Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
File: oFZPeYAZBRh04Czu4_0hy86rSuk.mft (raw, json)
Hash identifier: +FY0Yc+Q8QVKlXDcamwcKYBNlL6FqpsMn+QI8hbvik8=
Subject key identifier: 2B:68:32:6D:91:63:9B:16:FD:CF:3A:06:B9:0D:CA:85:57:C9:55:97
Authority key identifier: A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9
Certificate issuer: /CN=a0564f798019051874e02ceee3fd21cbceab4ae9
Certificate serial: 01A187885DF231A6BD6864E3D60B411CFAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
Manifest number: 0FD0
Signing time: Thu 29 Oct 2026 12:00:23 +0000
Manifest this update: Thu 29 Oct 2026 12:00:23 +0000
Manifest next update: Fri 30 Oct 2026 12:00:23 +0000
Files and hashes: 1: oFZPeYAZBRh04Czu4_0hy86rSuk.crl (hash: Uth5MsDz28RLj7gE0pFHSdlSsSWkyiffVq//YK6IN8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:5d:f2:31:a6:bd:68:64:e3:d6:0b:41:1c:fa:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0564f798019051874e02ceee3fd21cbceab4ae9
Validity
Not Before: Oct 29 12:00:23 2026 GMT
Not After : Oct 30 12:00:23 2026 GMT
Subject: CN=2b68326d91639b16fdcf3a06b90dca8557c95597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:8c:c3:8f:70:3c:b7:bb:06:a2:f8:0b:18:
89:39:2f:b3:4f:15:07:f2:20:1e:bf:31:5f:bf:ee:
99:4b:23:46:d1:8b:a8:8f:bc:3b:89:d1:23:bf:4f:
65:14:2a:bb:02:35:21:90:1a:a2:0a:8c:3e:de:f4:
e0:86:7f:b0:89:6f:fb:c0:61:79:db:c7:8b:16:8d:
63:c7:9c:a5:22:00:0a:32:4d:f4:09:d6:0b:0a:c2:
87:a5:84:29:c4:a3:ca:40:56:e5:fd:14:bb:99:77:
79:6d:67:40:be:da:1c:54:ba:fa:4f:af:64:0a:08:
46:b2:4f:9a:be:10:ec:64:4d:e2:63:58:db:97:53:
2a:b4:f0:1f:01:fb:7e:51:1b:11:33:c3:b1:01:59:
b5:63:b6:06:2c:3d:aa:07:be:eb:a4:2a:5c:2e:75:
d5:f3:c8:4c:b4:c4:c6:73:6e:2b:58:b2:e5:de:22:
5c:14:02:1c:8c:75:9d:65:cf:d0:6a:d0:16:6c:07:
61:ae:1b:29:2c:e3:fb:6b:e3:58:d8:63:b5:d8:f6:
ac:48:08:99:65:67:f0:9b:c3:dd:92:93:0a:c4:b0:
16:7e:0f:e4:e2:db:c4:68:8a:df:eb:38:94:65:02:
ad:10:c0:3c:77:36:26:e1:6c:6f:99:63:94:d7:55:
04:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:68:32:6D:91:63:9B:16:FD:CF:3A:06:B9:0D:CA:85:57:C9:55:97
X509v3 Authority Key Identifier:
keyid:A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fe:61:b8:74:93:72:3e:6c:76:83:52:95:81:96:38:d4:36:
48:87:45:00:fc:e1:45:df:9e:81:fc:7e:24:bb:71:ec:c5:2f:
3c:da:2e:d1:c3:b3:6a:11:a2:8b:14:2b:ac:0c:9e:14:dd:72:
ee:68:22:0a:09:14:7d:7c:9e:13:0c:cc:d0:84:74:51:31:72:
21:7c:04:99:0c:f8:df:3f:b8:78:c7:d3:ce:d6:93:ea:19:2d:
6c:67:4e:49:df:07:f1:6e:c4:7a:fd:f4:eb:9a:b8:74:31:c1:
8b:75:10:c0:f3:1f:e2:77:ab:9e:6e:47:f1:f5:ff:71:70:e2:
c5:e7:52:20:f9:1c:be:59:67:26:07:4c:01:26:84:60:79:e0:
3d:b9:b7:66:17:c2:bc:6a:ba:06:6e:7a:28:20:81:b7:3a:39:
06:5b:c9:34:10:1f:61:c7:95:f9:3f:54:60:4e:11:d8:fb:47:
58:f5:31:90:1b:5d:f6:2c:61:7c:1f:22:42:da:71:03:6f:5f:
05:0e:b0:49:b8:92:24:1d:1c:fb:03:09:f8:1f:d5:09:e8:63:
59:dc:5d:94:08:89:4f:3a:e5:37:75:17:70:68:22:67:a1:85:
6b:93:af:5d:af:34:0b:4a:ed:d3:0c:09:fc:41:e9:dc:59:01:
d2:80:af:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:05:33 2026 by rpki-client