Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
File: 1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft (raw, json)
Hash identifier: FlLw9a5LHet5uT1Yq5WXlEvHkX0oXZYylrhx95prfUQ=
Subject key identifier: 9E:47:6C:70:0E:07:BF:F3:74:C3:D2:B2:F8:CB:AF:E0:ED:4E:C2:0D
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Certificate issuer: /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial: 01A13F02275A320567EAC161A74D95CB9889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 10:01:08 +0000
Manifest this update: Thu 15 Oct 2026 10:01:08 +0000
Manifest next update: Fri 16 Oct 2026 10:01:08 +0000
Files and hashes: 1: 1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl (hash: dNW8KeO68zrHys33wobhEeMTpVJ6lEEzYpxEoKzII1I=)
2: ij4gJmjVgeqYXeQbD1ZtwxDVXqs.roa (hash: tgnllS0U1hZ0N2hin4TK1nqPVptt1uSkt6Jkh0W7oGk=)
3: lP-JqqYW4N8njI6uaIDIxBXmo3Q.roa (hash: iUpeWO/zWeAoo1xidbKM+b5szCcBiTY0HxyO251Cj3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:27:5a:32:05:67:ea:c1:61:a7:4d:95:cb:98:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Validity
Not Before: Oct 15 10:01:08 2026 GMT
Not After : Oct 16 10:01:08 2026 GMT
Subject: CN=9e476c700e07bff374c3d2b2f8cbafe0ed4ec20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:86:0f:6d:83:5b:41:83:ac:9c:77:c4:94:
0a:5f:8f:6b:bd:c2:98:47:32:7a:54:db:6a:c6:f5:
74:97:6b:d7:a7:cb:88:6f:1d:43:f3:72:9c:8d:de:
f5:5c:96:45:d0:51:20:4c:d6:39:f3:53:f4:15:42:
f0:01:a3:57:9e:c8:1e:dc:70:30:ed:0e:83:ab:27:
53:a4:92:d0:08:2c:d7:cd:58:3b:14:38:85:31:49:
9d:ab:d1:6b:93:c9:2c:c8:3c:f7:55:3d:d9:6f:3d:
9d:e1:04:f5:8a:f5:78:a8:95:70:d5:9e:ff:f1:30:
ee:fd:f2:58:18:71:28:36:72:3a:fc:99:0c:c9:0d:
84:59:56:8b:28:ba:ff:50:72:83:c9:4f:9f:15:b3:
1a:bf:10:84:44:e2:61:55:e4:02:b7:4f:18:74:b3:
ca:81:77:d2:a6:a1:9e:6c:99:92:d3:6d:bf:97:26:
ab:e8:88:13:6f:ed:95:00:8d:ba:44:1a:bf:38:32:
7c:ba:81:21:03:67:6d:bd:90:fc:d0:4e:35:a2:fe:
74:5c:4a:94:e9:13:da:09:16:54:3c:c9:47:13:da:
3e:d7:8e:56:dc:df:96:b8:69:ca:fe:f0:fe:b0:64:
a8:b9:08:96:da:39:5c:88:0c:f1:5c:75:94:35:57:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:6C:70:0E:07:BF:F3:74:C3:D2:B2:F8:CB:AF:E0:ED:4E:C2:0D
X509v3 Authority Key Identifier:
keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:78:bd:a8:af:93:c1:dd:55:31:19:64:a2:e8:c6:af:82:d8:
11:7a:87:59:aa:6b:3e:b2:fb:e3:1e:3c:61:37:a9:bd:a8:d4:
ef:41:7d:98:8e:d9:8c:70:92:76:0d:97:86:c9:20:d5:21:9d:
dc:1b:58:70:37:a5:7b:a7:d5:16:89:2e:9a:6c:1d:43:4f:ea:
2b:53:cc:35:f6:82:56:5a:6c:01:f9:5d:8f:19:67:e2:26:30:
ca:ba:6c:d7:d9:13:23:5e:54:0d:51:36:02:a1:a2:41:bf:ae:
11:0f:16:f7:eb:07:7a:72:33:5f:7e:d6:dd:8a:02:5b:a1:0a:
f6:0f:8f:51:3f:95:8c:1f:bf:a6:3b:13:06:84:ba:a7:c6:20:
78:0d:54:1d:43:b0:af:aa:1f:b8:49:e6:d1:9f:d7:a8:ad:d3:
a5:b7:03:14:8e:d4:d3:df:8e:94:c5:92:e8:61:7a:63:9b:67:
13:40:ba:23:5f:7f:14:26:c4:e1:5c:b1:0e:c5:84:4a:42:65:
c7:26:68:de:10:96:40:1b:63:ed:df:11:96:bc:2e:75:e0:43:
33:44:ed:89:52:25:e4:c8:5b:b4:2a:09:2b:f1:41:82:6c:f8:
f9:8a:ab:e6:58:ef:61:8f:f0:5d:ce:17:61:f5:5f:2e:13:77:
3c:79:2c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:55 2026 by rpki-client