Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier: 6T5QmrNW/rd9MkCTg3N0iF+WN2wdBbY288qcgEkNUXU=
Subject key identifier: F2:A6:07:A7:74:A3:22:AE:78:D9:41:5C:10:3D:C7:08:BE:E8:49:4B
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 01A1A6386922F667392E2D6F6DA3122D3C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number: 10B4
Signing time: Wed 04 Nov 2026 11:01:17 +0000
Manifest this update: Wed 04 Nov 2026 11:01:17 +0000
Manifest next update: Thu 05 Nov 2026 11:01:17 +0000
Files and hashes: 1: 1j-0fRD2UKFFOwRpmh3BdgzS-KY.roa (hash: J/OpGEjDOcAf1NYGQDPN+Up9rV3l4EiqrJmyP7OZ814=)
2: 1jeMDJUiXFwN8iyBiVBPKoxXVXs.roa (hash: AMsBQ6qY2ffhJac7OKTZiKgzqFTd8W61KP5VxcegYfI=)
3: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=)
4: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=)
5: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=)
6: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=)
7: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: /P4Oh+GhSZSJ0gfyN2lSa+vpSYbiyOUJhdN7V41YK3g=)
8: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:38:69:22:f6:67:39:2e:2d:6f:6d:a3:12:2d:3c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Nov 4 11:01:17 2026 GMT
Not After : Nov 5 11:01:17 2026 GMT
Subject: CN=f2a607a774a322ae78d9415c103dc708bee8494b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:96:07:f9:a2:88:47:9e:cc:a5:56:1c:59:
3a:ba:03:37:06:e4:6f:23:ce:a7:ba:0a:c9:81:76:
ef:b7:ae:ab:f0:f7:4b:6a:4b:80:67:8e:cf:f8:87:
50:b1:2d:93:68:82:75:87:d3:13:97:26:60:f3:ae:
12:f7:86:ca:76:c2:e8:d1:e5:eb:eb:39:f8:69:36:
21:d7:67:0e:7e:3a:8c:36:cb:06:ca:8c:d7:74:45:
87:cb:1a:ef:5b:1e:bc:ef:8e:71:dc:dd:91:de:5e:
0b:c5:42:42:95:15:a8:5a:da:fe:b2:f6:ed:94:ee:
0c:23:ab:8f:63:db:f8:15:79:e2:54:77:e1:30:28:
d7:0c:2d:54:2f:d6:d9:49:9d:73:be:7c:39:7b:14:
8e:42:68:51:8e:24:f1:94:2f:f7:b4:21:09:84:55:
14:1a:d8:74:00:30:ee:0e:53:68:7c:50:4b:e6:63:
8a:07:eb:5b:78:cd:16:e1:57:45:9b:1d:87:3e:6b:
1d:51:b5:77:ff:fb:59:27:34:2e:15:4f:5c:c0:b7:
22:f5:fa:2e:4a:19:01:5a:11:d1:48:ba:90:0c:15:
33:c5:72:72:a0:ca:b2:66:cb:4b:06:34:7a:3d:d8:
ac:d5:b5:7e:44:c9:03:74:4e:a5:d0:80:35:a6:1b:
c5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A6:07:A7:74:A3:22:AE:78:D9:41:5C:10:3D:C7:08:BE:E8:49:4B
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9f:9b:3c:67:09:ad:11:9a:2a:2c:05:ca:aa:e9:35:d8:13:
4e:e4:f7:5e:1f:32:95:86:61:00:df:27:b9:ac:95:b6:e0:00:
8e:fb:4b:9e:2c:f8:2a:c4:c4:5d:68:cc:aa:0d:53:1b:e5:95:
4c:53:5c:0f:f3:ea:8a:c0:d3:67:38:6e:73:28:31:d3:f6:5a:
b0:bf:5e:62:29:68:06:72:03:44:0a:7c:09:e3:6b:ed:0d:3b:
6d:3b:e3:93:1d:da:52:0e:5a:f5:0e:e5:f5:f5:eb:4d:f7:94:
3d:2a:84:c7:66:01:5f:04:a4:b4:37:86:4f:5a:6b:65:39:11:
23:3c:f3:2c:f6:af:fc:4b:91:30:d0:71:38:7a:a8:0b:a1:b8:
e5:6e:84:da:5d:b1:1d:55:a4:53:80:37:c7:02:69:13:97:73:
e0:91:81:86:8b:c7:7e:41:2e:26:a1:7f:5b:40:d2:0e:83:66:
97:3b:d6:96:fa:d1:11:05:78:05:24:5e:d9:3f:a1:e9:af:25:
f4:1c:fa:c9:76:46:5d:75:38:d6:5c:db:e7:bc:4a:6d:99:ca:
2b:aa:3f:7d:be:10:53:e7:94:0c:75:82:6e:cc:11:3b:49:7f:
e3:39:f1:29:78:c0:79:8c:ae:33:9b:27:58:e3:0e:d4:fd:36:
2d:bf:4b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 23:02:28 2026 by rpki-client