Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
File: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft (raw, json)
Hash identifier: mAkVkBsLBuW03cNR5dM69G2PGDfQtVTVMWkMqkXRhAU=
Subject key identifier: 85:53:EE:87:85:C3:81:A5:26:93:37:25:B7:52:03:E0:82:9E:8D:AD
Authority key identifier: 3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
Certificate issuer: /CN=3a62746967900b24c59d214f40532d76feff81e4
Certificate serial: 01A08F0DA5EE11A5E4CC7F8D91E15FBE5467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
Manifest number: 0186
Signing time: Fri 11 Sep 2026 06:00:31 +0000
Manifest this update: Fri 11 Sep 2026 06:00:31 +0000
Manifest next update: Sat 12 Sep 2026 06:00:31 +0000
Files and hashes: 1: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl (hash: FWA7dKQamFQmu6Uc03TVtU+lpCoiVh4BEIFL4ISSTPM=)
2: aIKcl8xyOE8c2T5VfSfWvfIZQIU.roa (hash: rP1uuNWiqen7TPqE1GYuJGzp+rVZ1OGQdR+rdwxUdFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:0d:a5:ee:11:a5:e4:cc:7f:8d:91:e1:5f:be:54:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a62746967900b24c59d214f40532d76feff81e4
Validity
Not Before: Sep 11 06:00:31 2026 GMT
Not After : Sep 12 06:00:31 2026 GMT
Subject: CN=8553ee8785c381a526933725b75203e0829e8dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:7d:46:ff:b8:f1:99:e6:7b:9a:33:47:f3:
07:25:6f:0a:54:70:1b:a3:c0:0f:f9:2e:c9:fe:15:
df:9a:ba:be:b0:33:2b:d6:b3:c7:63:6b:8b:cf:fd:
69:1b:a5:90:78:32:e7:46:af:f7:2e:77:4c:03:99:
af:65:34:62:63:f4:ae:35:15:88:c0:c0:fd:cd:29:
ea:11:86:2b:9d:15:4b:fb:f1:ec:e9:3e:36:44:af:
38:da:87:ab:f2:74:9f:01:9c:e7:df:d5:52:05:9e:
85:9d:b8:78:5f:8d:f4:9b:b6:5e:8e:b6:5e:d7:ca:
ba:3e:0d:43:dd:5a:6d:59:00:cb:fe:f7:53:ca:76:
0d:df:be:5e:05:a3:bd:0a:75:46:c2:c9:da:50:a0:
50:81:da:35:64:54:6e:74:d2:5b:4d:4a:1f:b8:94:
a9:dd:0b:2c:ef:38:ed:a7:e5:cb:6d:34:ab:b5:72:
53:95:b6:5e:89:9f:b3:b3:37:54:c4:f8:98:2a:6f:
36:d8:66:16:58:c6:58:c5:3b:82:c5:14:c5:56:34:
6d:3b:6f:10:f7:05:fb:e2:68:1e:21:ef:61:af:8c:
6e:76:57:c9:d0:d4:84:06:18:9a:74:38:39:52:5b:
be:99:4b:c1:c1:2e:fa:32:d1:4d:b7:1a:49:4e:6b:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:53:EE:87:85:C3:81:A5:26:93:37:25:B7:52:03:E0:82:9E:8D:AD
X509v3 Authority Key Identifier:
keyid:3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2c:ef:87:33:9d:e4:d1:d9:5f:7b:46:05:ab:79:45:2e:3b:
cd:23:3b:6a:41:40:ae:9b:43:11:b3:0c:4d:8a:fe:3e:d9:96:
3a:60:47:aa:17:25:73:ea:39:0f:cf:e0:38:a3:d9:a1:77:91:
a0:1b:e0:d5:c5:6b:13:80:b9:2b:e6:d9:94:dc:9f:47:c7:c9:
d0:6d:70:a6:9d:fc:4f:3a:5d:7e:66:0a:5f:5e:9a:cc:47:f5:
79:63:5f:66:db:d0:7e:4b:d9:2e:95:e1:ba:9d:82:8d:7c:fe:
52:b7:fb:22:f3:1d:bb:a0:42:97:45:89:37:3b:28:cd:69:f9:
c3:4e:37:a5:02:99:e8:e8:f7:b0:4e:ec:83:1c:b7:23:fe:f8:
b6:da:8a:c4:c7:e3:61:40:b6:50:a0:5b:dc:78:0a:c4:4c:6c:
99:a5:43:e3:4c:42:f5:43:7f:83:94:00:e7:21:ba:e8:00:0f:
86:a9:44:22:e0:ce:f4:57:3c:f1:1e:71:48:38:fc:8f:25:1f:
a5:b4:91:e6:cf:98:bc:d6:c3:0a:9c:3e:98:ae:ce:58:be:88:
4a:73:cf:6c:e1:cc:6f:fb:f4:f9:e3:b4:df:aa:d8:d2:ab:23:
cd:75:24:9e:34:bc:23:2a:ec:59:f3:80:71:fc:c6:48:69:99:
3e:52:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:27:52 2026 by rpki-client