Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
File: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft (raw, json)
Hash identifier: GM7ZcEn2CzfirqOVmOWu+QO8EYTczbC0xmMJPwI8eI8=
Subject key identifier: 69:AC:08:A9:C3:D1:8E:02:48:A9:3D:54:C3:E6:3D:D6:A3:F7:36:41
Authority key identifier: 3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
Certificate issuer: /CN=3a62746967900b24c59d214f40532d76feff81e4
Certificate serial: 01A17E86309296D922DC5F2BF4441D39B635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
Manifest number: 0202
Signing time: Tue 27 Oct 2026 18:01:25 +0000
Manifest this update: Tue 27 Oct 2026 18:01:25 +0000
Manifest next update: Wed 28 Oct 2026 18:01:25 +0000
Files and hashes: 1: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl (hash: vYXPdZJIAN/ZEvAt5KwdBszK+gH7u97rusag8zuWJkk=)
2: aIKcl8xyOE8c2T5VfSfWvfIZQIU.roa (hash: rP1uuNWiqen7TPqE1GYuJGzp+rVZ1OGQdR+rdwxUdFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:86:30:92:96:d9:22:dc:5f:2b:f4:44:1d:39:b6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a62746967900b24c59d214f40532d76feff81e4
Validity
Not Before: Oct 27 18:01:25 2026 GMT
Not After : Oct 28 18:01:25 2026 GMT
Subject: CN=69ac08a9c3d18e0248a93d54c3e63dd6a3f73641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:ae:31:6c:15:f2:30:a5:63:62:d1:3d:93:
a7:f2:d3:90:74:e9:33:63:a5:a5:82:62:62:c7:c8:
43:49:b8:1b:fe:fb:03:69:44:02:0f:84:cb:b2:f2:
6f:9d:8b:ce:cb:5e:db:cc:24:5d:89:ee:8c:c9:8e:
2e:e9:5d:39:b9:a1:95:fe:0b:91:74:4a:fa:0e:fb:
34:18:df:f8:52:7c:85:59:60:4f:0f:f4:16:a5:75:
eb:0b:fd:31:0b:81:fe:6e:e6:ba:d4:f1:62:33:40:
89:b7:3a:76:c6:e5:d7:d9:27:df:8e:ed:0b:25:d1:
10:4d:00:0f:9d:f2:9b:7e:6c:73:94:24:f8:c6:63:
e5:ce:c8:42:48:4f:1d:30:b9:ad:7a:81:3c:16:16:
29:7e:2b:a6:67:ad:f5:5c:fe:3f:9e:6a:3e:5e:a5:
d5:42:22:39:65:8c:87:3d:cb:7b:28:65:35:4f:a0:
ae:75:8c:07:17:6a:0c:f4:bd:a3:85:73:27:78:79:
f8:ae:1f:aa:78:02:e4:90:24:07:25:ac:8d:7a:21:
a7:64:e9:a3:4d:64:a9:80:f9:77:21:0a:2c:32:6a:
64:05:04:1c:ca:c5:6f:8d:2f:3a:ea:1c:a4:dd:38:
e4:6d:8a:21:d1:74:82:3e:4d:3e:f4:12:ec:74:b1:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AC:08:A9:C3:D1:8E:02:48:A9:3D:54:C3:E6:3D:D6:A3:F7:36:41
X509v3 Authority Key Identifier:
keyid:3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:89:5e:57:b6:61:e6:af:f1:29:57:7d:ab:e2:40:17:24:41:
f4:be:33:9a:2a:28:9f:c2:61:8c:fb:ad:d2:e6:7e:3e:a5:c9:
29:a8:19:6d:89:eb:c9:43:91:75:a4:cf:9d:0f:2a:e4:80:92:
35:99:d3:b2:d6:cd:34:84:fe:0e:84:70:e3:3a:45:22:a1:93:
17:04:5f:f8:d3:70:ee:07:e7:ad:db:d2:44:c8:4a:8e:b7:9d:
9b:0f:60:36:79:ca:ac:a3:4b:37:f8:02:cc:11:71:c0:88:d2:
d1:7d:b1:9e:13:a6:df:00:db:40:a0:d4:11:91:73:d7:d5:7f:
d2:84:38:5a:93:a5:14:b4:0e:0b:0c:b8:b9:b9:cc:ff:aa:26:
34:ec:18:e8:b9:99:c7:95:66:cc:fa:d4:47:3c:81:4b:6d:81:
ef:89:2b:0b:55:26:f2:88:f3:9f:b9:4e:26:5c:15:ab:dc:76:
03:f3:3d:97:c3:81:21:88:5b:19:2d:48:a4:32:6b:f4:9e:7a:
04:34:38:d1:d6:a0:59:a3:44:81:57:f1:db:36:e2:08:00:dd:
fd:63:02:c2:71:59:a4:a4:bf:db:6a:b4:c8:aa:ab:ad:43:4d:
f6:f3:fe:4d:56:34:72:da:db:e7:98:80:01:67:34:01:d6:e9:
1b:69:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:26:01 2026 by rpki-client