Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: oMFuEt4tfhOOZZegK70VlPle4Wp9ASkYlkidk2q5evE=
Subject key identifier: EB:AD:CE:34:40:0A:75:09:9E:25:8F:F1:78:4A:8C:E5:8A:1C:C2:6F
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 01A112609D1C4F3AA3464B9E2E97D4025957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1A8D
Signing time: Tue 06 Oct 2026 18:01:23 +0000
Manifest this update: Tue 06 Oct 2026 18:01:23 +0000
Manifest next update: Wed 07 Oct 2026 18:01:23 +0000
Files and hashes: 1: iwdbfX3VeEC-dJ7spuyrMGzAZEA.roa (hash: rGk72/1YdyFUc4NyU+VKerIA+XWmcskQTcATzTBlTBs=)
2: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: E2u/suITFNRhhy3egNGt27KCx7nAaj4fPe3jHVaEkUs=)
3: sLLmkteo_FcFXMtUJhw6fFKVofY.roa (hash: a9XJ/mxkvDOm7bLMm8792DO+WjUzGL25z/Umu2rG3g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:60:9d:1c:4f:3a:a3:46:4b:9e:2e:97:d4:02:59:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Oct 6 18:01:23 2026 GMT
Not After : Oct 7 18:01:23 2026 GMT
Subject: CN=ebadce34400a75099e258ff1784a8ce58a1cc26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:1b:8d:b5:23:b1:40:d8:0f:d2:b8:39:78:
ae:7b:34:4e:a1:c4:c9:9b:08:74:11:37:59:a3:05:
10:cf:0c:f0:da:01:e1:40:17:fc:80:e7:9c:60:57:
7e:ca:e7:32:1a:54:f4:72:e2:a3:7e:7b:68:26:82:
e4:f2:af:65:ce:25:9a:e5:f5:69:e6:5d:c3:b0:39:
63:a8:09:f0:16:33:7d:51:6a:39:31:6f:63:28:5b:
91:db:94:a8:4f:05:24:3a:13:b2:b4:9e:e4:02:23:
c0:80:19:6e:2a:da:08:74:a1:34:1c:e4:5c:5b:ff:
47:39:b5:0e:a4:3a:ac:a7:eb:e7:29:e2:57:fc:5c:
8c:11:21:15:1d:b8:10:4e:7c:85:6a:c1:26:3b:2c:
ed:b2:67:80:c1:b2:84:b2:17:52:57:19:7c:7e:c6:
d6:07:37:d2:bf:95:e8:38:00:dd:01:46:dc:fe:fd:
8d:f5:29:bd:69:8c:e5:42:28:a0:85:d8:a5:40:54:
fa:37:e8:07:26:d5:58:e0:87:d4:f9:bb:69:5b:c7:
7a:e1:26:8d:c8:ec:fd:95:93:62:71:b0:80:54:d4:
72:c8:9b:09:9f:3a:d6:23:fe:30:a8:6d:76:01:6c:
10:4e:82:49:da:ef:14:f9:bc:1c:9e:a8:22:d8:99:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AD:CE:34:40:0A:75:09:9E:25:8F:F1:78:4A:8C:E5:8A:1C:C2:6F
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c4:15:21:78:e0:f3:82:c8:ec:e3:63:1b:60:f0:1a:05:c1:
0a:1a:73:e2:7b:02:d3:50:a3:9f:ae:ef:ce:64:63:b2:72:29:
ba:6f:78:c5:85:cd:97:34:a2:65:6c:98:fa:e7:de:a5:cd:32:
c1:4d:4a:3c:22:9d:3c:07:c1:85:e2:74:a6:93:58:bd:3b:ad:
fc:ea:fc:dd:0d:d1:cf:13:fc:64:f3:ea:68:a0:71:95:16:30:
3f:ae:28:25:2d:85:6f:88:0a:08:42:94:0e:cb:e4:c0:ef:a9:
10:cb:a6:4c:8e:bd:52:64:e5:80:93:82:6f:cf:4e:7e:18:89:
fa:e0:65:94:82:0f:b2:5f:61:1b:ed:3c:37:c5:ba:ad:24:31:
3b:21:3d:ab:3f:20:36:51:06:fb:d9:73:92:f6:cb:9f:3b:d5:
91:8b:46:f9:78:48:81:1a:ba:86:a7:66:0d:d1:cf:53:7f:82:
59:0b:1b:38:6c:74:88:59:2d:7a:4f:14:41:64:07:4c:27:aa:
ba:3e:b6:bb:ab:00:58:bb:e8:20:cf:97:e7:6f:9e:21:be:6a:
53:9f:df:ee:db:ee:1c:60:d2:9e:2f:6f:bc:93:ac:6d:9d:8b:
b6:f1:67:e3:a9:0c:5c:8f:66:e2:4b:5c:7e:4f:52:e8:98:fc:
05:40:22:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 03:13:53 2026 by rpki-client