Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
File: oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft (raw, json)
Hash identifier: lkDLi9a6RB1zDLy1VYP80Ma1X6S+YU7nK2hxY1KxyyM=
Subject key identifier: 7A:63:B1:40:35:2C:C1:99:C6:F4:BB:3A:CA:10:C7:C1:43:DA:3A:3C
Authority key identifier: A1:87:2F:51:32:98:C3:00:A4:6B:41:B9:AE:62:E4:86:9E:93:B7:4C
Certificate issuer: /CN=a1872f513298c300a46b41b9ae62e4869e93b74c
Certificate serial: 01A1705C5C93D8E0641D3AF42EE834C120C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
Manifest number: 0138
Signing time: Sun 25 Oct 2026 00:01:03 +0000
Manifest this update: Sun 25 Oct 2026 00:01:03 +0000
Manifest next update: Mon 26 Oct 2026 00:01:03 +0000
Files and hashes: 1: 3tTUOt9tIqClY-Pcn5ixcWgVkHs.asa (hash: 9PxpYct4ZYiB2ZINKKmfgomCpciPW9Ne+TgfTCByrxM=)
2: oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl (hash: GAoesyFIydNEtzSTO125x5Vgy+APjnrDgRlgs9/f528=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:5c:5c:93:d8:e0:64:1d:3a:f4:2e:e8:34:c1:20:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1872f513298c300a46b41b9ae62e4869e93b74c
Validity
Not Before: Oct 25 00:01:03 2026 GMT
Not After : Oct 26 00:01:03 2026 GMT
Subject: CN=7a63b140352cc199c6f4bb3aca10c7c143da3a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:61:90:40:c2:16:79:80:0f:ce:94:83:1d:
b6:ca:f0:e5:45:40:96:24:fb:19:24:2b:96:ed:ae:
b6:c4:f6:a1:92:46:f8:e1:2d:07:54:e1:38:a2:ce:
58:d0:8f:91:48:4c:d7:8b:4a:3f:34:e8:e3:6a:56:
04:0a:69:d4:be:83:90:2d:5d:44:f5:42:84:4e:62:
2b:6b:cc:ff:da:1f:82:21:a8:f7:dc:97:98:6a:d3:
09:52:c6:ed:ce:ad:b5:37:ff:32:06:0b:ba:ef:17:
39:ca:52:b3:01:fe:c0:38:48:93:97:92:d4:5e:be:
12:b3:19:37:9e:e6:03:f4:e8:1f:40:52:56:99:87:
3c:23:5f:79:ca:74:b1:db:39:36:84:c6:00:0c:6b:
29:2e:c6:d4:3b:83:05:6f:be:72:00:37:5a:2d:af:
00:23:32:7c:cd:2c:d0:f7:e5:de:87:9d:57:78:01:
ca:21:0b:32:0a:dd:f5:e0:80:da:8d:39:30:f1:63:
06:fa:a1:77:2e:90:e9:85:b0:60:cf:6e:6f:9e:cb:
95:63:a6:f2:73:db:65:4f:84:4e:5d:81:31:32:fd:
ff:90:74:90:6e:5f:ac:a1:7e:cd:ce:a5:28:e1:ac:
95:58:ad:57:22:34:7f:b7:b5:e9:22:d3:3e:11:38:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:63:B1:40:35:2C:C1:99:C6:F4:BB:3A:CA:10:C7:C1:43:DA:3A:3C
X509v3 Authority Key Identifier:
keyid:A1:87:2F:51:32:98:C3:00:A4:6B:41:B9:AE:62:E4:86:9E:93:B7:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:89:8a:34:83:85:2d:a7:1d:6d:dd:22:cd:78:d5:18:d0:a4:
51:7b:e4:94:10:24:ae:c8:d4:fd:47:47:63:49:38:b8:20:a3:
86:22:88:14:7a:67:5a:f9:e5:20:0b:3d:2a:b2:9f:81:cf:77:
95:4b:7f:d8:7b:98:72:9e:2c:a9:47:e3:54:8e:75:53:59:1e:
53:71:fe:67:3b:a6:25:9f:a1:de:bb:09:9c:f6:a0:ee:ef:25:
09:89:6b:b4:ba:e3:a5:b5:6e:e9:8a:af:c2:50:53:f5:10:b5:
85:80:45:76:ba:51:19:9b:ac:0a:69:b6:75:39:e9:9b:d7:53:
ad:81:6a:7b:46:3a:ef:8b:a6:c1:be:ab:1d:98:dc:1c:fa:14:
1b:b2:eb:43:21:2b:5c:44:c2:be:4b:0e:6c:a0:40:73:24:2d:
c6:ec:63:4a:72:24:f3:85:30:0b:bb:80:11:e9:82:ce:b2:31:
cc:cf:c0:d8:82:cf:e2:d4:d6:87:0a:58:39:e4:66:c5:10:cc:
ad:40:b7:80:6d:0a:eb:90:14:25:2e:df:ed:b8:8f:bc:96:4c:
3b:14:c2:c9:26:b8:4a:70:b7:61:76:db:15:c4:38:67:8d:60:
c6:71:4e:20:92:7e:cf:b8:d9:e2:b0:a9:49:e2:0d:6e:20:0d:
a9:ed:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:55:52 2026 by rpki-client