
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
File: oEGdRgkuRJjImA9ydB3ICBKViRM.mft (raw, json)
Hash identifier: /QcdE1vEBbJBQQIAD04Ss8jlNdVPGRj+0HP/jSzp+Kw=
Subject key identifier: BC:26:C0:8E:FB:F8:DA:CC:60:4C:9B:AC:2C:1C:F6:F7:7B:3A:DE:76
Authority key identifier: A0:41:9D:46:09:2E:44:98:C8:98:0F:72:74:1D:C8:08:12:95:89:13
Certificate issuer: /CN=a0419d46092e4498c8980f72741dc80812958913
Certificate serial: 01A1212E61D3AAF363D0CD359FD00E828747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
Manifest number: 010F
Signing time: Fri 09 Oct 2026 15:00:50 +0000
Manifest this update: Fri 09 Oct 2026 15:00:50 +0000
Manifest next update: Sat 10 Oct 2026 15:00:50 +0000
Files and hashes: 1: bYlwrMMouNe0wX8geEjx6w5BJcQ.roa (hash: L0irFgfGqAy5AaADSGRWA2XK+/VEh5b8QXvaP7jtIlM=)
2: oEGdRgkuRJjImA9ydB3ICBKViRM.crl (hash: LZqHbBF4l6egrO2dyeqIY93OIgJx/puhAuTsFFxFBfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2e:61:d3:aa:f3:63:d0:cd:35:9f:d0:0e:82:87:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0419d46092e4498c8980f72741dc80812958913
Validity
Not Before: Oct 9 15:00:50 2026 GMT
Not After : Oct 10 15:00:50 2026 GMT
Subject: CN=bc26c08efbf8dacc604c9bac2c1cf6f77b3ade76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:5b:80:50:23:6d:fa:e1:10:eb:4e:c2:6d:
90:91:d3:0a:9d:97:cc:6b:bd:e4:71:1b:f0:a8:07:
1f:dd:58:f9:fb:d2:f0:d4:a3:c2:3b:f7:85:ab:25:
cc:4a:6b:17:ee:3e:02:72:1a:8d:9b:7c:d3:b8:69:
ed:e4:69:de:7b:b5:aa:53:df:c2:1f:4f:d8:ce:60:
6b:06:5b:ec:8b:aa:58:f9:94:97:01:75:51:26:6f:
4d:86:2f:d7:42:2f:89:34:1d:5e:d0:a7:fc:a8:12:
fe:7c:9c:a0:37:d5:eb:15:58:99:e3:76:bb:88:ef:
a8:a8:da:63:01:a4:c5:95:b1:b5:94:13:26:11:fb:
63:73:f9:91:c0:45:a3:2a:5a:a7:ea:4a:b2:08:08:
a1:1a:fb:68:66:c4:2d:57:4a:21:1d:86:2a:d2:e5:
46:71:f5:b3:af:87:0f:11:09:89:71:bf:c9:6e:a8:
09:be:18:9c:e9:fc:5e:1f:51:b5:8d:a3:2f:56:80:
2b:98:e2:83:dc:27:68:a2:68:46:fa:d6:bd:ea:fc:
21:20:62:43:74:65:6e:ea:77:ce:ac:7b:c2:b4:36:
ff:dd:b2:01:86:df:1a:9b:fe:7d:85:98:5f:79:73:
6d:8d:7b:1b:c2:95:2d:37:fd:50:12:70:be:9a:34:
fb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:26:C0:8E:FB:F8:DA:CC:60:4C:9B:AC:2C:1C:F6:F7:7B:3A:DE:76
X509v3 Authority Key Identifier:
keyid:A0:41:9D:46:09:2E:44:98:C8:98:0F:72:74:1D:C8:08:12:95:89:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c9:a4:7b:d1:35:07:b1:4c:3e:74:2e:1e:ec:83:8a:0c:79:
1d:7a:78:cd:28:97:0b:7e:2e:f3:61:b0:77:ac:e4:8e:7e:9f:
b1:2a:14:13:d7:cc:7b:42:0a:fa:6d:f2:5c:81:c3:17:99:3f:
1a:e0:5a:a5:47:b6:14:9d:1b:cd:41:45:bf:e5:8a:34:09:96:
eb:27:60:c1:c2:33:16:b7:34:f9:4c:c7:cb:1a:28:9c:82:9f:
6d:82:96:bb:fa:3a:76:c6:66:99:90:c2:b8:9f:5c:27:12:13:
4a:2c:9c:13:a8:40:43:da:51:0e:a2:12:bb:13:0e:81:a5:08:
16:50:08:7d:67:cb:33:54:9c:cb:fa:37:e7:3c:8d:d5:43:b2:
f7:b2:3b:a8:85:97:ea:6a:3b:f4:91:98:61:d8:03:65:5c:f2:
5a:14:c2:c0:0b:94:ad:72:1f:35:37:fb:08:35:52:04:02:b8:
c8:af:30:c6:b0:3c:cc:20:47:47:c7:d4:06:a3:38:d7:0b:f5:
fd:9f:42:f0:12:a6:fd:7f:59:2f:2d:b2:3b:62:03:d9:03:f3:
45:24:ad:88:6c:31:b0:c8:5e:1d:c6:fa:ac:c8:20:2f:fa:0a:
8a:ea:a2:0c:ed:93:87:b7:5b:b2:2a:bf:d1:b9:c2:ab:fc:16:
37:68:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:13:43 2026 by rpki-client