Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: 6tCyxGT6+MPobOVKWJ5Ur48q664+YjFSAEzDnk8rvaU=
Subject key identifier: C3:15:AC:B1:83:BB:27:3F:EE:13:F0:90:99:94:DA:FC:9A:0E:D2:99
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 01A1867612764846DEC7CB969E442365F3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 063C
Signing time: Thu 29 Oct 2026 07:00:47 +0000
Manifest this update: Thu 29 Oct 2026 07:00:47 +0000
Manifest next update: Fri 30 Oct 2026 07:00:47 +0000
Files and hashes: 1: Krz6KcFKb_S-pinpl1x9zVxsbrg.roa (hash: tP+LpsElZ/mStZjBLNk0qf3JDfSiqb7wOaoXCtJpOOQ=)
2: UQQQAnMXMhAUnxCtm4H_SKzUiXQ.roa (hash: w436XA6bhzYAKb0YTHY/hgisvyWyabf0S3on+b0DcdY=)
3: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: 6LbTvX7Yl3npFxDSKXYhslOpvHlKqik0G3NI0eHRzWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:12:76:48:46:de:c7:cb:96:9e:44:23:65:f3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Oct 29 07:00:47 2026 GMT
Not After : Oct 30 07:00:47 2026 GMT
Subject: CN=c315acb183bb273fee13f0909994dafc9a0ed299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:78:d3:e2:83:f4:63:e0:28:a6:a3:50:48:
0e:17:8b:a3:46:fe:30:9f:46:85:1d:06:2a:80:fb:
98:0c:c2:16:b9:ee:2a:dc:f8:50:78:58:09:0b:57:
01:46:c2:dd:2b:22:03:60:a6:df:16:95:88:ad:d9:
a4:b8:2f:97:56:bb:13:97:46:7b:04:56:dc:24:3a:
6f:94:5a:b7:1b:3a:f5:65:35:a8:4f:a1:5a:db:a0:
9d:d6:b3:fc:94:50:a6:c7:5f:93:4f:44:3c:85:f8:
32:8f:ee:b2:b1:fe:ca:37:63:86:11:d2:47:d8:7d:
04:22:f0:5e:c5:75:ab:05:87:ed:44:d8:e8:b3:fa:
a2:09:dc:91:35:c5:19:e9:c2:6b:a4:e0:39:a0:f7:
9f:e7:8e:25:bb:5f:1b:69:85:9c:9e:96:31:5c:77:
fb:2e:90:f2:8c:c7:72:1f:86:f2:26:d1:8c:c2:5f:
a1:bb:34:63:ec:8d:ee:73:a2:9c:a8:6e:b6:5c:fd:
d3:31:5b:95:c4:92:8c:db:79:0e:87:a2:97:d8:f4:
e1:b1:55:d9:ad:2b:44:f9:0e:d3:d8:0d:ac:be:1f:
98:0a:71:95:49:c4:2f:1b:79:28:01:b4:e8:e2:74:
c1:35:85:00:6c:ad:88:3a:f7:8e:49:84:91:ec:c7:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:15:AC:B1:83:BB:27:3F:EE:13:F0:90:99:94:DA:FC:9A:0E:D2:99
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0e:ce:46:5b:ec:be:64:94:5f:c6:24:4d:d0:7d:27:6b:8c:
5a:bf:4c:b3:55:0c:9c:ba:84:44:12:97:1d:6e:8f:78:fb:fb:
32:f4:05:9e:49:60:ab:9e:a8:ee:36:43:3d:71:a0:af:5b:6c:
09:f7:d7:d3:02:ec:14:89:f9:a2:65:9b:ef:39:81:6e:a6:e7:
da:4e:41:c0:20:80:1a:bb:65:6c:7b:64:56:5f:97:26:6d:44:
d4:d1:8f:c6:c4:a6:e4:47:f3:dc:d1:3d:e3:61:5f:22:18:e9:
e7:45:43:9d:3f:d2:d6:8c:48:3c:15:e9:8f:b9:7c:41:1b:04:
68:3a:2e:18:2c:6d:dc:29:66:d6:75:bd:26:ea:2c:af:05:55:
e1:8d:2c:58:a9:f5:80:77:b7:53:93:6c:df:d4:9b:54:aa:a7:
a7:92:c6:b0:b5:d4:95:31:9f:da:77:16:68:0e:c6:05:5f:a6:
99:9d:5c:e4:c4:15:b0:5c:c8:7f:87:b2:83:ab:96:d1:86:59:
84:87:12:7d:33:f3:0f:ce:72:0b:d1:e8:86:06:2e:07:d2:11:
c6:0c:f8:0f:5e:29:c3:f1:68:65:85:c7:49:48:7c:86:2a:c9:
88:cf:fa:80:ed:33:0f:a6:bd:03:df:13:36:ec:c3:cf:66:56:
4c:e5:34:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:48:17 2026 by rpki-client