Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier: Ilr4avod0KqK3imlxwPKfZEEaMtdmS7+b1vLlOatblw=
Subject key identifier: FF:FC:D3:CA:C0:A7:1D:E5:90:FF:89:5A:20:EE:82:09:19:2D:D0:16
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 01A18B2EB8F22BBAD81F44561ED7E65CB3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number: 1369
Signing time: Fri 30 Oct 2026 05:00:57 +0000
Manifest this update: Fri 30 Oct 2026 05:00:57 +0000
Manifest next update: Sat 31 Oct 2026 05:00:57 +0000
Files and hashes: 1: l6dD6_YwYG2GoAyCwVNIGTIWyF0.roa (hash: mR/Sx8Gef6jaLXJaUX0OcwA84CHIBBS3pL7jXOr7b50=)
2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: uGRkfrdZZKZ3hAd5OywNEAceQHVkaH/mlrHdHplLJfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:2e:b8:f2:2b:ba:d8:1f:44:56:1e:d7:e6:5c:b3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Oct 30 05:00:57 2026 GMT
Not After : Oct 31 05:00:57 2026 GMT
Subject: CN=fffcd3cac0a71de590ff895a20ee8209192dd016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:92:77:c9:b7:7b:6d:38:9a:f5:de:4f:d8:
6b:67:3a:18:cb:17:9f:9b:b1:16:06:c5:0d:5e:06:
05:a0:0d:06:0f:09:a3:70:c2:bd:fe:e4:e7:c4:b3:
0a:99:69:58:26:bb:de:00:76:d7:07:0b:f7:94:b1:
0c:20:97:ea:f8:92:69:76:30:21:ff:15:4b:67:9a:
59:8a:37:33:a2:83:66:8b:58:df:d7:d1:ef:b7:46:
12:b7:33:0f:20:52:e7:ef:18:43:ff:d3:59:48:89:
7c:fe:e2:8e:fe:dc:c4:88:2e:2b:4d:08:b5:e8:53:
7e:55:1f:f1:90:4e:33:27:01:1e:38:ba:44:40:d9:
72:c3:38:d9:21:ae:15:20:09:41:40:d3:55:21:d9:
a6:fc:95:c5:03:0a:4a:d8:26:df:76:51:3e:0b:cb:
fe:cc:e4:02:8d:ea:29:16:82:a8:21:7c:9d:8c:e5:
e6:13:e5:89:00:22:e5:41:4b:09:2d:e9:d4:2d:30:
23:d6:2e:2f:7f:ed:e9:92:70:3b:17:c3:78:42:45:
f5:ba:a5:3a:d3:a6:13:28:2f:50:f1:51:5c:d1:4c:
c2:55:22:a0:f7:cf:59:6c:b6:20:4c:04:34:97:96:
7d:6e:3d:7d:6f:eb:ed:07:3c:45:a2:86:f3:6f:b7:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FC:D3:CA:C0:A7:1D:E5:90:FF:89:5A:20:EE:82:09:19:2D:D0:16
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dc:4c:dd:25:11:62:0b:5d:cf:7a:c0:4b:ef:3c:41:2b:6c:
f8:08:f0:4f:af:1c:dd:5c:af:86:5a:1f:d0:10:7b:aa:c9:37:
70:32:7e:95:56:86:ca:a0:9b:83:9e:3d:66:0c:29:64:a2:6c:
8c:50:67:4a:ed:20:67:64:51:22:73:5a:c6:7f:b5:4b:88:d5:
c4:20:cd:45:68:f0:11:56:77:f1:29:27:41:6b:d7:1a:2a:8d:
a8:00:00:50:2d:ed:d1:5f:b4:80:e1:93:2c:07:e9:a4:d9:0e:
29:95:4f:4a:c6:4b:4f:ef:b9:9c:9d:01:10:69:52:cb:8f:54:
1f:84:f5:b8:fe:0d:e7:8f:15:93:43:f8:32:06:93:f0:7f:bc:
16:2a:c5:bf:3c:a9:fe:b4:d1:58:4a:c0:07:29:42:bd:8f:34:
24:11:70:97:84:34:a7:79:42:61:7d:93:71:60:62:2a:04:e8:
59:3c:f5:6d:a8:bf:12:06:51:a1:86:02:95:6a:86:e1:c2:3d:
51:e8:6f:b7:9c:02:30:a9:cb:cd:b2:83:8a:dd:85:b7:b7:e4:
74:74:9f:d9:cf:41:9a:8d:aa:7a:c9:bc:62:97:e5:05:d1:41:
2a:f7:e3:53:d3:2f:64:a5:3d:4f:a3:aa:17:4b:a5:e5:92:e6:
25:85:69:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:23:59 2026 by rpki-client