Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File: oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier: gAYX64mXsjH7jeVU2uuWzYaNNFaFArxjmoy4movFrAU=
Subject key identifier: 73:8A:C3:A6:CF:30:D1:ED:C4:9F:81:17:C6:12:B4:6C:3A:05:33:50
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 01A0569E5BC236CE35540233B9BA66AA9C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number: 1A2F
Signing time: Mon 31 Aug 2026 07:00:13 +0000
Manifest this update: Mon 31 Aug 2026 07:00:13 +0000
Manifest next update: Tue 01 Sep 2026 07:00:13 +0000
Files and hashes: 1: jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa (hash: QuobanihGf2Vt3kAlHWHavYrnvmF3ftRBf2VjsfIBoY=)
2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: MYYipcW6P0fAb7UnDHIz/9sYHyBDIGhOI+8ZyKe7nUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:9e:5b:c2:36:ce:35:54:02:33:b9:ba:66:aa:9c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Aug 31 07:00:13 2026 GMT
Not After : Sep 1 07:00:13 2026 GMT
Subject: CN=738ac3a6cf30d1edc49f8117c612b46c3a053350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:ce:0d:c2:90:47:8d:50:ed:4e:0a:fc:0b:
c0:57:8b:f3:48:7c:d6:a5:35:e9:4a:dd:d8:e0:5a:
46:dc:da:72:84:47:ef:fd:38:df:7b:92:de:ca:9f:
12:ca:06:b4:61:87:53:23:2f:b4:17:ec:40:dd:67:
d8:65:07:65:87:8d:af:c9:bd:90:8e:93:ea:52:4a:
a0:33:cd:eb:70:d3:a6:a3:86:36:ce:33:44:b5:be:
fd:43:93:83:ac:b8:e6:4e:ef:ab:36:a2:84:c2:69:
d8:89:32:44:a4:2e:13:ff:22:4e:fb:03:10:57:ea:
22:28:ab:9d:9f:fc:ce:67:36:1c:c3:93:03:65:d0:
80:86:b1:d2:5d:06:98:0f:a1:f9:d6:78:57:34:c8:
eb:37:cf:20:68:e6:6d:c1:73:82:56:11:62:22:ef:
81:26:8a:47:87:eb:09:c3:de:c8:4e:dd:1b:f6:eb:
b3:e2:d4:6a:5e:2e:0c:83:47:11:1f:44:4d:73:71:
a3:94:62:f5:cf:5a:34:fa:49:5c:42:79:91:46:a0:
ad:cd:a1:e4:2b:35:4e:1d:76:36:e8:66:c3:7a:2d:
36:6b:12:31:43:ed:f7:a3:49:e9:3e:1c:4c:1a:67:
19:7f:bb:c5:3f:bd:5d:28:c4:ad:21:7a:f6:e1:96:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:C3:A6:CF:30:D1:ED:C4:9F:81:17:C6:12:B4:6C:3A:05:33:50
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:af:9a:bb:23:b4:22:ea:80:d0:dc:13:ab:03:13:e9:f5:14:
43:cc:a8:42:3c:06:c1:41:2d:a1:1c:14:d3:1f:d5:4b:b7:8e:
79:df:49:6b:24:dd:5e:9f:22:72:02:63:04:7a:22:53:60:ae:
fa:90:4a:ec:16:cd:94:1a:be:de:04:97:28:44:73:d6:52:a5:
e4:28:49:c3:11:44:73:66:86:85:35:48:28:c5:25:ac:cf:dc:
af:1a:1d:19:7e:05:ce:94:ff:1e:1c:ce:91:e3:69:e4:8e:9a:
f2:b1:a3:b0:79:19:d2:9c:fe:cb:11:a5:9a:21:1a:32:55:b7:
6b:43:1c:f4:67:47:de:3b:8e:64:bd:fd:a9:f0:f9:d2:12:31:
64:8b:14:93:88:80:74:8f:9a:e9:5c:fe:14:46:a5:c4:e4:9a:
50:37:d3:95:09:ca:b7:5c:18:0b:a7:3c:53:3e:cd:62:0e:f7:
e4:39:b7:66:6d:33:11:8f:a3:67:a5:d4:08:a4:03:08:78:b7:
4a:1a:ba:29:49:a4:91:fc:76:2a:83:42:2c:ee:0c:a5:ee:8f:
b5:48:d8:b1:f7:be:18:59:6d:21:6d:30:08:92:91:d6:cf:80:
fd:27:de:66:2f:23:98:e6:57:4b:2f:a2:00:a6:4b:b0:51:6b:
ab:51:8a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:11:39 2026 by rpki-client