Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
File: oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft (raw, json)
Hash identifier: ALp+fJ5TJAH2yC3PNcehcrmw+q6iEK4xsZ1BSrqHsNo=
Subject key identifier: F5:B4:12:42:55:33:2D:3C:32:53:CD:6C:13:A0:DF:1C:56:F1:9D:DC
Authority key identifier: A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
Certificate issuer: /CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Certificate serial: 01A0E99C49535F17459FAF3CFF83DCEE23A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
Manifest number: 0197
Signing time: Mon 28 Sep 2026 20:02:08 +0000
Manifest this update: Mon 28 Sep 2026 20:02:08 +0000
Manifest next update: Tue 29 Sep 2026 20:02:08 +0000
Files and hashes: 1: aPHgHDs8wZHtsWjj-BGNDzZUqVw.asa (hash: xCblPYPS0g+4wFl3k4nN7Rdc1pcGx5xLzvzdxGTb7kU=)
2: oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl (hash: J6EuV1IBlQSqleNJzNULGz92ZZeyDkgT4vLNQ8fLFr4=)
3: rfnpKAqIl3YHBE0u0rKLog4npJ8.roa (hash: e2aXB5iCVJvKeAcAsidwehVczzB3FZGwEfrPbuvBxKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9c:49:53:5f:17:45:9f:af:3c:ff:83:dc:ee:23:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Validity
Not Before: Sep 28 20:02:08 2026 GMT
Not After : Sep 29 20:02:08 2026 GMT
Subject: CN=f5b4124255332d3c3253cd6c13a0df1c56f19ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:31:a2:da:1c:2d:ae:e1:63:2e:bc:17:ee:
b3:1d:07:f7:2d:a5:a2:d1:dc:04:86:1a:e8:7b:90:
11:4f:c8:7d:08:d2:de:23:80:58:ab:01:64:3e:21:
b0:29:49:94:04:f1:68:06:6f:e9:bd:5c:4f:58:d2:
7f:b7:32:96:64:d7:f9:a2:a5:5c:42:73:5e:26:57:
07:03:65:a4:e4:46:c4:e0:83:8f:c5:51:c2:a5:84:
c3:07:30:9d:53:55:8a:82:34:99:f2:ab:46:14:69:
bc:50:c5:e1:a7:76:f0:3c:9d:fa:6e:47:55:22:bd:
88:e8:6c:c9:6c:21:1f:24:3d:d3:73:ab:7a:c4:e0:
a1:d4:40:44:3e:29:8f:52:b9:c5:ba:82:cf:bf:c2:
48:5b:c6:1b:53:e7:d4:99:4c:c6:a3:f7:01:68:b4:
5a:ae:19:a5:64:04:5e:50:65:13:25:a3:05:23:08:
ee:6d:fa:ab:9a:e9:24:d3:02:ba:25:5d:96:d1:d5:
40:5a:2d:83:b9:0f:a7:8f:e3:6e:9f:09:69:6c:c0:
f7:2d:8f:b9:d4:c9:a1:dc:91:87:1b:19:f7:6b:11:
6f:ea:77:bf:7b:c8:ed:02:74:49:69:90:3e:91:be:
bd:f3:a5:c1:b2:01:bd:2e:26:3e:41:e9:03:35:43:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:12:42:55:33:2D:3C:32:53:CD:6C:13:A0:DF:1C:56:F1:9D:DC
X509v3 Authority Key Identifier:
keyid:A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:48:fc:b3:ae:c0:1f:81:1d:2e:d8:72:54:87:6f:62:d7:f4:
e9:ef:1e:38:95:6e:1d:b4:75:03:39:91:87:26:69:32:6f:87:
69:3b:83:7b:d4:b2:30:e2:f1:71:8c:9d:80:b4:04:2b:54:50:
1a:e3:95:be:4c:84:f8:0f:51:82:c0:e7:ae:f8:29:1e:58:e3:
3b:93:b3:19:47:3c:7a:ac:62:8b:b7:0f:91:d2:fe:88:74:13:
05:00:55:4c:78:4a:cd:10:4e:43:0d:cc:fd:80:61:78:28:4a:
1b:44:a6:3b:ae:07:00:e6:78:45:9c:f4:f0:d9:2c:77:b9:83:
32:d1:e3:8b:1e:5d:5f:03:59:98:96:6e:65:5d:1e:70:97:b6:
ff:e6:50:b0:5e:fa:4f:98:a6:b4:a9:2f:40:1a:9c:48:70:bb:
85:10:3c:34:88:df:89:01:0a:51:d0:02:41:3d:78:1a:07:fa:
f2:d1:f2:dd:b2:91:f7:49:29:c4:6e:8a:3e:44:9a:0c:7c:df:
6a:73:e7:66:ed:47:3c:c2:55:81:96:bf:a9:d2:16:64:77:95:
6b:b6:50:46:32:bd:7b:61:bc:9b:bf:90:36:fe:08:7b:5e:ef:
df:5f:63:98:33:ac:29:f7:6e:2f:ca:37:db:f7:07:de:02:48:
35:5c:09:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:09:28 2026 by rpki-client