Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
File: oYM1MM41ev8SGjHmyY4f6RM7sCM.mft (raw, json)
Hash identifier: twcoW4OSj75EnQgEHkvEyynlSCGP+fJJ3BIluM3UXsw=
Subject key identifier: C8:BD:FB:C8:10:7B:EF:5B:1C:F3:D1:DD:AB:9D:1B:D6:C3:D0:0E:8E
Authority key identifier: A1:83:35:30:CE:35:7A:FF:12:1A:31:E6:C9:8E:1F:E9:13:3B:B0:23
Certificate issuer: /CN=a1833530ce357aff121a31e6c98e1fe9133bb023
Certificate serial: 01A06F835075169B23F7F64D0ADAA1E2B46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
Manifest number: B3
Signing time: Sat 05 Sep 2026 03:01:11 +0000
Manifest this update: Sat 05 Sep 2026 03:01:11 +0000
Manifest next update: Sun 06 Sep 2026 03:01:11 +0000
Files and hashes: 1: oYM1MM41ev8SGjHmyY4f6RM7sCM.crl (hash: bz1DCtidvX74jYw9loY/992i7KUUBwXZQGUVhtKd5/s=)
2: vZuspMqoseBbPHNG2fmOMxJAoRk.roa (hash: O8Akdsdgsu3O3BLQ4nDzeqQ7DRsdv1T4urleIjReCIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:50:75:16:9b:23:f7:f6:4d:0a:da:a1:e2:b4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1833530ce357aff121a31e6c98e1fe9133bb023
Validity
Not Before: Sep 5 03:01:11 2026 GMT
Not After : Sep 6 03:01:11 2026 GMT
Subject: CN=c8bdfbc8107bef5b1cf3d1ddab9d1bd6c3d00e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:36:0d:73:07:7c:4d:00:0c:65:0b:7c:cd:
bc:e4:50:aa:2c:36:be:ba:3e:8d:a9:df:34:11:8f:
2d:1d:5d:79:e7:97:30:33:07:5c:be:0d:05:f3:89:
80:2c:b6:d8:88:e0:22:96:86:04:e3:f2:ef:73:0b:
f6:2f:86:7c:aa:9a:5f:69:95:5b:1e:90:3d:e4:8e:
bb:29:50:24:47:65:fe:61:eb:9c:6a:e5:62:32:be:
ec:c3:5d:51:aa:3f:99:06:cb:19:b8:27:e3:27:e1:
c9:cf:3b:a8:8b:0f:16:60:a7:28:f0:ad:3a:fd:9c:
ec:6d:92:95:8c:d3:82:b2:1d:3b:cb:09:01:62:bc:
a6:7b:61:d7:79:f6:1b:e1:6a:63:3a:e8:4d:13:eb:
d8:e3:48:e5:d4:a4:1c:0a:8c:16:a5:34:53:9e:02:
07:79:aa:ba:d9:89:c0:85:99:4b:36:e0:dd:d5:ec:
4d:54:df:0f:4d:b2:5f:36:dd:92:f4:96:95:76:f5:
99:b8:70:71:d1:42:36:57:c1:76:89:b7:be:97:54:
ad:b1:4d:69:61:23:08:0b:bf:bd:1d:03:01:01:da:
ee:17:ab:31:66:62:80:05:0b:97:a3:f5:c1:f8:b4:
f3:39:ce:c8:ae:f6:de:5b:a1:b0:f9:88:1a:ba:40:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BD:FB:C8:10:7B:EF:5B:1C:F3:D1:DD:AB:9D:1B:D6:C3:D0:0E:8E
X509v3 Authority Key Identifier:
keyid:A1:83:35:30:CE:35:7A:FF:12:1A:31:E6:C9:8E:1F:E9:13:3B:B0:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:77:5e:11:84:aa:74:f4:43:52:7b:c9:7f:61:9c:79:ac:2d:
08:3b:63:4f:0b:9a:50:ee:23:d7:bd:b0:0a:9e:98:60:41:5a:
d7:ce:b4:e0:72:80:a8:b1:90:c9:e9:0b:d9:43:74:3a:5a:59:
47:9c:1d:e8:87:cc:85:7b:50:8e:10:8d:af:e2:da:f7:94:87:
2b:17:cd:5c:79:21:cb:98:40:16:e8:50:b0:ca:48:29:4a:36:
d7:e7:9f:98:b9:68:4e:20:06:0c:ba:47:29:ee:4f:4d:5a:47:
dd:02:44:72:47:2a:1f:7b:bf:44:cf:16:58:31:66:bc:20:89:
0c:9b:07:35:c3:9e:8e:57:a7:19:62:69:4b:cb:cd:4a:7e:45:
b7:d2:ab:54:71:d8:6e:c7:b6:8f:ec:d1:05:ac:7d:6a:87:1c:
b2:a9:42:35:6f:e2:2e:f8:73:5f:74:8d:f0:b5:67:c0:3c:82:
5c:ca:be:4f:c3:dc:b4:0e:49:c2:df:be:82:8c:cf:6b:eb:c8:
63:1a:02:c1:76:13:e2:28:65:10:44:85:c8:d0:e4:e2:22:5e:
6b:93:90:b8:c7:d8:36:8b:5c:77:b1:37:21:e3:00:96:85:60:
cd:6f:f7:ec:7d:93:f7:1d:84:96:1d:d7:b0:e7:4a:3a:e8:ec:
f7:7b:3e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:42:02 2026 by rpki-client