Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
File: oIwpap_lpgUVguWt5HVJhfbxGzE.mft (raw, json)
Hash identifier: vJTEYE1YurqufW248P3HwjFv+WPE1KVPN3nFr3l7Z18=
Subject key identifier: 92:51:BA:B8:AE:CE:DA:D8:EA:93:CA:2C:90:BE:60:84:06:32:F6:4A
Authority key identifier: A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
Certificate issuer: /CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Certificate serial: 01A0DB3AFA594D5D6BB4C1AB073B62D9171F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
Manifest number: 029B
Signing time: Sat 26 Sep 2026 01:01:10 +0000
Manifest this update: Sat 26 Sep 2026 01:01:10 +0000
Manifest next update: Sun 27 Sep 2026 01:01:10 +0000
Files and hashes: 1: PZKZVJbLIiC-nyKzbha8Q1plbB0.roa (hash: OGaxQzQU67t4LsOvlqtFqnosSDCkJ4cDH47PaItpnpE=)
2: oIwpap_lpgUVguWt5HVJhfbxGzE.crl (hash: eutoZOfA+Oxpts6lWCErQgw0gfpdUlBP3J6ed+3qnaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3a:fa:59:4d:5d:6b:b4:c1:ab:07:3b:62:d9:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Validity
Not Before: Sep 26 01:01:10 2026 GMT
Not After : Sep 27 01:01:10 2026 GMT
Subject: CN=9251bab8aecedad8ea93ca2c90be60840632f64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:de:4d:73:b1:3f:56:f9:e3:81:0f:37:43:
c7:ce:d5:86:ff:cf:02:9a:1f:89:0d:ba:1a:28:75:
09:77:f6:30:17:a0:78:7a:70:d1:2a:8e:b6:75:c1:
e4:af:3b:b8:f7:2b:6c:c1:e9:ad:d1:ae:53:21:3f:
54:1b:cb:9c:44:ad:73:ce:5f:b9:74:75:4b:0f:4b:
b7:1f:8d:08:ca:3b:94:82:e0:ea:b7:3f:03:91:bc:
42:3d:76:a2:93:dd:6f:85:40:90:e2:80:d4:99:45:
20:ea:53:82:0e:3f:f6:f1:fd:47:24:86:e0:99:9f:
68:e6:82:c5:0f:44:49:ad:8b:56:1c:34:60:a7:43:
3b:24:0c:78:44:8f:90:09:26:ba:cb:86:9e:33:02:
ff:e2:5e:b8:54:f1:23:7d:f3:43:15:d6:46:43:1b:
48:d5:43:7a:e1:a3:6a:8c:76:42:17:65:2c:7a:7e:
06:3a:7b:dc:be:e9:d1:26:ee:d5:c8:e3:f0:ed:af:
f8:19:16:64:dd:4e:cd:53:42:4d:7f:bc:cd:cd:78:
17:82:6b:4a:b5:bf:ec:8c:51:e3:ec:11:6c:44:67:
c8:59:79:0c:aa:b1:f9:ce:37:d8:95:9d:47:0d:9d:
d6:59:ff:1c:83:f3:2a:96:d9:78:c6:8a:de:10:5c:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:51:BA:B8:AE:CE:DA:D8:EA:93:CA:2C:90:BE:60:84:06:32:F6:4A
X509v3 Authority Key Identifier:
keyid:A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:29:e5:b6:c9:fc:f1:e6:01:c6:ee:60:e2:ea:c0:3c:bc:7c:
77:11:d8:ab:68:ed:a4:a8:b6:99:f0:07:65:72:cc:0f:1f:a6:
82:5f:60:58:53:c8:16:bc:e0:a3:2d:f7:db:14:f1:6a:c4:b6:
ef:84:06:67:ae:3b:49:b9:57:a5:e6:5f:86:53:80:7f:38:b2:
83:76:5f:b0:e9:9b:90:09:f4:50:05:ac:dd:86:42:d0:bb:72:
e9:c7:77:a1:db:11:39:37:04:12:a8:28:3a:db:6f:1c:d9:57:
90:69:a1:5a:4e:81:e1:60:a3:59:36:d1:f8:6c:9d:58:8f:ca:
f4:00:98:fa:b0:38:23:5c:12:90:58:98:b2:f6:e4:43:39:1d:
71:82:35:b7:b5:e9:a4:52:e5:23:a2:dd:bb:ae:11:b5:02:6c:
4d:ed:51:6b:54:5d:90:b3:fb:9c:f1:73:0f:9e:d2:ed:e2:bb:
34:da:b5:b1:aa:c3:6d:f4:f2:2a:ea:29:28:3d:a9:51:5d:83:
28:8e:d9:66:eb:92:52:7f:fa:dd:72:c4:20:c0:b0:f8:2f:1b:
a8:57:fb:3d:79:d6:fc:ed:77:f1:1c:02:0a:8d:72:f5:80:dd:
8d:59:1c:3e:8b:e6:5f:79:00:87:e7:e2:85:cf:6b:5d:50:a5:
18:e3:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:55:39 2026 by rpki-client