Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
File: oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft (raw, json)
Hash identifier: uuq626RiJP+GUrNTFPliImlAgq7ChxoV6wQYsPzC4Ds=
Subject key identifier: 2C:4E:BA:BC:6C:62:8E:F6:B7:EC:AD:71:1B:01:BF:34:D2:3B:B6:8C
Authority key identifier: A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
Certificate issuer: /CN=a06bd308f743288af4cc2119973ec8dc028937f0
Certificate serial: 01A16044609B220B8D6FBEBB3FC59D05CCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
Manifest number: 0226
Signing time: Wed 21 Oct 2026 21:00:56 +0000
Manifest this update: Wed 21 Oct 2026 21:00:56 +0000
Manifest next update: Thu 22 Oct 2026 21:00:56 +0000
Files and hashes: 1: TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa (hash: XJE7IcrW6rhvGDyAahOo4XtEMNvbsvjLkV3AEh+8sYU=)
2: oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl (hash: MfE7yc+G0jvy0LZeOBl8DcyO9Heu8IK7okfQT/2NaGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:44:60:9b:22:0b:8d:6f:be:bb:3f:c5:9d:05:cc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06bd308f743288af4cc2119973ec8dc028937f0
Validity
Not Before: Oct 21 21:00:56 2026 GMT
Not After : Oct 22 21:00:56 2026 GMT
Subject: CN=2c4ebabc6c628ef6b7ecad711b01bf34d23bb68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:aa:ab:77:39:83:3b:73:d7:26:e8:dc:e6:
8d:d0:23:55:29:7c:0f:55:a5:eb:30:ec:4a:60:ea:
da:ad:d9:03:e6:38:50:22:20:96:bc:a3:68:3d:5b:
13:24:c3:6d:71:3c:6f:11:98:a8:85:80:2b:e2:68:
09:3f:1d:99:af:4c:00:3f:cb:32:2a:d0:fd:c3:77:
c5:f0:74:1d:eb:57:b8:65:57:c8:fb:72:cb:9f:3f:
76:21:c4:dc:b6:21:62:60:fe:fb:93:e5:d8:c9:e8:
d1:31:c1:af:11:74:4c:f0:07:f8:82:85:d7:df:08:
b1:db:e5:a4:0a:d0:3c:ae:02:08:17:e3:e0:d5:d8:
e4:6e:54:d8:d7:0a:8f:64:3f:83:99:97:0d:de:b5:
d3:0b:b5:02:7d:71:9b:7c:9f:fc:61:12:74:f5:6e:
05:e7:8d:ee:f3:07:c3:10:cb:66:b6:26:de:ad:b5:
5d:89:38:fa:b0:f8:6b:04:8a:27:65:b6:c1:75:21:
83:bf:3e:ab:ca:8b:60:44:66:84:7a:d4:2b:89:d4:
27:fc:75:5f:d5:92:c9:dc:3e:62:dc:d7:1f:4a:5f:
78:46:10:83:1e:e6:0e:3c:c8:1b:59:8c:8f:d2:bb:
a0:45:72:1b:8f:f5:f0:ea:92:a2:21:20:c4:df:dc:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4E:BA:BC:6C:62:8E:F6:B7:EC:AD:71:1B:01:BF:34:D2:3B:B6:8C
X509v3 Authority Key Identifier:
keyid:A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:93:42:6a:18:e1:61:9a:37:2d:49:8e:6c:43:15:ee:00:fd:
b8:1c:51:d3:3f:03:de:9f:19:56:79:9d:71:f7:e7:c7:bf:e4:
5d:39:51:4d:94:0a:fc:32:f2:1a:54:d8:fe:bd:28:cd:dd:6e:
0a:a6:7a:ab:37:09:80:68:5f:b0:74:f4:af:bb:ed:7f:9e:e7:
5e:49:a1:24:91:26:a1:30:fe:30:ab:15:d4:9b:eb:0c:ff:7d:
1c:b1:ee:88:a6:f0:2e:df:d2:99:b5:08:c1:37:30:67:e1:23:
11:1b:a9:1d:2c:2d:60:90:a0:a7:8b:1c:71:b9:f9:56:37:38:
85:82:c9:d2:f9:44:0b:f0:9f:92:8f:7d:e0:e3:c5:89:a9:aa:
d5:1d:31:4a:12:4b:f0:64:7d:6c:e7:07:c4:b1:b1:c5:1a:d4:
18:71:70:5c:eb:bc:50:a8:77:1e:c6:3e:66:be:5c:12:8b:47:
8c:12:e3:da:3a:46:91:80:0f:c8:5b:ee:97:62:81:d3:f4:56:
48:6c:6b:c8:6c:ae:9e:8c:25:6e:b5:29:62:ec:97:9d:fa:88:
c2:8a:57:dc:08:57:11:88:bf:72:ce:3a:6b:d7:ba:fd:0f:04:
8d:b3:a2:6c:cb:59:a5:13:79:31:5d:0a:b4:42:82:f4:0f:7c:
35:3c:66:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 07:56:04 2026 by rpki-client