Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json)
Hash identifier: Co92cnDyhP3u4JxlxDwnDCvE4a4q+SLyHzODL7na7Sw=
Subject key identifier: 71:A3:93:19:4A:2A:78:93:76:AC:E3:E0:12:17:BD:3E:14:EF:47:07
Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Certificate serial: 01A0E098698DD489A1C93A583E54A2E8EA8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
Manifest number: 0299
Signing time: Sun 27 Sep 2026 02:01:19 +0000
Manifest this update: Sun 27 Sep 2026 02:01:19 +0000
Manifest next update: Mon 28 Sep 2026 02:01:19 +0000
Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: pUQlE/+2+uveHcGmStZwRP4kACVn3Rx81I5KLst4gEk=)
2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:69:8d:d4:89:a1:c9:3a:58:3e:54:a2:e8:ea:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Validity
Not Before: Sep 27 02:01:19 2026 GMT
Not After : Sep 28 02:01:19 2026 GMT
Subject: CN=71a393194a2a789376ace3e01217bd3e14ef4707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:ac:c9:27:1c:f8:50:fb:7d:a2:cc:ad:16:
e9:e3:e1:d5:54:ae:c2:0a:22:ad:e0:ed:d0:2d:6e:
8d:bc:fd:5f:17:75:2c:bf:14:bf:8f:60:40:ae:6e:
78:10:e7:76:8a:9f:af:88:35:2b:4b:01:f1:d7:7c:
4e:bb:b2:2d:00:a1:b0:e1:d6:ed:fc:f4:38:94:f4:
19:b3:b4:a5:ee:13:df:cb:d9:f9:58:46:59:2e:d7:
34:03:09:a6:2b:39:d1:e0:b7:ec:05:e4:b3:a8:03:
05:37:17:28:f6:69:b5:6c:85:59:03:33:f8:a5:cb:
d2:5a:c7:27:9a:fd:71:70:68:8d:2b:6a:11:a0:08:
2f:85:67:6e:fc:34:13:f8:f3:ae:24:87:90:36:df:
e4:f3:96:02:04:35:f5:7e:25:8c:bc:71:14:e4:73:
16:98:ad:9f:cf:16:1a:ee:f9:82:4e:c2:f5:e9:56:
76:f7:f8:3f:3b:02:3e:3a:bc:6f:61:57:4b:06:f7:
99:bb:2b:db:b8:67:9f:81:97:2f:99:be:9a:40:91:
be:c7:c5:0f:fc:b8:c8:49:12:ec:f1:20:19:ab:b6:
ee:b7:56:3b:00:5c:93:7a:3e:17:65:9d:51:20:23:
b4:68:53:cd:b3:f9:2d:e8:5b:9e:6d:fd:d3:7c:87:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A3:93:19:4A:2A:78:93:76:AC:E3:E0:12:17:BD:3E:14:EF:47:07
X509v3 Authority Key Identifier:
keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0c:92:c6:b6:e9:ed:20:1a:e7:e7:28:38:bf:df:4c:14:25:
f5:33:f4:9c:92:ea:55:91:51:ec:65:5e:9c:e3:1e:8a:dc:d9:
b6:e4:f3:f8:f7:05:f7:84:bf:18:5c:da:be:d8:af:2b:f2:68:
f2:0c:be:44:6d:3f:21:a2:b2:a3:05:b6:43:17:3a:69:81:8a:
b2:70:96:cb:db:db:31:25:8d:2d:b7:ed:4b:40:8d:d2:e5:ac:
41:7f:b1:a6:08:f8:71:8e:ce:7c:ab:91:3e:7a:83:17:18:2d:
50:dc:d0:34:fc:db:d5:0a:b9:5b:cc:77:46:b3:86:a0:43:2f:
21:5f:60:80:d3:1e:f3:c4:1b:bf:8e:f6:1d:b8:b2:88:7c:07:
56:5f:2f:2e:77:de:a5:f8:d5:98:28:a3:82:54:f1:be:49:07:
19:67:83:9d:77:de:06:7a:90:e7:30:51:51:1d:97:7f:96:bd:
0d:64:b9:08:23:9c:d4:3b:df:bc:cc:9e:88:49:b8:84:5f:da:
fa:5c:89:0a:80:d4:ad:14:e5:d0:c4:bf:50:55:9c:2e:ad:04:
92:91:f9:1d:4f:52:5a:88:df:d5:59:8e:83:91:71:32:6f:c6:
41:96:b3:ef:25:42:41:d1:ec:44:09:c4:96:95:85:f8:3c:e4:
79:31:29:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:42:33 2026 by rpki-client