Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
File: wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft (raw, json)
Hash identifier: 01spzsFTQ0xj3CypiRS9UEqegFcZMerW8kjWsj3paHQ=
Subject key identifier: 9F:AE:31:D6:8C:EB:03:AB:AD:6C:01:B1:7C:25:D1:DB:C2:63:11:59
Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
Certificate issuer: /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Certificate serial: 01A17995E281713CC1F0F225A81449630937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
Manifest number: 1A59
Signing time: Mon 26 Oct 2026 19:00:28 +0000
Manifest this update: Mon 26 Oct 2026 19:00:28 +0000
Manifest next update: Tue 27 Oct 2026 19:00:28 +0000
Files and hashes: 1: 7OfI-VvqbkhBBO8vhNMUjyDjLfY.roa (hash: eTH+b7uyka3O9YkXOpD+DkbzSM2UIMZvJWqni2nrhis=)
2: 8gg12X3s1LPBf_d0sIf23T4p0tk.roa (hash: 319DbafJhZd2xmNMsWkQ3NZC3fYpVLzj/Zav+e/7chk=)
3: wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl (hash: Ym1EymsPn+ZzBGrkn62WAEBxNxVrVHQHAascPwLrKOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:95:e2:81:71:3c:c1:f0:f2:25:a8:14:49:63:09:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Validity
Not Before: Oct 26 19:00:28 2026 GMT
Not After : Oct 27 19:00:28 2026 GMT
Subject: CN=9fae31d68ceb03abad6c01b17c25d1dbc2631159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:68:6d:13:b9:3e:20:56:89:7d:eb:cd:c7:
35:ec:e9:7c:53:05:4f:38:4a:d0:42:a9:da:85:f1:
9a:42:18:f0:4a:6d:b3:a3:c9:41:c7:b5:fa:15:02:
55:1e:df:2f:fb:64:3a:ab:ef:07:64:c3:b2:b8:61:
65:d1:b5:ff:00:72:d7:6f:1c:92:02:6f:2d:5f:01:
4f:ae:64:f3:c7:ae:67:03:b1:1d:47:b2:0a:e9:2c:
2f:c5:38:be:c4:14:d7:88:1b:52:c6:4a:9a:4f:23:
31:d1:f1:61:da:ac:96:8a:bf:de:fa:87:23:3c:10:
7b:3d:da:e4:ff:09:89:96:47:44:8f:42:ab:be:fb:
9e:96:3f:84:01:24:b7:db:03:6c:ad:bf:6e:30:60:
32:56:d5:83:19:a2:5e:6d:c7:af:23:e2:c3:e5:d7:
26:d7:2f:4a:3f:eb:6a:1a:d6:c3:f2:66:97:be:5a:
09:35:ec:ba:20:eb:df:ca:17:c2:a4:d7:62:fb:68:
07:91:65:b9:f5:49:1d:25:9d:af:37:95:bc:51:ba:
45:9e:78:b4:a0:53:d5:6e:b1:39:6b:45:06:6c:ce:
77:19:5e:60:90:1c:de:36:fd:bd:80:48:01:3e:e9:
85:d2:ed:c2:16:da:5b:75:de:eb:d0:89:58:c0:06:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AE:31:D6:8C:EB:03:AB:AD:6C:01:B1:7C:25:D1:DB:C2:63:11:59
X509v3 Authority Key Identifier:
keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6a:c7:9a:4a:02:36:77:16:28:47:13:41:8c:51:1d:ca:20:
5c:bd:3a:35:84:81:22:94:22:59:6e:dc:06:e5:8a:f0:45:52:
28:9a:f7:7c:ef:19:00:98:cb:41:74:93:7b:56:bc:c5:e4:70:
5e:cf:07:73:14:39:ca:12:2b:6f:e2:0c:b2:31:18:30:81:43:
04:91:1e:05:35:cf:a9:a3:5f:e5:14:69:f2:73:d2:68:25:02:
e6:4f:07:60:88:45:86:19:d0:42:7a:cc:07:92:5f:ee:b6:3f:
2d:44:c7:81:4b:b2:6f:4f:83:6f:c7:f4:59:fb:3a:0b:cb:80:
1f:76:65:1d:03:a9:ae:b5:c2:94:2a:18:9d:f6:7b:90:28:4a:
ec:6f:03:f1:f5:68:aa:dd:cf:b0:01:4f:0a:57:7b:07:f5:41:
32:08:b5:a5:7b:d7:e9:d0:16:a9:ad:f7:b1:5f:a0:d9:55:8e:
4e:45:af:45:e9:c1:7d:f2:f0:eb:30:2b:c8:63:86:f4:4e:2b:
55:54:7a:60:8f:2c:66:be:0b:10:61:b2:23:df:76:01:f4:5d:
dc:62:28:2c:27:ee:4c:78:f3:84:9d:8b:0b:c7:fc:f4:8e:f3:
40:96:dc:e8:9b:7d:2d:e0:ff:fb:39:65:fe:28:25:38:54:7b:
74:66:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:51:11 2026 by rpki-client