Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: /JDK/Y7FWNBnsF2uBNuszRN9KKcUEWbXb+lCJZrjCp0=
Subject key identifier: 04:BA:B0:88:BD:1A:4D:F6:81:6E:84:01:D8:0E:63:67:CF:16:F8:14
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 01A124D455B0C23332491EBD4FED6A27B78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 1A98
Signing time: Sat 10 Oct 2026 08:00:57 +0000
Manifest this update: Sat 10 Oct 2026 08:00:57 +0000
Manifest next update: Sun 11 Oct 2026 08:00:57 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: 09CqWLjfXqNVFq43Cn5591AnNIpErNPKaPP4MG6jEHE=)
2: nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa (hash: WwxgQJEoxT9RlD+HkKWEjQjejeBr0IIFvMv1CfM5j4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:55:b0:c2:33:32:49:1e:bd:4f:ed:6a:27:b7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Oct 10 08:00:57 2026 GMT
Not After : Oct 11 08:00:57 2026 GMT
Subject: CN=04bab088bd1a4df6816e8401d80e6367cf16f814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bc:ab:30:ce:a1:11:5a:d5:50:f8:db:62:33:
f1:e8:93:c7:83:06:20:d6:7d:31:a2:a5:08:1d:4d:
0e:6c:b2:a6:fb:29:4a:83:d5:bb:1d:07:75:fb:7a:
18:29:2a:21:87:2a:fe:94:5a:79:c6:9c:43:62:3b:
1c:d3:fb:10:ec:c4:ab:bc:89:93:94:06:cc:97:a7:
d6:99:e1:26:41:69:f3:c2:59:53:ef:e5:3b:ef:e2:
c2:88:51:ca:80:65:e4:a4:14:fb:69:e6:7a:35:29:
06:f3:77:36:52:df:96:f1:3d:a7:14:64:b8:da:35:
d3:0f:3d:3d:d3:46:83:6b:af:7c:c7:3f:fe:d6:e3:
f7:89:df:cc:8b:f6:eb:f0:b1:49:3a:c6:88:83:0c:
fd:cb:e6:8f:bd:77:25:c7:e6:9e:90:cf:7f:b7:f5:
b4:a0:13:f0:b3:11:27:e2:3a:4a:6f:57:24:f0:03:
57:3d:a3:28:a8:05:9b:86:96:4c:44:c6:da:19:6e:
49:c2:30:6d:54:fc:04:45:7a:21:43:da:53:2c:93:
27:17:85:b9:c4:93:4f:c7:d5:0b:53:68:3a:5c:07:
95:77:9e:fd:18:0b:82:6e:f6:31:c7:5a:04:23:04:
56:fc:70:dd:b3:aa:0a:02:f3:4a:d1:81:94:b3:0d:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BA:B0:88:BD:1A:4D:F6:81:6E:84:01:D8:0E:63:67:CF:16:F8:14
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d5:09:3a:7d:db:08:93:5e:ac:ae:79:e3:fe:4b:f5:13:9b:
82:6a:c7:70:6f:fb:54:06:47:03:8f:bb:74:3c:f9:31:7a:b6:
a7:12:55:67:c4:1e:7d:4f:76:00:93:b6:cd:45:a6:bc:16:63:
0f:52:7e:40:c5:b5:86:bc:6b:bb:69:d6:3a:5c:ea:b6:18:26:
5f:4f:39:35:7a:78:ba:d7:13:91:e3:b2:62:19:4e:c4:39:2d:
bc:50:e9:51:32:8f:fb:46:59:80:20:18:72:10:ba:ae:a3:9a:
82:fc:55:52:65:dc:3e:15:89:00:68:50:14:0d:8f:e1:d5:a6:
21:2e:b4:ad:33:08:de:f2:d0:06:cb:6c:9c:86:0c:9b:61:cd:
c8:fe:56:da:e3:46:bb:20:db:37:c1:8e:90:81:a5:4e:3b:c8:
93:8a:98:3d:aa:55:6e:b3:f5:c4:02:68:f2:35:ad:60:67:df:
ce:1e:40:fb:86:8e:35:e5:d7:2a:be:c0:63:19:24:21:34:c3:
9e:35:3d:ce:44:a6:cc:d5:ea:4d:30:49:05:f7:d0:0d:a6:fd:
45:d7:4c:6a:d0:cc:54:17:94:d5:ba:6f:eb:0c:5b:45:27:17:
26:34:ba:96:e6:b9:17:d0:ce:eb:67:66:7b:11:a9:30:08:54:
95:f8:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:38:36 2026 by rpki-client