Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: dX+ZnkrULDPyq9/s0+C/fFwq7MOyDN+npCAevKTanyI=
Subject key identifier: 60:1F:51:08:DB:AA:E0:99:50:13:A7:96:D4:9B:36:68:B4:C6:73:2B
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 01A08D1FECF08AD72E40A62E498F666F42CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 0990
Signing time: Thu 10 Sep 2026 21:01:14 +0000
Manifest this update: Thu 10 Sep 2026 21:01:14 +0000
Manifest next update: Fri 11 Sep 2026 21:01:14 +0000
Files and hashes: 1: AhYsuHNUbK8a0XunNi5rUoZZd74.roa (hash: +Iz4KrzXh/10Mx5yBgfEhonyL6CqUOw7mbJ6px2LQGs=)
2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=)
3: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: 2kInEFp/ciTmu6eE+KQ0b8qhm1G4pT3cdVmFJhXFZ5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:ec:f0:8a:d7:2e:40:a6:2e:49:8f:66:6f:42:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Sep 10 21:01:14 2026 GMT
Not After : Sep 11 21:01:14 2026 GMT
Subject: CN=601f5108dbaae0995013a796d49b3668b4c6732b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:e8:d7:56:93:7f:73:4b:8b:7a:33:84:9a:
f0:4e:49:fb:bc:67:2d:20:5b:87:1f:51:d6:2b:c8:
f8:7f:0d:37:82:49:47:2c:31:eb:b4:09:f3:0c:b9:
1f:7f:f5:55:eb:ad:3e:42:2b:95:fa:0b:df:82:0d:
db:b9:5b:af:f3:0a:76:95:9f:1c:3a:8d:97:5f:07:
4e:11:90:71:f2:2f:55:18:a4:29:a6:c4:88:f7:9f:
c3:d2:0f:15:61:f4:1c:fe:e2:d9:a4:48:fd:6c:27:
81:fe:40:45:dd:1f:0e:99:70:c6:c9:18:d2:20:1e:
c0:f0:90:a5:af:04:3c:20:8f:0e:e3:5c:f2:9a:f8:
cf:2b:5a:c3:9a:96:f9:19:1e:ef:0e:4f:30:09:f8:
aa:b6:e4:67:69:ea:37:2a:2a:09:3d:38:33:0f:ca:
a0:2d:26:96:2d:74:46:c4:0a:3a:0c:f0:12:20:5a:
ce:a8:d2:fa:84:e0:91:ca:58:10:02:8f:6c:b2:1f:
9d:15:23:9c:95:28:3b:3f:46:0b:f2:8a:ae:9a:18:
67:5c:73:56:42:21:73:12:74:16:99:9e:fe:c0:16:
84:6f:a3:d0:cb:24:bb:77:97:3e:41:f4:56:55:da:
6b:c9:8e:a1:6f:5d:1b:7f:e0:59:c5:0b:94:a3:2b:
62:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1F:51:08:DB:AA:E0:99:50:13:A7:96:D4:9B:36:68:B4:C6:73:2B
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ab:28:15:1e:95:4c:a4:2f:a5:db:7d:ef:da:f7:d4:e4:70:
57:64:32:41:5e:8e:37:c7:58:d8:17:be:4a:2e:33:35:9b:dc:
61:02:2a:92:74:ab:29:16:f3:c9:96:4e:83:1b:06:54:10:5e:
be:5d:a2:f5:4a:ff:14:54:9f:d7:0f:a9:22:53:f5:67:ca:1a:
96:7d:73:d2:27:3e:cd:f0:26:59:d7:30:74:6e:a3:11:b7:4e:
cc:73:ac:1b:b8:b2:db:96:aa:a1:ef:9b:ea:43:32:42:8e:a3:
60:8f:83:c5:f1:60:7a:ee:ae:21:60:25:2a:20:19:a2:a2:dc:
f9:6a:67:42:4e:57:93:9f:fb:a2:9f:08:56:7b:40:4e:e0:07:
60:20:ca:86:63:1c:0d:58:1b:32:08:ec:b3:5d:53:3d:e3:6f:
1a:c1:a6:e9:d3:eb:96:08:34:ea:1f:6a:6b:3f:b8:bf:f6:b5:
68:54:e9:78:d6:1a:ab:8e:b2:d3:b3:91:79:dc:bf:9e:21:3b:
15:2a:fd:63:8a:9f:34:84:d0:ec:e3:b8:45:80:79:44:83:78:
19:1c:ce:00:a5:9e:5a:48:ff:c7:c2:d5:84:17:94:a2:16:e2:
69:09:9f:30:ec:11:52:f2:eb:f5:b3:d4:8c:e1:ad:27:ae:ad:
ca:f7:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:55:50 2026 by rpki-client