Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json)
Hash identifier: L15L74MTOYm5i3YXL9IqRsvlIupj/mvsjeeEJMo2i2E=
Subject key identifier: 8A:D6:9E:D6:5C:02:9E:6B:D7:3A:BF:15:E3:09:18:76:1D:B5:62:73
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 01A1DE031532F3A569A580B40DCBA591C2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
Manifest number: 039F
Signing time: Sun 15 Nov 2026 07:01:46 +0000
Manifest this update: Sun 15 Nov 2026 07:01:46 +0000
Manifest next update: Mon 16 Nov 2026 07:01:46 +0000
Files and hashes: 1: dZ_wj-l4u9PRm9NioG9hfmoCmEg.roa (hash: XONI2zL//Bx6fEgV/SOZ940RDTOysbYIjp1Bo1GWQjc=)
2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: 4EHKlVLPhgcaHsZfoBLmZ1RRBcG91ZmwYfeys6o3o7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:15:32:f3:a5:69:a5:80:b4:0d:cb:a5:91:c2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: Nov 15 07:01:46 2026 GMT
Not After : Nov 16 07:01:46 2026 GMT
Subject: CN=8ad69ed65c029e6bd73abf15e30918761db56273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:7f:28:e9:bc:9c:0e:65:46:ff:86:d1:29:
8a:19:b8:f2:7c:9f:7e:fe:ca:f8:ff:c3:e0:5b:3d:
4b:4f:4b:ff:90:b9:87:c2:a7:1a:b2:d7:e6:ed:54:
95:23:e6:a8:d5:0b:31:42:15:36:88:35:57:fc:12:
90:ef:a1:72:56:08:92:7c:85:67:cc:d1:b8:52:28:
b7:d7:b4:c3:cf:c5:13:20:c7:5d:93:57:57:ab:7c:
5d:38:08:99:33:15:7c:ee:5c:61:d3:cb:0e:d9:13:
07:6c:73:d9:c5:64:8c:38:f0:28:6d:1d:77:25:2b:
ed:1e:96:c9:1c:8a:8f:75:76:3d:86:de:6e:d1:b9:
96:05:75:0c:97:e2:60:81:55:0e:11:88:eb:af:28:
7d:02:0a:6d:f0:b7:87:fc:25:f0:2a:59:32:f5:bb:
4f:2f:1f:3e:cf:25:d1:c8:4c:a9:86:9a:42:33:9a:
bd:3e:69:03:38:62:aa:14:70:46:38:8e:1c:fb:ca:
d6:fb:cf:9d:76:57:31:f8:fc:b0:b7:c2:fa:87:30:
95:24:06:9a:b5:f9:1d:a4:01:af:80:ee:a6:63:bb:
f6:6f:42:de:f0:ac:c9:15:68:6c:a5:74:7b:e8:96:
1c:83:f9:5f:22:d9:50:76:a4:70:34:92:21:8d:46:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D6:9E:D6:5C:02:9E:6B:D7:3A:BF:15:E3:09:18:76:1D:B5:62:73
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ce:8e:2e:46:26:18:10:68:32:41:2c:7d:0e:1d:a0:67:3c:
b2:1e:9f:82:28:16:d8:a3:0f:99:0b:20:2f:9e:89:f0:22:be:
ac:70:c5:84:29:09:27:6a:1d:04:56:2d:f2:33:fd:33:14:2c:
5a:2f:20:0c:47:b5:78:08:8e:a9:55:d8:68:f0:d6:82:1c:80:
75:93:4f:91:5b:e5:d9:8e:c2:94:7e:aa:54:0e:f9:31:2d:e5:
df:b7:0c:7f:7f:ba:0a:45:96:db:8e:e4:ab:30:a9:aa:26:fe:
02:3c:47:4d:d1:71:f7:27:b6:57:96:af:5c:ec:6c:b6:1a:7a:
bb:27:9b:ed:82:9b:b6:1d:5c:46:e4:e1:90:f1:f9:2f:f1:15:
b2:6a:60:c9:25:51:9e:ab:e7:62:04:70:da:f9:3e:e3:d5:a4:
1e:0d:90:56:ac:54:36:7f:a5:3b:ae:06:c6:f3:52:9e:6c:8b:
71:a5:68:b7:e0:ac:6e:52:5d:b5:27:60:98:4d:3b:d0:51:1c:
87:e6:46:23:a2:1d:a6:3c:72:23:36:d0:fe:17:9b:a7:48:66:
15:27:8f:6e:a7:c3:80:03:fa:32:9a:ef:3d:3f:87:b2:31:b2:
3e:65:34:0c:51:99:44:a9:0f:90:46:ab:d8:f2:18:05:f6:ed:
e9:ea:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:30:46 2026 by rpki-client