Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: h3rYV+D94rw3S/2uMC1WBaqYeHTJ10+ZwMhVzHAi0Co=
Subject key identifier: 66:29:7A:4E:C5:7B:14:67:7D:08:B6:D9:53:69:05:96:38:2B:C8:5D
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 01A18C4151586CD6071688DEBF04CEB9F105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 1013
Signing time: Fri 30 Oct 2026 10:00:53 +0000
Manifest this update: Fri 30 Oct 2026 10:00:53 +0000
Manifest next update: Sat 31 Oct 2026 10:00:53 +0000
Files and hashes: 1: C_BG8Ml6dP3iR096R9X-fJO1n7E.roa (hash: 3QfX9jxSSnvJJan/fsFYYDVyLrGyvJpCwPAUh/Poma4=)
2: UaQ-s38Z57ecJNUbRdVAzUGv8GA.roa (hash: 4xw5dIxtZo++aDtcmN5R2tGAogLl64Jnmc82+4RR2Mo=)
3: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: aIznmoQ7mVjr6G14c89f7v0tMv9I0+iqVTz1B/fhUtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:51:58:6c:d6:07:16:88:de:bf:04:ce:b9:f1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Oct 30 10:00:53 2026 GMT
Not After : Oct 31 10:00:53 2026 GMT
Subject: CN=66297a4ec57b14677d08b6d953690596382bc85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:96:95:61:7c:87:0c:35:7b:b1:fc:b5:16:
b9:64:bc:1c:5f:87:b1:93:ad:67:fe:2f:ae:e3:c8:
64:54:67:62:3b:d4:3d:f5:4f:71:c9:fe:29:ef:6e:
72:c8:d7:e2:44:a4:a7:06:3e:2b:91:89:5f:6c:d1:
f0:09:19:66:0a:17:ac:26:5d:05:af:45:bc:88:9c:
df:7f:63:e6:24:93:f3:48:90:f9:93:7a:b7:c6:e6:
82:e9:28:b5:fa:e2:55:51:f9:de:b3:31:7d:7a:ec:
4e:1f:0c:5e:c2:5c:5b:a5:31:c1:05:af:07:11:87:
d6:90:29:79:40:50:9a:b4:5a:87:83:aa:9c:5c:f8:
01:10:76:01:21:bc:12:28:36:56:18:e1:f9:82:3d:
97:99:fc:40:41:c3:57:ff:60:51:52:93:ee:a5:ed:
45:46:15:e9:56:ad:5e:5f:5f:7a:d7:90:8f:63:7e:
68:1a:24:5f:ad:d7:84:ba:bd:31:34:48:0c:7f:ed:
2a:56:11:c6:6f:70:34:02:cb:5b:4e:37:b4:7a:d4:
c5:de:1f:61:1b:6e:cd:00:c1:53:43:4e:41:22:28:
52:f8:75:3f:dd:ef:31:ac:a6:89:0f:43:f7:d9:23:
f4:d9:a3:df:53:bf:73:76:65:39:f7:84:5a:b4:81:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:29:7A:4E:C5:7B:14:67:7D:08:B6:D9:53:69:05:96:38:2B:C8:5D
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b0:f1:d0:8a:aa:32:99:f0:2c:8d:ef:b7:e7:5e:f8:87:62:
63:75:39:4e:2d:5a:01:6b:8f:f6:11:c2:2c:17:79:18:7e:18:
0e:de:fd:98:5d:2d:61:31:32:81:9e:0b:b6:cd:db:6b:bc:f5:
78:4b:7a:3c:93:f8:d4:43:27:77:ef:e9:74:55:37:de:8b:cd:
ab:dd:6f:32:dd:c6:f5:26:4b:93:62:e9:4b:5e:62:40:a3:d9:
89:e7:51:e5:2a:91:7c:bb:9f:7a:46:53:28:dd:7e:b4:6d:23:
c2:ee:71:2a:44:b5:71:99:3a:b3:1b:08:73:ef:3f:55:d9:be:
2f:55:99:3c:20:de:3b:3f:ac:d4:dc:29:dd:48:0b:65:07:c2:
97:99:2c:a4:dc:e8:6f:4b:63:bf:d0:71:26:ea:83:ce:a5:09:
17:b7:59:00:9f:7e:e2:8c:2c:f3:f4:02:44:f9:5c:8d:98:cb:
5b:f8:4a:1b:60:fc:56:0a:6f:a3:0f:6b:51:02:05:42:86:9c:
9d:1d:2b:f1:c3:3d:91:c3:48:c3:be:e6:1c:ed:e0:c4:86:a9:
23:65:8e:79:4d:e2:18:46:7c:9d:e6:a3:3c:23:ff:12:c2:d6:
a0:95:ab:cf:6d:68:62:8e:99:4d:b1:91:4d:1d:8a:5b:2e:d2:
27:48:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:24:40 2026 by rpki-client