
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier: 3tKwd4Ji08pnlgaNkwcnILjATzIxd4jWirlKCcitz0k=
Subject key identifier: 15:D8:2D:1F:F2:93:90:99:FD:C9:86:AE:B4:AE:DE:9E:25:60:33:A6
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial: 01A15BF9C936FD9F6156B524D4094977E564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number: 13E2
Signing time: Wed 21 Oct 2026 01:00:58 +0000
Manifest this update: Wed 21 Oct 2026 01:00:58 +0000
Manifest next update: Thu 22 Oct 2026 01:00:58 +0000
Files and hashes: 1: E_iRTXv34ZqZD3pIYO9UjKGuMZM.roa (hash: i1fiJO0e9H9m1mOdq45mO4/oIY+M6L6ueaw+taXDZdY=)
2: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: xC3dKYlWHMZ9lr/BnXB5+PdcZPyPKcAdunZGh9ranAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:f9:c9:36:fd:9f:61:56:b5:24:d4:09:49:77:e5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Validity
Not Before: Oct 21 01:00:58 2026 GMT
Not After : Oct 22 01:00:58 2026 GMT
Subject: CN=15d82d1ff2939099fdc986aeb4aede9e256033a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:a1:f4:f9:ef:64:40:16:9b:55:c0:26:10:
cd:12:1b:cc:bb:4a:98:ab:a5:f0:48:4d:64:f5:1f:
f0:22:55:ea:7e:a7:bf:71:b6:bb:a6:1b:88:1c:c9:
7e:5a:1f:36:8d:82:be:34:81:12:9c:7f:f2:d6:94:
cb:66:29:c3:fd:69:88:2c:7b:64:15:18:51:9e:56:
6c:86:b7:76:cd:ee:49:6e:ce:c4:1f:e0:0a:c5:4a:
ac:ae:76:db:8a:a8:a0:c6:62:3f:73:b5:5e:b9:8c:
3a:9c:32:04:22:39:fd:2f:74:db:61:3a:2c:1e:74:
9c:45:42:95:31:61:1f:b6:60:3c:a4:2f:65:d4:ce:
7c:50:2d:c3:6c:70:0a:d2:0b:97:9e:a8:2c:c3:a6:
f3:37:7d:15:c5:93:17:58:c3:73:3f:42:88:b9:3b:
1b:42:19:dd:4b:91:db:2d:2f:c8:ad:06:b6:bc:e9:
bc:4c:61:0c:45:18:66:88:ab:df:23:07:6f:6d:b4:
14:f8:3f:73:e1:c4:a3:c1:40:27:21:d0:78:19:b1:
d4:ba:8e:82:ac:ac:2b:87:ca:09:96:ee:c7:e4:a6:
d6:27:4b:19:d1:a1:36:aa:ed:4a:a8:99:ef:ae:ea:
d5:12:21:cb:f8:9b:4d:4b:a7:bf:d6:f8:b7:76:31:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D8:2D:1F:F2:93:90:99:FD:C9:86:AE:B4:AE:DE:9E:25:60:33:A6
X509v3 Authority Key Identifier:
keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:df:00:e3:8e:90:ea:84:b9:11:36:fd:fa:fb:b5:5e:35:29:
40:66:8e:0e:d9:80:72:5e:b4:7e:90:5b:ce:1e:9a:72:72:86:
1b:1b:b1:9e:37:a5:a4:89:48:cf:0f:cc:b2:cc:7f:ca:5f:65:
4d:3e:72:83:51:da:c2:5a:a0:ed:d8:1a:e8:38:44:be:d1:85:
70:aa:cc:cc:c1:71:cf:94:6a:a2:7e:e6:7f:6f:49:00:1e:6f:
c6:a6:88:b1:3c:8c:66:7d:1c:86:76:d8:f7:62:cb:9d:dd:67:
92:85:1c:a7:fc:89:0d:d4:b0:49:1e:3e:ed:b7:9c:04:7c:bd:
82:b2:9d:83:50:72:18:4b:30:ba:d3:75:6b:37:43:14:6e:0d:
62:b2:bd:df:a8:3e:63:cf:e7:1a:9b:c5:6e:70:42:20:ee:9a:
57:02:27:34:d0:c2:73:f8:2f:92:c0:ef:04:fe:bc:df:4f:34:
75:28:24:91:5f:d1:1e:a1:76:1f:76:e1:9e:ae:d1:81:31:58:
c4:4a:59:43:7f:7f:10:8d:1c:a7:09:d7:49:df:f3:18:64:7a:
1e:e0:95:d4:e5:6c:69:2b:78:ec:51:5f:f9:2b:d6:05:a5:2f:
04:10:27:3a:c0:20:81:2c:31:4f:1f:93:01:e7:a9:d3:d3:57:
27:5c:0c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:05:03 2026 by rpki-client