
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
File: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft (raw, json)
Hash identifier: QV1V184Ztw6mhjlN0lPA1R5KybPDz94I6WYjgad38xQ=
Subject key identifier: 81:D5:EF:91:20:2F:BD:73:86:E0:84:1C:0A:6C:46:A7:8E:CB:53:7A
Authority key identifier: A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
Certificate issuer: /CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Certificate serial: 01A0EF9D6FED95B0BF7B8CBFBBBA5068E572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
Manifest number: 022D
Signing time: Wed 30 Sep 2026 00:01:07 +0000
Manifest this update: Wed 30 Sep 2026 00:01:07 +0000
Manifest next update: Thu 01 Oct 2026 00:01:07 +0000
Files and hashes: 1: WyQBbpbR1AvAKhTsL71x6qgch7U.asa (hash: 043dlMMNEhoWphFwOdB6ptcTMcRQS915TTU2W0PNpeI=)
2: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl (hash: 4LtqQM0n5wYOMuAF5CRlyTUT846GchGen77eFaFADIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:9d:6f:ed:95:b0:bf:7b:8c:bf:bb:ba:50:68:e5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Validity
Not Before: Sep 30 00:01:07 2026 GMT
Not After : Oct 1 00:01:07 2026 GMT
Subject: CN=81d5ef91202fbd7386e0841c0a6c46a78ecb537a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:c1:1c:c9:c6:2c:fb:75:a5:e7:3c:6b:90:
52:0a:e4:2d:d0:dc:e9:39:96:b3:c8:1d:a9:38:39:
72:e5:08:fc:ac:e4:01:1e:ef:f2:d9:2c:f1:75:fe:
0c:a9:d3:0f:6e:fa:28:46:fa:31:73:6f:db:4d:a8:
b2:7e:f7:62:5d:b0:98:ab:62:81:b8:98:fe:5c:89:
35:f5:79:9e:9e:e0:26:91:b4:b2:14:8d:2b:8d:11:
78:04:aa:5e:ae:fd:28:54:ff:a2:8c:47:85:19:76:
a3:78:5f:73:89:d0:fb:27:77:41:f2:62:c6:ff:e0:
09:71:fd:82:02:0e:7e:e4:7c:38:5f:32:fa:04:fd:
ae:29:a6:92:b0:85:ea:44:96:bc:88:28:cc:59:fd:
64:56:51:ea:97:ec:92:2f:cf:bc:54:5a:76:8c:40:
3c:f4:48:b0:5e:c9:64:dd:33:27:23:e2:c7:64:ee:
03:04:fb:1f:91:85:49:18:44:b1:33:8e:c1:1b:cc:
b5:ba:2a:45:d9:db:cf:55:c7:d5:47:f4:ab:17:b3:
10:03:44:97:98:be:32:44:45:8a:cf:0e:dd:bd:46:
fd:ff:ed:ae:37:fb:1b:80:10:14:00:52:51:02:fb:
13:de:7c:94:4c:da:75:ec:f1:d6:74:7c:ec:75:93:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D5:EF:91:20:2F:BD:73:86:E0:84:1C:0A:6C:46:A7:8E:CB:53:7A
X509v3 Authority Key Identifier:
keyid:A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3c:4d:16:79:20:94:c4:ce:a6:6f:08:2d:6d:b0:74:28:85:
fb:c6:10:c4:46:6e:07:f4:b1:84:a1:8e:8a:d4:5e:ed:b7:da:
56:c2:54:2e:c5:25:0f:57:67:1a:df:72:65:c5:62:a2:03:65:
ca:4e:e9:10:10:5c:88:75:14:c3:c6:2b:6d:65:42:17:4d:e8:
d8:49:85:e9:87:48:0d:4b:ea:c0:ff:30:6d:93:9c:64:03:eb:
db:86:cd:48:20:b1:20:dc:2e:4a:5c:3d:6b:b8:f6:25:4b:9c:
21:37:a1:03:7d:b6:27:99:6c:7b:ee:ef:3d:0d:89:e7:13:66:
2f:05:58:4f:90:b4:4b:0a:44:a0:71:80:73:3c:92:cb:a2:34:
77:dd:6b:31:3f:2e:c4:1c:49:d6:4f:5b:5e:e0:46:c0:f4:07:
cf:f8:d5:70:fa:8a:34:c0:ad:74:5e:e0:9d:d9:ce:25:f4:57:
54:47:ac:ac:80:29:9b:c4:cc:77:8e:c9:db:93:36:c5:66:88:
a9:9b:b2:f9:d5:ef:06:1a:29:29:45:23:a0:eb:f3:6e:55:72:
f8:23:05:ff:ca:d6:4b:f1:9e:63:aa:b6:f8:b6:9d:83:5c:72:
dd:58:0e:ad:1a:f3:47:38:05:ce:ce:cf:14:61:08:0e:10:d7:
48:dd:1b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:04:47 2026 by rpki-client