Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: b2TOf2gWIAQZYI2UbWWsfgFzz1yzEzVdTr+jTkm019A=
Subject key identifier: EA:82:33:E5:BD:CB:7A:AA:56:5F:F1:46:A0:43:E7:0B:9B:6C:E6:85
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 01A09BB695F2B1543B4E12D48BDD088652A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 08F3
Signing time: Sun 13 Sep 2026 17:00:29 +0000
Manifest this update: Sun 13 Sep 2026 17:00:29 +0000
Manifest next update: Mon 14 Sep 2026 17:00:29 +0000
Files and hashes: 1: 4Da2j7Bi2NbmfPUpK3LZNaUxeKw.roa (hash: sVS+CgceR72IsZG8/n9nxIxVExnNtdYxPtu3DwmNmPc=)
2: 6A3jyIMKHg4wFV2SvrfE3nKtTQo.roa (hash: W2pcnpJGAQePhmM2PwP+0VJq/IVZmkSfxPewBfpKTAk=)
3: nzg1Wy5iDrgZN6cFhF2wIXzEoL4.roa (hash: 7c3WobtnQbFwAsfBBLzCJIOIEFbRalJlUeFDgCh2yaA=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: nKZ87o5M9ejz+CwfeIV3iGvA1OLNyIluUFdPuGC77VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9b:b6:95:f2:b1:54:3b:4e:12:d4:8b:dd:08:86:52:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Sep 13 17:00:29 2026 GMT
Not After : Sep 14 17:00:29 2026 GMT
Subject: CN=ea8233e5bdcb7aaa565ff146a043e70b9b6ce685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:82:97:20:b0:a0:dc:b4:60:8a:c6:9c:0f:
9f:ce:13:ee:e1:00:37:aa:05:a7:2b:10:c2:f2:0d:
4b:3e:6d:d9:7f:1a:40:2f:53:f5:e7:49:db:ef:70:
af:d2:0b:0f:ff:a7:64:a6:9f:58:88:cc:9a:fe:a1:
d6:95:d8:e1:91:7e:f3:15:0d:15:10:84:43:c2:ea:
16:b7:8c:1f:51:4d:be:4e:7d:0b:a1:84:51:47:90:
3c:b9:0d:42:e7:3b:af:b2:1a:63:84:a3:c3:5f:35:
25:55:d3:41:fd:58:a5:3d:dc:a3:23:3e:e6:75:42:
cf:79:22:f5:5c:54:8e:e4:ac:cd:0b:03:38:b3:f4:
35:35:e4:b8:8b:03:39:29:d8:78:e0:fe:16:4b:0e:
6a:b4:40:63:b7:25:28:85:1c:26:50:46:39:9c:56:
89:65:a1:97:bb:7e:92:cf:cf:ae:3f:fb:80:a5:a8:
25:10:ed:28:57:34:3a:74:95:48:b6:76:09:50:f4:
f2:fb:d7:46:72:ee:42:fe:8d:84:f1:96:f2:df:14:
65:bf:3a:64:12:fb:d6:90:cd:3f:d7:36:49:2a:68:
2d:e8:1e:d3:d2:16:d2:da:de:09:72:fd:dd:eb:21:
21:fd:47:a3:a2:05:4e:d8:23:01:00:ca:5f:00:7e:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:33:E5:BD:CB:7A:AA:56:5F:F1:46:A0:43:E7:0B:9B:6C:E6:85
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ae:ea:b2:35:f8:6e:51:c4:7d:33:80:21:1c:69:ae:5e:1e:
1b:e1:55:cb:01:33:bf:87:2d:f6:c3:67:a8:50:74:c4:8f:c8:
4c:57:ed:80:b6:a5:e5:c0:b1:e8:d2:13:09:37:be:57:39:cd:
a1:37:6a:33:70:8a:82:a8:d9:e5:5c:2c:17:c5:b6:be:51:fa:
54:b8:7e:8e:c8:4f:93:40:b5:11:85:7b:a6:98:1e:b3:b0:5b:
9a:e9:4c:78:42:ca:63:cc:e8:5c:4e:f2:f7:32:53:18:07:ba:
d8:c0:ec:cb:ad:8b:2d:c1:65:b7:b7:cc:7c:16:cf:ca:93:55:
8b:5c:87:76:8b:35:77:6b:91:36:70:03:3c:0a:58:63:f9:ee:
7e:4d:e6:5e:68:3b:18:4a:d2:30:f5:32:62:b7:1f:a4:90:18:
69:f1:a8:c1:93:ae:d3:ba:d9:f6:f7:ca:20:a9:0e:39:4e:06:
20:a5:0d:b6:2c:9c:7a:46:62:84:2e:01:42:d1:1f:35:ff:6e:
72:69:c6:ec:a8:a1:5d:35:9e:11:85:1d:e8:d1:e7:94:46:e1:
a9:c2:ae:e5:0e:66:72:0c:58:c8:9a:73:f4:1a:5d:ec:7b:39:
14:5b:4e:44:ce:40:22:f3:6e:d7:d9:dc:1d:04:15:86:31:b7:
d1:95:cd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:42:55 2026 by rpki-client