Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: CRWu1n/bbT5v+B4DIQNiLwR9Q+yR1mnLXSwDFNIw1us=
Subject key identifier: AB:B9:80:74:84:6F:EF:C9:37:2A:31:3C:81:60:FD:4A:6B:98:22:E8
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 01A180065E8F01472BA5BCDF46B6D71092F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 161C
Signing time: Wed 28 Oct 2026 01:01:03 +0000
Manifest this update: Wed 28 Oct 2026 01:01:03 +0000
Manifest next update: Thu 29 Oct 2026 01:01:03 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: phvpRcWMQsiJsmTWeqEespTu3D1h8KZNIxjWf5VN+Cw=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:5e:8f:01:47:2b:a5:bc:df:46:b6:d7:10:92:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Oct 28 01:01:03 2026 GMT
Not After : Oct 29 01:01:03 2026 GMT
Subject: CN=abb98074846fefc9372a313c8160fd4a6b9822e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:8d:23:bb:9a:8f:15:2d:7c:bb:9e:7b:c1:
70:f6:2d:8d:91:d8:56:70:3b:9c:cd:74:67:c0:5e:
79:47:67:59:d3:71:88:1e:3a:24:9e:88:ca:db:5d:
1e:cc:f9:8c:91:eb:a5:74:74:f9:f9:02:ee:da:84:
c3:74:19:10:d3:9c:c0:de:4b:0d:b4:fd:58:f2:07:
4e:53:29:7b:1b:e9:30:73:3b:b5:a0:89:e9:3c:1b:
45:5b:1c:01:ac:17:5d:cb:1a:8b:43:b3:48:75:40:
f3:92:c7:a6:4f:58:11:ba:30:8d:75:2f:94:c3:e2:
ab:92:ef:05:cd:cb:bb:4f:41:52:06:59:da:6e:4d:
d7:e5:51:a3:89:eb:69:38:f5:7d:f8:99:af:d1:88:
ed:9f:6a:11:a5:77:3b:21:e5:92:6c:2c:10:db:7c:
c9:00:84:9f:d6:21:95:b6:2f:49:2d:c7:9f:1f:52:
c2:26:8b:21:a3:a3:28:74:4c:b1:31:ff:ed:5d:ef:
64:04:8f:b1:b4:f9:a5:8c:e9:ce:a2:23:42:ac:75:
31:cc:35:bf:06:01:4a:65:86:1c:42:80:bb:dc:95:
a6:88:d6:26:4c:fd:e4:9b:04:53:e8:77:6e:d6:cf:
5a:60:ba:0c:b7:d8:a0:8a:26:8a:0f:8c:32:5d:34:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B9:80:74:84:6F:EF:C9:37:2A:31:3C:81:60:FD:4A:6B:98:22:E8
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:99:17:e3:65:6e:9a:43:2d:0e:4f:b5:ca:6a:7b:f5:c8:e2:
2e:27:c0:25:b4:dc:26:d6:b3:50:32:80:0a:ec:c8:9c:f0:67:
0e:02:b2:01:33:0b:ff:02:04:b0:73:8c:5d:7e:7c:35:db:26:
be:f3:06:67:f9:b7:87:55:9b:0e:ff:ce:8d:9d:e0:32:3a:ca:
2f:e8:9d:a3:6e:0c:47:f3:ea:d2:23:c9:82:4d:ad:54:20:d0:
02:f9:a9:59:60:35:c8:68:0d:71:c2:1a:56:e9:11:38:31:fd:
71:d5:44:d4:67:61:22:4f:e0:c1:60:16:f8:a1:27:04:67:6c:
76:78:b0:85:85:28:fe:f5:95:00:06:86:34:ef:22:6a:d4:f1:
ca:5b:b0:51:6a:c9:44:28:ea:4b:35:73:c1:4f:0e:96:ce:10:
f5:52:cd:41:34:97:c1:16:f7:56:cd:38:1b:df:2c:9c:ef:4b:
f6:2a:c2:cc:9b:34:c6:b9:f3:ae:91:58:b0:af:a8:fd:06:f8:
98:b0:cf:2e:81:d5:e3:46:51:05:81:4f:47:a3:2c:23:03:69:
bf:2e:b1:cf:9f:b9:ee:8a:4b:79:d0:d0:79:d6:8e:59:28:e2:
ea:66:f3:e5:7b:94:66:01:f7:d3:08:72:20:36:9a:16:cc:ae:
b7:d9:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:24:41 2026 by rpki-client