Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: mj5vBVOmVFGWZy2CSx/gfl+KH68FIytLVRfs76zHIws=
Subject key identifier: A2:28:44:78:F7:15:FD:AB:5C:DE:4B:32:D6:2E:16:C5:3B:11:67:94
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 01A183AC6F18C05D71E4B115BDDC70C5411C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 06EB
Signing time: Wed 28 Oct 2026 18:01:18 +0000
Manifest this update: Wed 28 Oct 2026 18:01:18 +0000
Manifest next update: Thu 29 Oct 2026 18:01:18 +0000
Files and hashes: 1: D1uepCAmRlFVjKTUqfMxFmzOti0.roa (hash: pf7DS73sBkltlYtAHV2Wkt/8vgHhRENJ2syRZHBzVdQ=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: 46xpqHGiqC7Jk6q+THjX5fckLhuDUZ1qVEwlE7jSQOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:6f:18:c0:5d:71:e4:b1:15:bd:dc:70:c5:41:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Oct 28 18:01:18 2026 GMT
Not After : Oct 29 18:01:18 2026 GMT
Subject: CN=a2284478f715fdab5cde4b32d62e16c53b116794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:a2:7f:27:2d:ed:0e:77:f6:d1:53:f4:0e:
f8:75:99:bb:9a:70:00:2c:96:95:7e:f2:57:cd:ed:
f2:c4:0b:2a:57:e2:b5:73:9a:43:00:4d:ae:ff:58:
18:09:70:30:bf:a0:b4:16:ff:c6:19:6d:0c:c8:e4:
96:9e:ed:00:12:d6:6a:3f:c9:32:c3:a1:55:42:8a:
02:32:32:68:8f:db:fb:ce:ed:bf:07:a9:a6:be:5a:
09:e8:c4:13:f8:86:e2:ce:fb:2c:53:3e:4e:80:58:
2c:65:60:f3:d2:2d:28:92:c9:94:c4:34:a8:16:ac:
30:70:34:f0:56:8a:9e:af:98:fc:07:81:4c:27:df:
ce:83:36:01:9c:30:ac:48:9c:ff:9c:ef:4f:79:8f:
2b:f7:81:1e:b5:9b:e3:9a:0c:a6:26:38:4c:0d:3f:
06:d3:60:91:ee:8e:e0:72:9a:00:0e:23:3c:6f:20:
f9:51:82:8f:4b:96:18:8d:8e:de:d1:d6:9a:33:e5:
53:bf:86:5b:ab:3e:ed:59:34:c8:9a:c0:2a:b0:bd:
84:1e:06:84:03:9a:53:13:ed:15:ef:71:e6:8d:2c:
92:b6:7e:45:d0:b3:a0:5e:3a:84:f1:92:db:64:36:
d8:26:73:cf:1c:48:03:a0:bc:0b:7e:d7:fa:43:99:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:28:44:78:F7:15:FD:AB:5C:DE:4B:32:D6:2E:16:C5:3B:11:67:94
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:46:09:84:f8:7b:d0:77:10:15:7c:49:17:f1:f5:7c:f7:2e:
67:7d:b8:91:0f:8a:76:e5:38:6d:59:cc:d8:f8:b6:82:9a:72:
6c:9d:ec:4b:d4:44:1a:2b:45:40:00:fe:88:fc:46:ae:ec:9f:
6b:59:e9:1d:63:1b:78:b2:cf:dc:c8:6a:30:eb:1f:40:54:b7:
6d:82:08:18:83:cb:5c:2b:40:65:1f:a3:fb:a3:b7:b2:1f:4f:
55:c2:a5:1f:e1:32:df:56:c8:e3:3b:8c:39:db:c9:48:ff:98:
93:15:17:41:81:e9:a7:f7:a3:ff:4d:ae:ea:77:28:2e:df:6e:
13:02:5d:4c:bd:e9:95:d2:47:29:1e:70:97:ac:69:53:93:83:
5c:b8:dd:f4:15:77:fb:da:d5:a1:2f:47:74:e5:b3:2a:5e:5c:
81:db:fb:f5:62:b9:55:e5:79:5c:2c:eb:cb:5d:e0:71:56:de:
1a:2b:9f:57:f6:c1:e3:71:70:28:6c:68:df:5c:fd:e2:f6:eb:
79:e3:69:22:88:1b:b9:ef:7a:f9:9d:f6:1c:52:2f:34:f1:01:
fd:f4:69:b8:92:5a:3a:12:5b:67:a4:31:1f:b5:75:99:b2:0b:
04:c8:58:00:4d:63:b3:6e:f2:d1:1b:18:b8:c1:df:6e:51:46:
4a:82:e3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:09:38 2026 by rpki-client