Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier: gqNQCkJ5iMbox0eu5lDFVxS5w6oFEHBts/zlGrXn8Qc=
Subject key identifier: 32:10:B7:9C:A5:5E:86:8B:DC:0F:BC:58:7A:4E:E1:55:AB:A9:A7:23
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 01A0EB535901D6B44141183392E69DC5A61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number: 17B4
Signing time: Tue 29 Sep 2026 04:01:43 +0000
Manifest this update: Tue 29 Sep 2026 04:01:43 +0000
Manifest next update: Wed 30 Sep 2026 04:01:43 +0000
Files and hashes: 1: lh0K5-Z5Aaz0j8wGnxp6HsFtPYk.roa (hash: JhDyY/3KKD4NQI4A4Yynp5xK7eSjDNrmxGYBJDA+6gE=)
2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: Xg0uJUMCcQysFkEsFTOtu4VezNfBX87ERyyEgxOuyvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:59:01:d6:b4:41:41:18:33:92:e6:9d:c5:a6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Sep 29 04:01:43 2026 GMT
Not After : Sep 30 04:01:43 2026 GMT
Subject: CN=3210b79ca55e868bdc0fbc587a4ee155aba9a723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3e:32:be:7b:ed:28:8e:47:20:32:dc:1c:36:
2d:80:b3:2b:e8:bd:97:9b:35:81:de:91:85:1c:cd:
63:3b:77:e1:5f:25:39:68:64:cb:87:eb:c0:b7:89:
a3:be:1d:69:5f:59:68:91:dd:3e:f4:f1:1d:7d:5d:
fd:01:cf:4e:6a:c7:c5:ae:d5:39:86:6a:9d:f6:52:
e4:7f:7c:6d:2a:fe:08:97:36:92:b6:e5:c2:83:68:
e6:88:37:e9:d7:e9:5f:24:c4:78:49:6c:a1:c4:12:
f0:fc:b4:dd:e6:1a:ed:cf:5c:bc:b7:a9:60:b3:a2:
4d:cc:1a:19:11:24:b3:c1:6d:00:a6:84:fe:5d:e9:
0d:ce:73:46:86:e6:2b:c5:81:a0:fc:4f:3f:98:33:
64:d4:70:62:e9:17:0c:99:d2:75:1c:a7:6e:89:b1:
68:ab:d8:0b:44:35:31:e8:ac:71:11:0c:f6:26:7c:
40:06:91:96:67:3d:b2:c9:c3:0e:b1:26:24:34:85:
95:13:3a:47:00:ed:6c:45:7f:93:89:13:53:d5:53:
80:95:27:89:4a:bb:05:dc:d5:95:cb:38:c3:22:c7:
21:b5:f8:72:d8:3b:fc:78:0a:62:67:4d:f6:39:5d:
7a:b8:10:bb:8f:66:fb:f0:8f:e6:6f:c2:bf:04:24:
a7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:10:B7:9C:A5:5E:86:8B:DC:0F:BC:58:7A:4E:E1:55:AB:A9:A7:23
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f8:3e:84:bd:d7:39:4a:47:62:02:1b:71:63:bc:66:4d:0d:
9d:ac:b4:50:e8:ee:12:94:c9:01:7a:b6:6a:cf:77:e6:74:c5:
e7:18:c1:4c:c5:5d:7a:3d:8a:99:4d:3f:be:16:60:0d:e8:f7:
a7:af:de:e9:cd:60:9b:96:29:ee:b2:6e:d7:1c:e1:6e:8e:f6:
9c:e6:c0:cc:83:9e:4f:d1:d3:58:b8:1d:99:6a:9f:c8:4a:da:
72:a4:09:71:8f:b8:5f:da:74:69:e3:be:59:0b:f2:87:d7:3c:
24:35:f1:9f:0a:1b:92:99:62:f8:e9:94:30:d6:ea:83:94:8f:
1e:0a:da:1d:08:c6:c2:0f:1f:0b:4f:d7:d5:be:2d:21:40:64:
88:48:11:0e:27:ac:c4:ff:24:60:3d:d4:dd:09:f1:7f:53:49:
bc:9c:fc:c9:e0:98:49:66:90:d0:03:47:4c:76:ee:64:19:eb:
5d:6f:b9:a8:fa:4c:e9:24:4c:7f:5e:4f:1a:21:45:d5:ae:21:
5d:c8:16:22:5e:14:0b:6e:6b:cf:25:07:7e:ba:ec:08:c3:75:
00:73:d0:20:37:93:9a:cf:62:60:23:9c:eb:dc:16:11:08:f6:
76:c8:47:22:82:19:f6:77:81:26:b5:a0:66:ae:31:eb:21:cf:
bd:f3:19:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:40:03 2026 by rpki-client