Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier: hdeoaoy4lQDt69AAWWU1s22i/QQq7SwjuFj41jnGzsU=
Subject key identifier: 0C:05:5B:78:3D:6B:C2:42:6E:AB:E2:7A:00:63:0D:EB:AE:A5:C7:2F
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial: 01A17D05B810F78BD24685E4A32A80FCBE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number: 090B
Signing time: Tue 27 Oct 2026 11:01:29 +0000
Manifest this update: Tue 27 Oct 2026 11:01:29 +0000
Manifest next update: Wed 28 Oct 2026 11:01:29 +0000
Files and hashes: 1: HdU5cxfsxlP0K4CqDFvCNnZmq28.roa (hash: xbyeSFIpEueYvgfQTG6iJ17W5Phz2i4KFR7f+DJwSVQ=)
2: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: 0ZGypeMXHmEnxOG1sFDPSOSCKVlcMgjVrYZ2UoxlV8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:b8:10:f7:8b:d2:46:85:e4:a3:2a:80:fc:be:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Validity
Not Before: Oct 27 11:01:29 2026 GMT
Not After : Oct 28 11:01:29 2026 GMT
Subject: CN=0c055b783d6bc2426eabe27a00630debaea5c72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:45:62:85:64:51:b0:d3:5a:b3:c8:72:f6:
44:93:dc:66:3c:8f:ed:df:28:76:72:a4:e5:b6:e3:
3b:32:81:54:b1:69:de:b0:f9:33:36:52:35:60:f1:
31:35:b7:e8:cf:ba:6e:e6:aa:56:fe:7d:ef:2f:9d:
79:e1:71:48:98:82:3d:64:20:2c:57:f4:cf:a1:9b:
f4:2c:4a:90:41:07:da:3d:f4:3e:9d:1e:70:5b:15:
3d:03:2c:1c:3b:2f:63:70:4b:84:0f:ab:99:a5:cf:
9a:d4:66:2d:b3:e4:b0:29:f7:55:9f:ab:ab:5c:37:
97:70:21:23:54:3f:09:cf:29:ea:43:f3:62:ce:ea:
7f:00:16:5d:f1:b1:85:c7:45:8c:34:1d:cc:d2:e8:
2e:a4:cd:54:36:45:5f:d4:d1:90:dd:00:ed:cc:f7:
6e:bc:62:69:1f:cf:11:c7:b4:b5:d1:06:a7:8a:7b:
4f:12:b7:4a:72:a2:c1:e0:00:a3:a2:52:30:8b:9a:
6c:b2:31:30:53:9b:30:c1:7c:fa:02:a3:b6:ea:04:
bc:c3:d6:f6:42:27:f7:96:49:ea:98:bd:5d:17:b6:
f1:69:48:99:8d:d7:30:63:1d:0a:70:a0:fc:fb:34:
69:ab:eb:ec:41:64:8b:76:0a:ab:cb:1d:a4:26:03:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:05:5B:78:3D:6B:C2:42:6E:AB:E2:7A:00:63:0D:EB:AE:A5:C7:2F
X509v3 Authority Key Identifier:
keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:be:1e:ff:fd:a3:66:3e:0c:4b:2a:22:07:99:b2:54:bf:51:
1a:9c:92:e2:23:ff:d2:6a:fb:c3:f5:22:0a:28:2a:c9:4d:67:
e3:86:6e:cb:f9:9d:d8:cd:06:a5:00:1d:aa:0e:81:4e:fe:39:
32:b6:ac:28:79:d1:9a:5b:f6:b7:fe:f6:ba:e7:d5:22:7f:be:
a9:90:fa:a7:86:0a:74:17:e5:bc:65:1c:5b:13:d5:69:74:60:
24:ad:d3:83:87:d6:4e:a1:2f:b8:f9:af:73:7c:e4:76:ad:81:
44:71:75:b9:31:58:b1:02:a8:82:fc:c9:8b:7f:ac:4f:4e:71:
4a:af:1f:0d:ac:0f:d3:11:ff:ca:ea:f2:c2:6c:a5:aa:56:49:
86:d0:1c:53:bd:66:fe:0d:8b:c3:54:ce:cd:10:9a:5d:cc:79:
a9:e1:d5:1f:ad:79:4d:62:0e:53:80:c4:f9:da:1e:04:fa:72:
98:a9:ed:70:8b:97:6c:3b:22:17:64:02:87:83:c3:06:84:59:
29:d7:4f:71:85:11:e7:ed:89:8a:21:39:af:52:2d:87:c5:5d:
be:93:7b:07:4b:55:4e:a3:d7:b3:8b:51:fc:5e:b2:16:ce:39:
45:eb:22:42:44:0f:c0:fd:ba:66:35:4f:0f:a5:d1:05:4f:65:
51:f2:d3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:39:36 2026 by rpki-client