2:53:bf:7a:a9:74:cc:72:85:42:5f:f6:e7:
1a:c9:29:37:81:f8:b7:2b:a1:77:fb:2f:d5:2b:7e:31:e9:63:
78:a5:57:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 07:30:52 2026 by rpki-client