
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
File: oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json)
Hash identifier: W2TpWQmgXIeNLw2BYudlfTYqAgBfS087rZ8r9TBmgNs=
Subject key identifier: EC:12:7C:32:2F:7B:E8:A9:5A:12:93:7A:75:36:01:9D:77:8D:21:A0
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 01A129C42E1C1D451F1F347358469A856893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
Manifest number: 06A4
Signing time: Sun 11 Oct 2026 07:01:25 +0000
Manifest this update: Sun 11 Oct 2026 07:01:25 +0000
Manifest next update: Mon 12 Oct 2026 07:01:25 +0000
Files and hashes: 1: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: 1aruqSZGbHkZm0BNW1te3rbs0qrz49rvr20spue9PMo=)
2: xE-BgKSVBYFhggPNmKsU1prxN0g.roa (hash: YpkmYJyHUw54oWyFNUMkFF7WgnbU7Uo2+GiNtKKeUKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c4:2e:1c:1d:45:1f:1f:34:73:58:46:9a:85:68:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: Oct 11 07:01:25 2026 GMT
Not After : Oct 12 07:01:25 2026 GMT
Subject: CN=ec127c322f7be8a95a12937a7536019d778d21a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:cb:9d:61:3f:43:9b:3b:5a:9e:73:56:d6:
8f:4e:0f:53:69:b7:de:79:9d:1a:90:98:0e:05:bd:
ae:21:b6:53:9d:d1:03:7d:39:e6:c3:dd:82:1b:ba:
85:51:bd:dd:b5:c2:72:bd:ef:4d:43:2d:50:89:2e:
92:29:06:2b:70:85:8e:dd:e0:89:95:17:c3:4f:fd:
32:55:2f:81:f8:49:ff:b6:a1:7b:f6:17:eb:82:11:
2b:98:e7:4f:1f:fa:bc:d1:77:89:03:1b:87:d3:0e:
53:a8:90:64:bd:52:31:c9:a0:c7:cd:ab:0e:32:f0:
5c:ee:4b:3e:69:c3:9b:0b:22:2b:fb:01:c8:8e:26:
31:80:ab:ed:ce:e1:68:98:c8:19:fb:bf:64:21:13:
b7:f9:5e:76:94:b9:e6:f7:bf:02:22:a7:f0:5b:ae:
b2:86:56:bc:a6:d0:5a:61:c8:7d:a8:df:18:f2:23:
5a:42:f2:67:ea:ef:cf:db:21:1b:58:7f:1e:7b:7b:
3b:8c:b7:d5:4a:0c:06:b5:99:4c:b5:4e:5d:bd:b1:
2c:0a:50:fe:41:ca:8d:5b:6a:c9:a2:d1:8e:7e:b8:
a8:79:68:65:72:ca:ad:d2:74:3f:3d:1b:91:b7:f2:
88:a9:fb:d8:80:63:c4:f5:15:99:5e:70:b9:6f:f6:
e3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:12:7C:32:2F:7B:E8:A9:5A:12:93:7A:75:36:01:9D:77:8D:21:A0
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:eb:b3:06:5f:00:33:3e:65:cc:27:c7:4c:08:84:42:de:b2:
54:df:43:37:f5:82:4e:e6:bf:a8:8b:b3:d7:a1:5b:e4:ad:3c:
41:e4:cd:ff:6b:dc:bb:dc:fe:74:28:4b:05:34:ff:5f:4a:a9:
7b:6a:50:fe:bf:32:bf:a9:d1:4b:5d:27:73:20:24:60:e9:c1:
43:96:de:8d:0c:95:93:df:1c:93:36:81:56:68:ef:66:06:73:
3e:d1:34:39:83:99:94:bd:3b:47:4f:ac:2e:23:2b:8c:d9:8d:
40:03:fb:e6:3a:77:1c:3f:94:8c:f5:e8:ec:2e:e6:21:61:26:
14:54:8f:99:05:bd:0e:a9:70:b2:55:61:dd:24:67:4e:be:dd:
35:9f:05:e5:90:42:e7:65:c0:d4:4f:82:a8:8f:78:43:11:4d:
8d:db:8f:7e:ac:d0:6d:73:f3:00:d2:c0:6f:0d:25:1e:f2:b9:
a2:32:36:9c:d9:9e:f7:48:33:2c:95:eb:01:c3:d8:78:5c:9f:
6a:53:ff:a3:66:df:a8:63:87:e4:a1:02:07:9b:c5:4b:b5:2a:
b6:be:8f:c6:98:e9:00:dd:c0:cc:2b:86:9a:67:19:e1:ff:91:
18:43:8e:50:5c:b0:a6:f6:99:9f:12:87:20:5e:0b:4a:45:a9:
d2:78:de:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:21:35 2026 by rpki-client