Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
File: oLwReyvH4FrFwOs1FaF0GBMP3oI.mft (raw, json)
Hash identifier: Q8uyiZvk+zYI13tzmxe2a7WafP0lUxblTK6sMSZNky8=
Subject key identifier: 01:7E:47:9F:76:03:1E:A1:8B:A4:63:5C:4F:2D:D3:55:57:70:09:AC
Authority key identifier: A0:BC:11:7B:2B:C7:E0:5A:C5:C0:EB:35:15:A1:74:18:13:0F:DE:82
Certificate issuer: /CN=a0bc117b2bc7e05ac5c0eb3515a17418130fde82
Certificate serial: 01A11975688965DD39330D05D8A0C9DAF305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
Manifest number: 010B
Signing time: Thu 08 Oct 2026 03:01:27 +0000
Manifest this update: Thu 08 Oct 2026 03:01:27 +0000
Manifest next update: Fri 09 Oct 2026 03:01:27 +0000
Files and hashes: 1: MMGfobkcPvFzzP7MQZnUAsVVZp8.roa (hash: WGW0WSapBDRofWXt8DtNDTEwEorTNTg8AzDt4Ue2MDI=)
2: oLwReyvH4FrFwOs1FaF0GBMP3oI.crl (hash: WdXQd+BX7YgBLTCDnYLqg05YrObbw3ifRGO53y1jqJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:75:68:89:65:dd:39:33:0d:05:d8:a0:c9:da:f3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc117b2bc7e05ac5c0eb3515a17418130fde82
Validity
Not Before: Oct 8 03:01:27 2026 GMT
Not After : Oct 9 03:01:27 2026 GMT
Subject: CN=017e479f76031ea18ba4635c4f2dd355577009ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:65:7e:91:7f:32:56:1c:72:8a:ec:09:53:
cf:a3:11:98:34:79:6e:85:7f:e9:5d:1a:ca:c3:37:
da:48:60:0b:75:7a:00:9f:b9:c8:d0:fd:8e:de:f8:
b9:e2:b0:b4:c7:cc:81:f3:91:f8:c0:71:25:d0:3a:
73:8e:53:27:2f:3a:10:56:9e:af:be:e9:8c:19:d0:
18:7f:e4:cd:86:96:b3:e5:41:92:f5:eb:73:b8:f4:
97:af:01:bf:09:fe:c1:7e:de:0a:ef:c6:04:31:4c:
27:6e:3d:3c:73:e8:9d:74:bb:f4:18:3e:9a:7e:ad:
bd:b0:69:ef:43:11:b0:10:b0:ed:78:84:08:3e:3c:
dc:62:a1:0a:b9:c3:6d:87:c9:84:fd:77:d6:af:00:
e7:7e:2d:26:25:a7:8e:e1:32:8d:37:67:01:5f:0a:
4a:9e:b4:75:94:7a:cd:33:7e:1b:ac:51:a0:7b:db:
e6:0d:dc:dc:06:69:90:e7:82:86:55:56:5e:d9:41:
8f:d0:36:da:d0:89:fb:b7:d5:6c:3f:20:57:d9:a8:
b8:33:49:e9:e6:3d:ce:19:0c:08:a3:f2:d1:ae:f2:
ad:d4:5b:a4:ae:d3:61:9e:18:da:9f:a9:d0:15:a7:
58:9d:1b:0a:09:68:2b:81:ba:bb:aa:f6:8f:3d:fe:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7E:47:9F:76:03:1E:A1:8B:A4:63:5C:4F:2D:D3:55:57:70:09:AC
X509v3 Authority Key Identifier:
keyid:A0:BC:11:7B:2B:C7:E0:5A:C5:C0:EB:35:15:A1:74:18:13:0F:DE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c1:74:ce:2f:d3:aa:4f:89:64:c0:d5:49:99:76:cd:de:f2:
74:e3:8e:a9:03:43:c2:90:8b:03:ed:e6:35:af:a5:df:8c:d7:
e5:80:9a:49:7d:09:3c:c7:90:58:08:24:e6:49:ac:33:b9:e4:
fd:be:5b:5a:bc:23:d6:04:8a:41:fe:6a:95:90:05:05:5b:15:
34:8b:bc:b9:2f:de:37:61:fc:8b:f2:88:76:08:be:a5:87:7e:
43:73:c0:e5:50:bd:95:05:58:78:21:a6:4d:cd:07:eb:19:ff:
4f:22:f0:ab:f9:02:ac:15:70:6c:36:49:f3:67:12:5d:41:78:
6a:08:ad:97:d4:4c:58:3d:61:19:60:77:a3:2a:72:6d:03:c0:
48:dc:43:90:3b:0c:a8:46:f3:2e:24:c1:17:ac:10:57:db:fc:
d4:d3:83:95:b1:a1:0f:9c:5e:45:0f:1e:ff:8e:50:40:c5:42:
20:61:58:a4:3c:0c:00:fb:a6:cb:1a:00:fb:99:24:1b:e9:d9:
30:ed:af:c7:59:3f:bf:86:25:cb:22:03:fc:b7:57:81:2b:ce:
09:36:3f:05:df:a7:77:f8:fd:aa:81:27:41:0c:be:80:46:a8:
08:d5:c9:24:07:39:bf:b8:c8:17:6e:b4:f8:82:ef:27:f7:88:
92:3e:70:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:56:54 2026 by rpki-client