Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
File: oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft (raw, json)
Hash identifier: xwuZrQAZwLmP99+Y+KkgHf91/tCYes/i+GRtCSzq1q0=
Subject key identifier: 5A:91:5D:53:32:F5:98:06:AC:AC:A9:88:6A:D5:AF:9E:03:18:6A:AB
Authority key identifier: A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
Certificate issuer: /CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Certificate serial: 01A17F624BD6CE6EF52D7446D5EDADA3247B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
Manifest number: 186B
Signing time: Tue 27 Oct 2026 22:01:50 +0000
Manifest this update: Tue 27 Oct 2026 22:01:50 +0000
Manifest next update: Wed 28 Oct 2026 22:01:50 +0000
Files and hashes: 1: oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl (hash: ra+Q/3dp3F/sWab886i7tGPGbCg/WpgJHpTSaAYEP34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:62:4b:d6:ce:6e:f5:2d:74:46:d5:ed:ad:a3:24:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Validity
Not Before: Oct 27 22:01:50 2026 GMT
Not After : Oct 28 22:01:50 2026 GMT
Subject: CN=5a915d5332f59806acaca9886ad5af9e03186aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:f3:b4:ec:57:a3:aa:eb:b4:15:21:dc:26:
61:ba:98:f1:42:5d:6e:d6:20:54:35:22:d8:4f:f5:
63:e2:cc:c4:37:35:cd:44:6e:57:34:6e:ff:e6:0e:
c7:1f:48:75:d6:fe:cf:d6:94:34:72:19:bb:7a:57:
0e:aa:1b:79:db:6d:5f:3c:38:1d:57:a6:4f:9f:7b:
70:34:00:c9:c6:ea:47:28:6e:bd:19:f7:f1:90:10:
a5:76:d3:94:9e:09:4a:0f:a6:28:04:60:63:03:6e:
b6:3d:cd:43:20:42:b3:60:78:3f:0e:8f:a6:ee:fe:
06:ff:82:1a:3e:49:3b:cb:03:7c:46:20:19:79:df:
5c:ea:13:6a:3c:b6:00:c4:72:de:b0:05:92:ad:b2:
ff:e2:63:4a:d0:3d:40:d0:37:6f:1b:c7:5d:04:2e:
82:73:8f:f5:75:17:0b:48:14:64:e0:fc:6d:08:16:
90:22:c2:e2:11:f3:60:c8:6a:7d:b9:6d:5d:c2:cd:
7c:c0:a4:0f:a4:4c:04:d1:cc:1d:f3:0b:05:ef:5e:
2d:e5:0c:5b:e6:44:c3:a4:8d:b1:cd:c0:1b:18:47:
d6:31:9e:ad:28:e8:35:d8:74:a5:48:97:3e:ff:27:
2e:5a:e6:08:03:e1:6f:0a:2d:70:52:c3:d2:ce:af:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:91:5D:53:32:F5:98:06:AC:AC:A9:88:6A:D5:AF:9E:03:18:6A:AB
X509v3 Authority Key Identifier:
keyid:A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:11:7a:d9:05:70:23:bd:48:94:02:e3:a0:5d:bf:65:1f:07:
ef:da:16:e7:ea:e0:76:0e:39:7d:7e:83:7f:e8:d2:06:e5:05:
cb:fa:21:c8:83:7a:ac:1e:dd:eb:a0:43:75:12:1a:5c:f9:32:
26:46:46:db:5b:5d:f6:38:d3:6d:38:93:86:3a:ae:58:53:bd:
91:1e:f8:14:f3:44:6f:3d:10:17:a7:b7:4b:85:0d:1a:d0:e0:
a2:99:8f:1d:89:fa:22:03:cc:b3:9a:c9:3a:e4:dd:23:84:14:
71:29:b8:45:2b:db:8c:f4:74:48:89:7a:56:40:fb:c9:79:6c:
46:88:5b:9b:2d:21:9f:17:7a:05:65:e2:ed:a0:e3:d3:7c:71:
35:79:05:9f:1a:75:e6:5b:8d:f3:ca:52:e8:a5:27:dd:ff:f4:
4b:0d:33:82:80:13:36:d5:af:92:6d:d4:bc:e6:cd:9c:b4:3a:
01:db:b9:91:6a:5d:b4:79:f6:0c:fa:fd:cc:f8:f3:7f:5d:f3:
01:30:cd:67:77:ff:cb:86:a0:35:f6:d5:17:8e:b9:b2:34:3d:
8d:cf:95:b0:9d:fb:55:9c:c9:52:06:7f:ed:76:f2:13:da:88:
12:e0:ce:04:bf:f7:ef:8f:8d:f4:26:b9:be:5b:88:2b:fa:01:
62:99:9c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:24:21 2026 by rpki-client