Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: Or7nlz1q4x0wfUVmkqiJjAUFRhzrNkiY1xp1vvYb8iA=
Subject key identifier: 79:3F:1A:3A:36:4B:D2:2C:B2:2F:5E:C5:DE:4D:FB:F8:29:6C:97:0F
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 01A11071F6C61529EEEE6B5CFBE39981C3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1A8C
Signing time: Tue 06 Oct 2026 09:01:06 +0000
Manifest this update: Tue 06 Oct 2026 09:01:06 +0000
Manifest next update: Wed 07 Oct 2026 09:01:06 +0000
Files and hashes: 1: iwdbfX3VeEC-dJ7spuyrMGzAZEA.roa (hash: rGk72/1YdyFUc4NyU+VKerIA+XWmcskQTcATzTBlTBs=)
2: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: jx+h1SF4X7prKTmP24smL+SzkNlKo1VRkD8cPGi2M6A=)
3: sLLmkteo_FcFXMtUJhw6fFKVofY.roa (hash: a9XJ/mxkvDOm7bLMm8792DO+WjUzGL25z/Umu2rG3g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:71:f6:c6:15:29:ee:ee:6b:5c:fb:e3:99:81:c3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Oct 6 09:01:06 2026 GMT
Not After : Oct 7 09:01:06 2026 GMT
Subject: CN=793f1a3a364bd22cb22f5ec5de4dfbf8296c970f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:ce:78:cd:91:77:b8:9d:60:bd:29:e6:03:
01:98:f5:05:8e:0d:10:26:a1:59:a8:a9:9b:b6:fc:
96:6e:92:87:bb:8c:57:a7:c4:c8:83:e5:a3:a8:97:
32:64:0c:ad:e5:64:f6:76:19:46:af:93:36:cb:58:
20:6e:40:28:b7:82:4b:9a:9f:c9:8b:01:03:ee:09:
eb:40:09:85:c4:e0:b4:ea:a5:aa:f1:17:2f:6b:49:
52:53:f9:5a:fc:ac:0b:a3:1a:bd:a9:b1:5b:99:20:
ee:80:87:86:7d:5b:da:d7:a0:4d:78:26:2c:13:93:
a6:e6:47:3b:db:47:f6:01:49:97:97:c9:a7:62:86:
ef:a1:75:2f:ba:1e:07:81:e6:a2:eb:4d:f2:6c:7e:
5d:71:0b:11:78:c8:9b:c3:02:c7:e0:60:35:9f:8c:
6f:69:fe:cb:98:53:90:0f:0b:44:cf:e9:87:95:74:
87:80:b1:6d:9d:f7:1b:c8:d6:75:65:93:88:b7:96:
6c:21:fe:61:fa:27:32:19:20:f1:1c:51:4d:e3:62:
a4:09:13:b0:93:82:94:63:29:a9:03:19:80:81:a5:
6f:52:6b:ac:c4:b6:1e:f2:85:87:75:a9:73:c0:c6:
91:b6:e5:ca:a3:88:2d:f0:0d:72:65:dc:72:45:2a:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3F:1A:3A:36:4B:D2:2C:B2:2F:5E:C5:DE:4D:FB:F8:29:6C:97:0F
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a4:22:80:af:81:c0:39:64:91:b5:9f:8a:68:b3:10:a3:8c:
06:11:c6:84:98:9c:7f:39:f5:28:11:62:85:32:6c:56:b8:5c:
20:6b:fb:20:9b:e4:ae:63:ac:c2:10:d2:21:81:19:48:e9:28:
ff:b8:70:ae:3a:f0:08:44:f0:b4:8f:c2:e0:fb:42:1a:4c:c1:
5c:37:f0:42:12:43:e1:41:3e:d1:6c:59:fc:e0:31:54:9a:52:
b8:71:e8:6f:d9:71:9d:04:54:36:83:e4:7d:72:6c:bf:84:22:
b4:c5:a7:11:c1:c9:1e:f3:51:b9:de:58:a3:96:ec:17:e3:62:
8a:de:7f:3a:76:fa:f7:46:0d:14:38:c0:55:a4:f8:e7:48:d9:
85:5f:51:44:e5:98:92:81:0b:12:f2:ed:c1:5a:3a:3f:c4:64:
1b:4b:20:6b:53:b2:8c:72:3f:0b:7b:a5:60:96:3d:04:c1:1a:
83:7f:eb:71:42:8a:83:ba:4a:93:42:51:be:5e:82:bc:3e:7c:
83:3c:9a:e5:ab:e9:57:ff:d7:77:ce:27:6f:f3:74:ea:3d:d6:
e1:cf:83:be:af:1f:0b:1f:31:a7:b1:c6:d8:22:22:fc:da:30:
a9:bd:aa:8c:68:b9:bd:a6:2c:b8:ad:51:84:5f:28:6b:ca:f6:
b7:de:f5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:51:18 2026 by rpki-client