Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier: rb7Wr8iF7yPBB+SVKxhwPMSodVkzWWFuyVLpGiZEtmY=
Subject key identifier: 9D:14:CF:7D:57:1D:A6:3E:0C:D7:B8:09:96:37:FF:C7:0E:6A:09:6B
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial: 01A178F0DF6CC41BCE48ADCB0D5D608F9C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number: 13F1
Signing time: Mon 26 Oct 2026 16:00:14 +0000
Manifest this update: Mon 26 Oct 2026 16:00:14 +0000
Manifest next update: Tue 27 Oct 2026 16:00:14 +0000
Files and hashes: 1: E_iRTXv34ZqZD3pIYO9UjKGuMZM.roa (hash: i1fiJO0e9H9m1mOdq45mO4/oIY+M6L6ueaw+taXDZdY=)
2: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: L45lz92zL3I0e0dgl/U5x8mPMzxd3K4gpuI3WRRz2Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f0:df:6c:c4:1b:ce:48:ad:cb:0d:5d:60:8f:9c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Validity
Not Before: Oct 26 16:00:14 2026 GMT
Not After : Oct 27 16:00:14 2026 GMT
Subject: CN=9d14cf7d571da63e0cd7b8099637ffc70e6a096b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:37:5d:b0:de:b4:48:85:2c:cb:37:07:e5:
fd:cd:7c:ab:80:f3:21:07:71:0e:09:cd:50:c1:e9:
43:13:26:03:2b:55:fa:7d:3e:da:aa:55:a4:17:fd:
3c:9b:f6:ef:af:b0:6c:92:74:47:8f:20:d5:ff:f9:
4e:92:ad:86:e6:54:21:58:01:b7:f8:ed:1b:c7:d5:
2b:46:49:df:6d:bd:50:7b:04:5e:ee:24:0b:43:2d:
62:d0:40:a1:0d:39:a3:2a:0c:06:55:ae:1d:2b:6f:
fd:e0:3a:a3:86:c2:68:34:00:3a:a4:3c:71:eb:50:
72:f6:de:58:94:7f:90:f0:79:08:aa:29:2f:9e:da:
f9:64:f0:04:6c:51:38:61:6b:7c:35:18:ca:96:9d:
1b:fe:68:66:e0:b3:84:27:82:b3:6e:03:fa:11:86:
a4:8b:99:40:56:05:f3:a5:6f:02:00:47:84:90:f1:
f2:37:59:13:89:9a:24:a7:37:40:d8:43:9f:46:8a:
d1:7c:b8:00:b3:19:ff:21:3c:d1:41:53:60:90:e6:
0b:fe:63:d6:1a:f2:95:1f:f4:fc:47:8b:52:69:7c:
22:ee:cb:55:58:ad:25:5f:82:6c:cc:b5:f2:98:db:
c4:4b:01:de:ff:35:f8:46:f5:c7:b6:43:24:0f:bd:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:14:CF:7D:57:1D:A6:3E:0C:D7:B8:09:96:37:FF:C7:0E:6A:09:6B
X509v3 Authority Key Identifier:
keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:91:a2:46:94:8c:39:c0:d5:31:2a:19:af:a4:59:55:16:d5:
31:f5:49:46:84:53:85:91:d4:b4:56:03:b5:ae:3d:b3:1c:4c:
8e:47:32:d6:c3:2c:05:e7:c9:8d:4b:09:67:1a:2d:77:b9:14:
4d:20:4b:7f:a6:5a:f0:a1:f8:2d:05:c4:8b:23:38:58:ce:cf:
b9:92:16:d7:61:84:11:e0:24:f5:36:bd:c0:2d:25:22:45:31:
8c:00:d2:db:d6:14:ba:f8:2c:55:b5:c3:e5:36:4c:f8:2a:a3:
0e:42:2a:54:31:8f:90:bb:eb:f4:b1:4c:95:60:0f:5a:fc:e5:
94:c9:8d:f9:e7:4e:b2:ce:d7:d2:c6:52:8a:1a:5d:7d:9e:fb:
8f:59:72:3a:84:02:4d:d9:63:9d:c0:af:70:a4:9b:3f:81:0a:
fa:7f:f4:02:8c:dc:1a:59:e9:fd:bb:78:75:ba:3d:f6:6b:bc:
28:0c:7c:60:21:7c:40:da:25:60:3a:da:f1:72:95:d4:85:c5:
3b:07:bd:7a:20:24:d2:67:bc:1d:e7:bb:a1:a4:ed:bd:b1:05:
10:32:b1:4c:ac:11:c6:fa:a5:c3:9a:f9:98:d7:40:d2:66:25:
77:c3:26:46:a4:44:d6:2c:d5:3b:bd:b7:96:57:34:0c:19:83:
c0:1e:13:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:22:20 2026 by rpki-client