Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: 08T0s/mWNg2Dnbhg2fDvEL4tQFSMkQR3izGVYGO0VNI=
Subject key identifier: D9:F7:8C:D8:C5:E6:45:5C:5F:E1:3F:6D:C9:3E:AE:5D:C2:70:02:31
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 019EB8EA34587BFE09313BAD378E8B4E6879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 098D
Signing time: Thu 11 Jun 2026 23:00:16 +0000
Manifest this update: Thu 11 Jun 2026 23:00:16 +0000
Manifest next update: Fri 12 Jun 2026 23:00:16 +0000
Files and hashes: 1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: MfZxZfTJtzf1TiD712D2+IHc3KWIzjzLl0NwVvPYGOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:34:58:7b:fe:09:31:3b:ad:37:8e:8b:4e:68:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Jun 11 23:00:16 2026 GMT
Not After : Jun 12 23:00:16 2026 GMT
Subject: CN=d9f78cd8c5e6455c5fe13f6dc93eae5dc2700231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:d9:2b:0f:d6:cc:df:6b:e6:1c:4d:0f:40:
8a:74:4a:66:19:2d:16:e1:cd:a8:20:d9:8c:10:7b:
30:56:f1:c5:78:f1:41:02:b6:18:29:a7:84:a9:98:
59:88:b6:5d:fc:27:21:2d:44:c2:81:4f:01:0d:ed:
2e:8c:ac:f7:e6:42:26:34:4e:e1:4e:bc:0f:ae:f7:
6d:5c:d7:34:68:9f:74:be:56:99:a3:c6:93:d0:96:
16:8a:f2:1f:93:38:95:55:a3:e7:c3:12:c4:28:01:
b4:f9:66:51:be:c9:9b:fc:7c:67:67:b7:25:da:d4:
79:cd:39:06:8f:44:fc:65:30:04:b8:83:c0:6e:a4:
b9:bc:05:22:7d:41:38:5c:d8:af:2f:bd:60:fa:de:
6b:42:1b:d2:4c:48:a4:08:b7:e5:e0:7c:7f:70:13:
92:ce:95:f2:ee:82:ec:7f:1e:4c:54:d1:02:8c:7b:
23:e4:db:8d:69:09:81:4a:be:c9:75:aa:fc:79:5c:
5f:80:fd:ea:da:16:a8:40:4e:ca:1b:35:2d:87:d8:
4a:90:ec:49:ed:cb:c1:7f:3e:7e:2b:97:c7:00:f4:
bb:97:c6:54:ae:16:4b:df:70:b2:7a:c7:ea:72:27:
60:ea:8e:18:6a:00:f5:2f:42:4c:fb:04:29:dc:9f:
66:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F7:8C:D8:C5:E6:45:5C:5F:E1:3F:6D:C9:3E:AE:5D:C2:70:02:31
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fe:59:01:ce:b6:be:04:8b:73:50:dd:e1:0b:38:02:ba:7d:
c2:c0:71:8e:25:4b:43:d4:45:18:a3:0f:3d:68:34:0d:71:26:
d8:7c:5a:12:fb:e8:b5:b1:29:21:81:ba:cb:ec:71:39:ba:e4:
6d:4e:b2:5e:71:fb:63:cf:9d:25:6b:0d:40:19:5b:d3:53:4d:
17:4a:b2:ec:96:7f:c0:24:51:71:6d:30:21:29:ff:31:6f:7d:
37:c0:f0:c1:30:ed:aa:d0:82:d3:ff:35:bf:0a:95:2e:0e:22:
47:3c:42:50:74:25:9a:fd:2d:b4:07:c8:66:13:f1:71:93:22:
f0:b9:89:85:01:da:f7:89:b9:18:51:2b:61:71:18:53:83:13:
46:e9:19:3d:0f:2c:ea:d5:c1:17:18:f2:b6:3c:c4:b7:8c:c8:
0a:9c:b3:3a:b8:f2:ba:e5:50:3a:2f:39:a8:a8:9c:dd:15:c5:
69:2b:a3:98:e2:f1:58:a9:ef:e2:bd:68:fd:fb:f5:22:93:06:
09:d9:aa:53:d3:e0:b5:05:ad:3d:26:2f:01:46:67:e1:e6:30:
03:67:ac:9d:75:1c:00:1d:84:6d:24:c2:27:95:97:ea:25:9c:
fa:94:67:c4:28:a7:36:eb:7a:17:5e:b1:7d:64:9e:07:db:ee:
18:15:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:09:52 2026 by rpki-client