Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: VuikqM6s+T3NE1hz5PrhA4qsZA+EzFP619wULi5MesQ=
Subject key identifier: CC:C9:24:6F:34:22:51:8A:35:68:C3:D7:1A:FE:F2:03:85:5A:F3:12
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 01A167226AC29E5B020C0B3DE9E2C3D2F380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 1ABC
Signing time: Fri 23 Oct 2026 05:01:11 +0000
Manifest this update: Fri 23 Oct 2026 05:01:11 +0000
Manifest next update: Sat 24 Oct 2026 05:01:11 +0000
Files and hashes: 1: acv-v2eHqlrCvjloaRGiMlCidZI.roa (hash: oC/VXdmhm0cHY+VKvZYv7E0OaLtC7J/ULHsMcrTf+MI=)
2: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: LsmGpcI62c/AEzWu2g8PMovhLbfsM+jyS1ILLo6jFpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:22:6a:c2:9e:5b:02:0c:0b:3d:e9:e2:c3:d2:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Oct 23 05:01:11 2026 GMT
Not After : Oct 24 05:01:11 2026 GMT
Subject: CN=ccc9246f3422518a3568c3d71afef203855af312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:cc:de:90:f3:13:69:9e:1f:63:ed:d3:31:
ee:e4:3a:a5:94:95:31:5e:4d:06:40:7b:92:a4:3e:
e6:02:2d:0e:9d:82:a8:54:89:d3:7d:7a:f7:f2:77:
fa:b8:ae:a9:96:d6:4c:dc:d1:16:34:79:69:96:24:
23:b2:a5:3b:c3:7d:f7:ad:20:b4:14:3a:16:28:4b:
a8:18:c5:2a:74:62:fd:3c:a4:59:4a:da:08:43:5c:
68:e3:f7:82:9f:4f:2e:6a:d5:3a:83:95:1f:2e:cb:
85:93:c9:20:dd:b3:48:82:22:4c:aa:56:2a:e4:b2:
11:b6:17:f8:e4:17:8a:62:24:0c:bb:f4:43:63:55:
ca:ec:13:5a:46:3e:e6:b0:02:e8:bc:bc:e8:49:51:
00:f8:f0:6e:92:ad:10:12:4d:90:9d:a6:bc:0f:91:
ed:c4:32:37:bb:c7:d4:ac:43:ce:ef:d5:94:0e:5f:
6e:d9:13:e6:43:56:60:81:94:91:20:cf:4b:5f:f3:
35:03:cb:bc:2c:dc:30:f2:6b:95:8e:09:95:12:a4:
ea:b8:9c:76:b8:39:2c:30:50:48:22:c8:3c:ce:c2:
ae:da:c3:96:68:f0:fa:9e:68:c3:1a:fc:b9:2d:8f:
4b:28:f0:eb:af:e9:57:03:5a:51:62:33:18:14:02:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C9:24:6F:34:22:51:8A:35:68:C3:D7:1A:FE:F2:03:85:5A:F3:12
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:86:9a:9c:ba:23:44:5f:cb:9c:78:28:63:7a:ad:9f:96:2c:
a2:d1:70:03:37:92:47:91:4e:5e:ce:b5:c8:1a:43:dc:8a:a1:
39:ea:ad:ef:ac:79:db:5c:51:3f:2e:5f:b0:54:e8:36:70:ee:
a6:28:c5:80:ca:52:02:c3:ee:ef:23:66:57:38:ff:80:a1:18:
c6:0c:e7:cf:24:f1:4f:8a:8f:df:90:af:96:3f:be:ac:1d:56:
8f:5d:db:b7:dc:16:69:47:c8:87:3e:03:d0:51:9d:3a:50:d9:
83:98:ed:6e:97:1d:e1:65:38:f2:61:4d:ed:eb:a6:98:87:b5:
8f:8c:48:79:91:29:fd:61:47:2b:9d:ff:58:a3:eb:25:2d:0f:
bc:af:19:24:1f:4b:a4:16:1a:48:b6:b1:58:38:ac:54:28:64:
d7:90:88:89:d6:13:fb:ed:e4:8b:4c:5f:d7:be:57:0f:48:af:
bc:cf:25:e5:e7:e1:69:18:22:fa:be:65:a3:83:75:07:7f:c9:
65:e2:97:1d:3a:db:a3:d8:43:77:db:97:fb:b0:be:a7:0e:09:
48:bc:8c:2e:85:7d:6e:7c:b4:90:f8:7b:ec:1a:dd:cf:d8:81:
52:38:4c:2f:d8:3d:a0:02:52:ea:18:32:ad:2c:11:42:ac:5f:
2d:9b:fd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:16:45 2026 by rpki-client