Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: yJFbT/izIuj2SqylSnewoZODnggEBDYneJVmo7GoiGw=
Subject key identifier: 88:31:17:AA:B3:19:18:66:1C:AA:EB:8D:7E:E1:47:05:45:5F:4A:3A
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 019F129C0CB3436D00750AE70F9F40DD8A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1984
Signing time: Mon 29 Jun 2026 09:00:44 +0000
Manifest this update: Mon 29 Jun 2026 09:00:44 +0000
Manifest next update: Tue 30 Jun 2026 09:00:44 +0000
Files and hashes: 1: iwdbfX3VeEC-dJ7spuyrMGzAZEA.roa (hash: rGk72/1YdyFUc4NyU+VKerIA+XWmcskQTcATzTBlTBs=)
2: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: ydKk2cvz3kEsB6HKE80nMNFqByTy44OJVSE1nT9o1jI=)
3: sLLmkteo_FcFXMtUJhw6fFKVofY.roa (hash: a9XJ/mxkvDOm7bLMm8792DO+WjUzGL25z/Umu2rG3g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:0c:b3:43:6d:00:75:0a:e7:0f:9f:40:dd:8a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Jun 29 09:00:44 2026 GMT
Not After : Jun 30 09:00:44 2026 GMT
Subject: CN=883117aab31918661caaeb8d7ee14705455f4a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:4a:b1:65:04:86:92:57:53:49:77:42:49:
61:86:07:a4:b4:52:75:b8:fe:90:f5:cf:c3:73:d5:
4d:d0:b5:88:77:60:94:1c:6d:7b:e2:fb:fc:2a:ba:
4c:b6:f7:ab:e8:55:3f:b9:d6:86:43:88:1e:5c:56:
8b:b2:22:dd:76:2f:f1:a4:f9:d7:c2:4b:4f:1a:b6:
f5:ea:eb:58:92:91:bb:a7:03:4b:ce:4e:5b:67:cf:
fa:6a:05:1d:ae:d9:6a:af:e0:11:f6:53:1d:74:c0:
83:5d:e4:18:75:c4:0a:6e:08:70:a1:2e:2d:fb:e1:
af:2b:83:35:bf:48:e7:03:ff:ed:c0:d8:ec:5e:5a:
3f:0b:a0:ad:e5:67:09:17:ea:21:46:b8:ed:d7:42:
3c:3d:f3:77:6d:45:e8:17:bc:b4:48:1c:08:ff:2b:
d2:7d:e1:9d:68:73:f5:30:71:57:bb:8a:7a:29:2c:
18:8b:a6:e1:4b:4f:96:dd:f8:56:99:a7:7e:42:c1:
1e:00:75:91:00:4e:e1:d4:5b:d3:4e:c5:28:7f:05:
0f:b9:35:48:0e:30:c2:b8:ed:d5:e0:34:59:d0:8b:
0a:f7:f7:cb:b3:0f:f4:ba:a1:55:d9:f3:33:80:c2:
7c:85:10:23:6b:22:0e:ae:a4:7d:ca:7d:d6:71:d7:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:31:17:AA:B3:19:18:66:1C:AA:EB:8D:7E:E1:47:05:45:5F:4A:3A
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a0:94:ab:d3:9f:36:4b:34:51:b9:e4:69:cd:dd:66:97:3f:
40:4a:77:33:fb:1d:1b:75:31:89:9b:8c:fb:f2:e2:22:4f:1d:
1e:63:fe:e7:47:23:37:4b:02:5c:88:a6:00:56:fe:e5:c5:df:
d5:9c:c8:b7:74:11:f1:3b:92:17:3b:76:c0:64:a8:36:17:2d:
39:4c:c8:8a:59:dd:a5:ff:24:c8:46:1c:6e:de:e1:79:83:cb:
6b:bd:2c:03:28:bf:fb:d7:5c:86:cd:4e:76:40:80:48:be:17:
66:0e:78:bc:8a:5d:ad:32:5d:eb:ba:49:5f:22:c7:d4:d0:58:
92:6d:77:ea:6e:ae:6d:d9:84:b6:d6:62:ca:20:4d:dc:c2:80:
6d:60:e0:35:d3:24:2e:fb:13:ee:2d:b7:6f:9f:b5:7d:45:90:
17:1e:86:81:91:13:96:f6:52:e7:c8:de:cb:08:0c:e2:ba:75:
80:7f:66:19:76:df:64:20:26:f3:fb:72:b3:ff:e2:36:38:c7:
0f:b5:51:d1:eb:58:67:96:64:3e:d7:df:02:5b:08:47:27:ce:
5b:56:c1:b3:b3:23:b2:c4:dc:1a:b5:93:02:7c:d2:e0:70:46:
88:15:1a:2c:7c:22:6f:4f:b1:d6:4c:b0:ff:3f:54:41:de:cf:
b7:6a:44:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:42:35 2026 by rpki-client