Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: 9dd9VeBY4XzSQEuKR1r5x7K2v3vYltfkZ9TkmGXZN2s=
Subject key identifier: CE:51:29:2B:1A:0C:88:91:B6:9E:19:0D:5D:BE:A1:5C:B0:BC:FE:BB
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 01A181871E132F5015877BB25E37670B6E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 0AFE
Signing time: Wed 28 Oct 2026 08:01:18 +0000
Manifest this update: Wed 28 Oct 2026 08:01:18 +0000
Manifest next update: Thu 29 Oct 2026 08:01:18 +0000
Files and hashes: 1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: jCMbt1sXKge4M6pRMhQsTs/0tRYDnpk/CbnByMyjOLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:1e:13:2f:50:15:87:7b:b2:5e:37:67:0b:6e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Oct 28 08:01:18 2026 GMT
Not After : Oct 29 08:01:18 2026 GMT
Subject: CN=ce51292b1a0c8891b69e190d5dbea15cb0bcfebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:5d:0c:e6:20:b5:da:dd:84:b6:c9:37:2d:
65:d3:7c:87:33:f2:6a:04:9b:b3:fc:38:31:e0:9c:
9d:05:6f:3d:61:1f:e2:6b:dd:c8:92:46:d4:fa:e7:
66:9b:c4:d2:4f:c3:6a:a3:33:33:d1:ae:fb:57:d0:
0a:48:cb:99:bf:fd:b6:b8:af:10:9d:25:cf:ea:66:
e0:b0:04:b4:7d:dc:c6:55:bb:49:0c:b1:de:84:ae:
37:e3:8e:fc:f9:cc:9e:b6:8d:ed:54:cf:42:45:a5:
db:b5:d3:02:6e:13:44:a4:dc:ef:7a:cd:1d:ce:88:
48:b1:43:72:8e:bb:10:1a:9b:b6:0e:42:38:4a:f3:
eb:7a:6a:b8:fe:8c:c9:aa:b1:b4:13:de:f9:5e:f1:
5b:03:0c:9a:5f:97:c3:58:05:1e:0a:94:db:8a:81:
5f:19:cf:8f:58:26:18:a5:1c:75:1d:d8:a1:30:b9:
8b:f9:db:bd:d7:59:38:22:b0:49:8a:88:d7:b8:33:
6c:ec:2e:4e:6d:15:cb:de:e0:b1:a9:68:5c:42:ef:
1f:f5:ff:40:1d:0b:e5:ba:2f:6e:3a:08:3b:16:cf:
35:70:43:53:22:84:f3:ce:b7:9b:de:62:08:47:dc:
89:9f:f0:86:33:34:9e:18:15:85:f4:ed:28:bc:0a:
58:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:51:29:2B:1A:0C:88:91:B6:9E:19:0D:5D:BE:A1:5C:B0:BC:FE:BB
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cc:5c:69:f7:dc:08:0a:44:23:57:6b:ca:2f:69:25:3b:12:
9a:26:29:77:eb:d5:40:c7:1b:29:1f:0e:05:6b:eb:54:fc:39:
28:93:5e:0d:53:69:e9:0e:d1:3e:e7:19:85:e3:36:d9:f9:b1:
dc:b9:59:55:35:aa:6d:51:c0:9e:44:3e:9c:9a:4d:5a:d3:70:
7f:b7:e1:8f:99:a5:d3:fe:ce:aa:28:ff:5a:d2:89:39:64:be:
09:6b:25:18:bb:6c:40:e3:36:2f:69:d2:c1:74:4b:fc:a4:6f:
66:75:e6:ea:f2:ed:b7:2d:d4:b3:91:8d:b8:11:e6:a0:1d:40:
be:b7:a8:d9:4d:3f:cc:b8:0a:e8:fa:d2:b8:ef:bb:11:23:a1:
b6:f5:4e:86:f2:6b:c8:e4:5b:47:9b:b0:85:a8:b7:69:cc:a2:
bc:6b:1f:58:4d:4f:86:bd:30:c5:b6:33:63:50:d9:30:5c:66:
97:7f:16:78:a4:ea:b5:f4:3f:85:c9:7a:37:ae:d0:6b:64:1f:
b3:38:64:3a:ac:8a:eb:c0:49:bb:4a:6a:70:60:2b:99:1e:92:
68:ea:14:0c:02:23:af:39:b5:91:87:b0:e0:22:66:ac:bf:05:
50:15:fd:5a:b9:b6:45:a5:76:31:00:c8:e3:28:48:c7:8f:eb:
d7:c3:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:08:20 2026 by rpki-client