Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: QBzrdbhP8xjkZVPHIwAqzFzfCMcz4OuaBtRB0b4RhXo=
Subject key identifier: 93:54:E2:DC:07:01:75:DF:0E:B4:1D:53:D0:CF:9E:1A:D8:56:A0:40
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 01A0D64C2C77C47B81FD3B7963E83BD031EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 1993
Signing time: Fri 25 Sep 2026 02:01:51 +0000
Manifest this update: Fri 25 Sep 2026 02:01:51 +0000
Manifest next update: Sat 26 Sep 2026 02:01:51 +0000
Files and hashes: 1: PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa (hash: ClKyMhw4ls8O+22d3zwyr4Of9HO2Cqaa8e0NaPqWqxo=)
2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: JMSNZyJp9gNFZuN/cGm0L35Cql9r1h2sRodYu0cHqN4=)
3: pteb03Zrz-92mfGhlVuUAxWiO1c.roa (hash: Tlsfv5MPyjgb+Ws3wZ+t04Extj+nRQ2rvjb3jvw/n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:2c:77:c4:7b:81:fd:3b:79:63:e8:3b:d0:31:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Sep 25 02:01:51 2026 GMT
Not After : Sep 26 02:01:51 2026 GMT
Subject: CN=9354e2dc070175df0eb41d53d0cf9e1ad856a040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:33:f2:5b:2b:b1:50:db:30:4d:b5:1c:99:
78:ec:85:a9:60:e0:54:bb:e6:98:87:88:2a:10:5f:
fa:a7:48:c1:de:35:c0:b2:cb:b4:97:d9:31:d3:bc:
27:87:94:65:00:a9:ec:d0:b9:71:5b:4f:e9:b0:20:
27:70:a1:bc:dd:71:2a:84:dc:64:3e:61:e8:cd:40:
31:df:39:4c:8f:cd:bc:18:20:b3:3b:e4:d8:c5:dc:
8e:ab:24:f9:4c:f6:d1:e7:ac:f6:74:58:ce:d4:12:
16:cb:3d:d6:25:49:52:d4:a0:5f:55:28:a6:45:db:
07:38:3b:d0:ad:38:22:9d:be:2f:d0:24:e0:5b:ed:
be:3a:4f:96:5c:55:a7:73:8b:19:a3:b2:b4:69:e9:
96:ea:c2:eb:fa:1a:e6:da:14:1a:88:27:6d:9d:05:
bf:67:05:4b:b0:7c:eb:21:0f:11:bf:f6:d4:43:8e:
48:54:c9:d1:78:b1:f7:63:8c:62:61:68:87:cc:7c:
d5:1c:8f:19:43:4a:9b:ff:87:4f:2e:3f:e1:41:ab:
77:0d:c8:78:71:2b:4b:4f:c7:96:02:6c:41:30:64:
72:8d:24:da:f4:32:f8:5c:f8:2a:75:f8:9f:55:4e:
c5:a6:82:d6:04:05:d4:11:d0:c4:71:80:0f:9f:3f:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:E2:DC:07:01:75:DF:0E:B4:1D:53:D0:CF:9E:1A:D8:56:A0:40
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e7:fa:dd:9f:79:96:e4:a5:46:7f:ec:43:ef:5d:42:c4:65:
e9:b1:c4:cd:eb:57:19:42:76:a6:64:cf:b7:65:8a:11:b9:42:
74:b3:61:b1:12:c4:c9:21:e0:67:8a:27:f0:84:02:14:7c:58:
0e:82:74:84:b8:28:b9:bc:c1:dd:98:7b:38:67:86:27:de:2f:
d6:63:b6:5d:f1:df:38:8d:d6:57:86:e9:e1:e7:a0:6b:4d:88:
e1:41:73:c1:ca:0d:8e:2e:42:84:84:8f:03:e9:43:95:86:6c:
b5:6c:33:de:ca:05:7d:5b:a1:95:3a:17:b2:a6:7a:67:42:e9:
68:e4:44:c5:13:1a:12:82:6d:e9:e0:16:17:97:58:68:b9:21:
ef:67:8a:9e:52:20:ff:82:39:09:c9:1d:a2:75:82:31:50:38:
e1:4b:1b:2b:24:d6:f4:85:1b:e2:0c:09:ea:5f:24:9f:a4:47:
dd:3f:c7:e5:94:b7:74:7c:fe:3c:5d:3c:5a:79:04:18:64:8e:
2c:f0:39:39:f5:2c:61:e8:ea:6c:dc:a7:28:77:5e:2b:d7:a7:
31:5c:03:08:a2:f3:c6:35:40:9d:0a:24:f3:4b:f7:5e:83:09:
0c:14:4e:5c:91:9b:c3:2a:de:e9:8c:0b:d7:b6:f2:e7:9b:8c:
b3:52:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:52:49 2026 by rpki-client