Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: WZDOajhGUmKx4zuxYiJAadKkXSROQ4vU3+tiC4vRJ+s=
Subject key identifier: 70:31:3B:7E:25:B8:96:8B:0A:7B:1E:84:56:6D:AE:34:2C:12:34:CD
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 01A13E266D899ECECE73FD473DB66510F9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 06:01:08 +0000
Manifest this update: Thu 15 Oct 2026 06:01:08 +0000
Manifest next update: Fri 16 Oct 2026 06:01:08 +0000
Files and hashes: 1: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (hash: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I=)
2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: /OxQZeCbVUlhkh5wAcpn5tPd6dwMLh9dD9dZz3F37WI=)
3: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (hash: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE=)
4: pMY2G7x73wBoXGM586Db9RcFDxY.roa (hash: 9gsZC3WF9scrT9Qn8MwE1JOLyps6ENzUI0Jj7Vf/mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:6d:89:9e:ce:ce:73:fd:47:3d:b6:65:10:f9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Oct 15 06:01:08 2026 GMT
Not After : Oct 16 06:01:08 2026 GMT
Subject: CN=70313b7e25b8968b0a7b1e84566dae342c1234cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:35:05:33:a9:73:6b:c6:e1:63:c5:c1:d6:
f1:6e:dc:3d:e6:97:06:d3:85:44:b4:ce:1f:a3:d3:
ea:7b:96:fb:2d:0f:cc:61:29:81:ac:ab:05:05:c0:
01:43:88:17:69:3c:0f:3b:df:63:c2:4a:7d:09:48:
2a:c9:8e:bf:27:96:96:4a:cd:5f:5a:c5:6c:21:5c:
29:a3:a4:ce:a4:65:79:ad:0a:eb:cc:e3:e4:9a:0a:
30:95:19:75:ae:10:58:fe:d1:67:86:75:95:32:f8:
6d:6d:ac:f2:88:04:92:5c:a4:f8:b7:62:79:a8:81:
8c:71:9e:af:44:2c:59:1c:e5:ee:cf:51:df:b0:bd:
50:5c:eb:6e:93:9e:69:fe:6c:60:1b:a0:40:79:18:
d9:00:75:1f:4e:af:2f:43:8c:cd:d2:38:54:65:0f:
47:88:81:db:a0:00:c5:10:38:f3:7f:1d:cf:d6:98:
f7:1d:2a:2c:f2:7b:2e:84:11:38:e4:2b:5b:52:71:
81:0c:c0:e9:a7:b7:7d:58:99:af:9b:3b:55:61:06:
32:27:91:73:26:ea:c1:30:50:ce:90:8c:de:b8:82:
a3:bb:f5:28:dc:f4:db:52:f8:bc:85:9d:28:9d:e2:
8a:67:c0:ef:60:4a:c0:b3:19:c4:49:bc:83:16:f5:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:31:3B:7E:25:B8:96:8B:0A:7B:1E:84:56:6D:AE:34:2C:12:34:CD
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d5:ac:64:33:b9:3f:ad:24:8f:89:d6:3e:b2:16:9c:22:07:
b6:f2:cf:31:f2:9e:66:ab:e0:a0:11:f3:98:cd:11:5b:3e:a5:
c9:41:20:ad:97:b2:2c:55:83:84:82:88:6b:f7:1a:0e:e3:51:
3d:a0:ae:49:c2:41:c2:34:dc:18:e6:42:73:77:03:84:a5:be:
41:47:b6:35:a1:35:d2:d0:a4:41:b2:98:32:f2:8f:01:8d:4e:
fa:be:e6:c5:7c:20:ab:74:0e:7b:7a:ed:a6:dd:50:4d:99:e3:
d1:34:af:f9:cf:67:db:5d:67:b4:6b:66:b1:e5:e6:65:11:cc:
35:9c:7e:51:22:a9:85:bd:4d:6b:27:14:78:74:b2:0f:48:c1:
b5:71:c0:03:8c:37:20:4e:6b:a9:fa:60:da:ae:eb:39:16:81:
d0:6a:12:fb:0e:ea:2a:4d:90:20:d0:bc:73:d6:a9:d8:7a:83:
2b:f3:0b:76:4e:62:8c:ce:da:5d:a4:44:2a:25:2f:b8:1f:ef:
06:e6:42:7f:55:d0:31:dc:9e:cd:c6:c9:1b:ef:b5:03:3c:bb:
1b:1f:30:b5:4c:08:a7:9a:0c:8e:0b:6b:65:71:9e:ef:39:0d:
5c:e1:45:52:d1:29:b1:d0:1b:ce:00:40:d2:16:5c:03:54:aa:
a8:e7:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:36:11 2026 by rpki-client