Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
File: oCbLucfoHNxJ0b6zRtutyR80rsE.mft (raw, json)
Hash identifier: hcSrqkZpV04lf/1bsdkjMeSfu8fJnvlmTurG7cjKhg8=
Subject key identifier: 9A:4F:29:10:71:C8:09:69:1C:FA:ED:71:42:D4:E6:D3:F0:DB:70:BA
Authority key identifier: A0:26:CB:B9:C7:E8:1C:DC:49:D1:BE:B3:46:DB:AD:C9:1F:34:AE:C1
Certificate issuer: /CN=a026cbb9c7e81cdc49d1beb346dbadc91f34aec1
Certificate serial: 01A10DDE6134BD9DD5BD0A452C0B011CAB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
Manifest number: 0105
Signing time: Mon 05 Oct 2026 21:00:40 +0000
Manifest this update: Mon 05 Oct 2026 21:00:40 +0000
Manifest next update: Tue 06 Oct 2026 21:00:40 +0000
Files and hashes: 1: jKeaW7g3-vwDVoHOZK2KpCN1sWA.roa (hash: sqHWrvNe0MvxI2kDDh6irgL9TZbFavXwZmxBezSbKWU=)
2: oCbLucfoHNxJ0b6zRtutyR80rsE.crl (hash: zLsFazoKtQtnw0DIy+WUH3Q5Tj5SKCOrQKm5s4FUI4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:de:61:34:bd:9d:d5:bd:0a:45:2c:0b:01:1c:ab:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a026cbb9c7e81cdc49d1beb346dbadc91f34aec1
Validity
Not Before: Oct 5 21:00:40 2026 GMT
Not After : Oct 6 21:00:40 2026 GMT
Subject: CN=9a4f291071c809691cfaed7142d4e6d3f0db70ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:e2:4d:ff:00:e3:ab:62:35:fa:a9:12:86:
e3:9e:89:f4:8e:01:51:29:d1:67:60:d3:04:d0:36:
84:fd:52:dc:21:d3:04:0a:4c:e2:37:ed:56:34:5f:
eb:53:f1:ab:af:52:c7:5b:d7:39:63:50:54:b1:91:
c3:43:24:88:40:2f:49:e6:ad:ec:1b:9a:89:4d:65:
e4:d1:84:27:ff:ae:5a:87:89:76:70:3e:ab:39:a4:
67:c4:94:ea:fc:ae:9d:71:ec:dd:dd:63:1e:41:ca:
e2:07:58:07:cf:8c:5c:92:c7:38:6d:8d:19:24:92:
a3:06:59:2f:cd:99:cc:80:7c:c7:79:b2:bb:15:d3:
bb:f8:d7:fb:a7:88:2b:f7:88:c2:39:e0:b1:74:2c:
41:ad:18:9a:11:17:cd:c2:ae:08:4e:99:ec:a7:76:
09:8f:ef:8f:3f:dc:7c:6c:f1:51:47:9c:f5:80:c3:
f6:d3:48:f3:a1:d1:88:50:0b:d1:31:37:ac:10:f2:
02:1e:ed:c7:21:66:60:12:64:e2:8e:2b:ef:ca:a7:
06:63:d1:0c:83:5d:37:2c:78:cd:a1:47:97:94:31:
51:f7:c7:5e:b2:62:0b:cc:38:54:67:ca:c1:25:49:
6b:45:3b:07:64:e2:74:93:4d:e5:8a:d0:50:b1:2f:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4F:29:10:71:C8:09:69:1C:FA:ED:71:42:D4:E6:D3:F0:DB:70:BA
X509v3 Authority Key Identifier:
keyid:A0:26:CB:B9:C7:E8:1C:DC:49:D1:BE:B3:46:DB:AD:C9:1F:34:AE:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:57:e0:5d:4a:7e:01:5d:15:93:60:b0:b8:66:54:89:d8:eb:
3c:73:49:d6:6f:99:77:3f:3f:69:12:9e:ee:cf:ca:fb:6c:41:
4a:65:08:a6:f1:aa:d3:ba:34:aa:4e:c4:15:81:a8:77:54:ef:
3b:39:04:44:5a:17:6f:32:ea:e3:39:af:11:be:aa:bf:9c:b5:
e9:33:fb:70:21:76:53:48:bd:41:02:42:45:b0:03:98:30:9c:
cd:89:dc:00:08:ac:8b:34:95:ca:96:43:cc:92:bd:ea:00:a4:
3f:5e:fa:1d:18:9b:b4:c5:a9:d2:2c:46:13:6f:78:8c:4e:d2:
81:e5:34:37:73:82:c5:d8:f4:89:70:6e:61:f3:42:b6:53:1c:
1d:94:5d:ea:d0:ed:10:a8:2d:ca:24:e3:ef:76:bf:4a:0b:9f:
74:58:9a:dc:21:4b:85:8f:40:53:fe:e0:9f:bf:2b:c2:42:72:
1e:90:6f:14:06:fb:fb:a1:80:6e:4b:32:c5:ce:9e:3b:51:21:
c9:7d:f7:79:c3:24:0e:b6:94:14:d9:37:46:58:4b:5b:a1:c8:
db:e8:43:5f:c8:06:f5:f6:70:c8:b4:a3:de:3c:d7:56:04:bc:
c7:68:4a:b3:f9:53:a1:1f:a2:22:0e:4d:86:fd:0d:ed:2c:49:
27:1c:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:27:19 2026 by rpki-client