
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: REVx8hRFBY6QRiye/ey59M3mUzINqwdJ1yDNkJ4vsaM=
Subject key identifier: 46:79:82:81:9B:C5:1F:F4:AC:9D:70:6D:68:78:64:54:B2:D0:6E:3C
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 01A176273EE919BE3CB3AC923F1AA693AA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 1AC2
Signing time: Mon 26 Oct 2026 03:00:45 +0000
Manifest this update: Mon 26 Oct 2026 03:00:45 +0000
Manifest next update: Tue 27 Oct 2026 03:00:45 +0000
Files and hashes: 1: dz15OcBGpk_cfrn8xhk6BurTsy8.roa (hash: xEr9Xe5b8oihGpA9oK+zCpOpKPeDuBptibdAWRYh0iU=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: 0GcsGUWstTcaiT94Np9FoNp01FG3dPGmbHyMRqaIFuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:3e:e9:19:be:3c:b3:ac:92:3f:1a:a6:93:aa:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Oct 26 03:00:45 2026 GMT
Not After : Oct 27 03:00:45 2026 GMT
Subject: CN=467982819bc51ff4ac9d706d68786454b2d06e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:37:e1:96:2d:85:f5:f7:18:f1:7b:70:cd:
67:0e:56:ea:8b:e2:b7:59:5f:5d:df:a4:4b:55:19:
d2:d6:09:99:39:32:c9:f4:b6:8d:bc:e4:4a:4d:4d:
13:ca:a4:67:70:3d:b5:06:b9:4a:61:94:09:2c:24:
10:d7:bc:dc:a2:40:40:80:4d:61:4c:9d:ce:b5:e4:
5e:24:1e:9a:50:bb:57:7b:f5:27:c9:8e:c2:31:43:
b5:04:7a:d6:3f:0a:49:97:e1:5a:97:ad:21:79:cc:
64:b5:53:e4:19:a0:51:c0:aa:9f:79:ab:90:4e:d2:
d9:ec:15:54:18:7f:b5:eb:7c:a3:53:03:1c:2e:9b:
ba:9a:e0:fe:a6:01:28:10:00:04:f6:93:96:a7:43:
8b:8a:66:12:eb:19:ee:d1:86:9e:eb:5a:28:ee:68:
15:73:dc:31:8d:5c:bc:6d:a6:19:98:3d:78:c3:4f:
60:61:59:ea:7e:d8:b8:c7:3b:84:97:aa:85:b3:3f:
d2:4a:18:0c:64:f1:00:c9:6e:89:c5:a4:62:d2:0c:
f6:58:30:5b:61:5f:0f:cb:7f:5f:92:3f:6a:c9:c1:
a9:d5:c9:ad:48:77:db:7a:4a:1d:d8:cd:44:ff:d0:
a7:c8:5f:0f:48:51:aa:9b:1f:57:7e:10:2e:eb:72:
38:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:79:82:81:9B:C5:1F:F4:AC:9D:70:6D:68:78:64:54:B2:D0:6E:3C
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d3:f2:84:51:76:b7:f5:92:aa:7f:81:48:03:2c:2c:26:03:
10:d1:87:31:7c:c9:66:1a:d5:3a:63:45:1e:2b:5b:66:84:43:
76:12:1a:83:a5:a3:0b:00:c4:7d:5c:5b:38:e3:cd:05:4f:e1:
d4:65:ee:b1:27:74:cb:1e:31:b9:d0:ff:a3:e7:bb:3c:46:f2:
13:09:ee:1b:46:39:5b:42:3e:b6:23:0e:43:44:69:54:e6:31:
73:c8:f6:43:a7:23:5c:ef:6a:e8:97:12:7f:05:07:b3:92:70:
6a:59:42:95:49:25:ca:cf:b8:69:a2:30:ec:83:c3:b3:71:ba:
a9:0c:c9:f8:b5:be:6b:74:ac:dc:13:3b:a5:63:c9:e5:20:b8:
08:3b:39:56:af:3a:1d:22:83:4c:61:87:e3:f6:3b:c1:ac:05:
71:81:45:d1:10:86:7c:6f:aa:8f:67:d3:dc:5a:70:da:ac:64:
d3:a4:80:ce:07:f9:13:d3:10:02:28:ac:c0:d8:dc:49:78:f5:
8c:ea:21:6b:c4:28:df:c8:11:da:d8:a2:91:3f:8d:e4:6b:f1:
13:b0:f6:00:3a:db:86:e2:05:e5:f7:a0:04:80:aa:4a:6b:7f:
73:cc:07:85:4f:0d:b3:0c:90:74:d7:69:1c:93:cc:52:19:62:
0f:51:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:20:30 2026 by rpki-client