Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: JeFcL1s2DvSsPNPQOOiixH5Epo9N9SxgfJivO9fUlXE=
Subject key identifier: D2:20:82:BC:E4:B0:10:EA:64:50:BB:61:11:0D:41:76:F6:F8:3E:35
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 01A0889F27A62AA843F5F8804505E94F99C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 05D5
Signing time: Thu 10 Sep 2026 00:02:06 +0000
Manifest this update: Thu 10 Sep 2026 00:02:06 +0000
Manifest next update: Fri 11 Sep 2026 00:02:06 +0000
Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=)
2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: MsBbLhOmbDh4au0ISsvsZsQSSKB7WN7Q8VmTsC7zXrE=)
3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9f:27:a6:2a:a8:43:f5:f8:80:45:05:e9:4f:99:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Sep 10 00:02:06 2026 GMT
Not After : Sep 11 00:02:06 2026 GMT
Subject: CN=d22082bce4b010ea6450bb61110d4176f6f83e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:fb:fa:32:a1:fb:28:24:24:1d:fc:09:f6:
1a:db:3e:4a:85:b8:2f:ef:c7:13:39:7a:2b:45:dc:
c7:37:ab:9c:36:18:e8:96:25:59:6c:df:89:c4:1e:
73:ef:f8:31:0f:76:0b:b5:48:b5:60:b9:65:01:ab:
06:b5:ff:9e:9c:3d:43:c5:2f:42:e3:56:5c:9d:63:
eb:ae:f3:69:50:bc:0b:2e:ea:e5:b8:58:24:fd:a7:
21:4f:40:46:b5:e1:b8:2d:26:38:1b:a3:c5:3f:cd:
01:58:1c:fa:0f:a1:8e:c8:ff:56:e8:9c:89:cc:a8:
3c:68:30:0c:4a:bc:ce:25:f9:c8:ec:6a:c9:9d:2d:
04:a4:f6:3f:ad:f2:67:c6:37:30:76:c2:99:28:b3:
33:9b:af:35:80:6c:fe:82:41:46:33:8f:b1:4b:c3:
84:6b:ac:19:45:03:63:d8:f7:78:9c:3e:7a:49:6d:
b5:3a:6f:c9:b3:ba:5b:0b:08:40:ad:b3:ae:2e:90:
a8:ca:1e:af:1f:13:d4:de:a9:4a:6b:2c:28:3f:cb:
7d:51:71:d6:83:9a:4e:28:7c:4e:a2:e8:65:a9:85:
70:2d:5b:d4:47:c8:d7:f1:47:11:a3:0d:c3:81:77:
0c:09:f6:58:d6:41:79:09:3b:b7:96:08:7c:79:8a:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:20:82:BC:E4:B0:10:EA:64:50:BB:61:11:0D:41:76:F6:F8:3E:35
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0c:0d:1e:e8:a9:b4:29:d1:13:3e:a7:05:85:6d:83:f7:29:
bc:9b:93:ad:c1:eb:5e:ac:e7:09:d6:54:31:fd:6e:5d:57:87:
6a:86:0e:01:95:64:87:78:e1:db:b5:13:b6:c1:aa:ed:a4:a2:
f4:3f:28:5e:27:65:68:e6:7e:7d:3f:ca:f5:79:18:79:c3:c6:
da:cb:25:c3:5f:fd:2e:bd:aa:1c:31:fe:2f:87:bd:19:c7:bc:
a3:04:85:68:92:78:1f:cb:f2:fd:de:b0:d5:c2:73:83:f0:81:
85:2c:ca:3c:04:93:59:68:9e:fc:28:3f:f1:d3:f5:22:46:4d:
31:b1:79:7d:25:7b:8c:f3:99:78:1b:cc:4c:1a:8f:b1:b1:fb:
14:3d:3c:7b:28:e0:16:a4:74:49:b4:58:ce:4e:1e:70:27:a6:
53:05:5f:0f:da:ad:92:3b:9c:86:2a:d4:4c:ae:1d:92:be:30:
a1:62:6e:9d:91:1a:7c:f5:93:4d:43:33:88:24:dc:e2:c8:2a:
fc:14:f5:b4:66:62:24:0a:51:55:b9:72:eb:f3:f1:e3:d1:b0:
eb:6e:a2:5a:04:b6:c1:65:7a:3b:de:69:d1:c9:c8:9f:43:67:
14:58:cd:09:e6:71:8b:1c:36:a9:f9:c4:d5:8a:12:23:7b:53:
25:87:e0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:01:53 2026 by rpki-client