Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier: Wxudr/UvLNs6EJbmmqgJy0gAHIsjiWrfnTB2N7/96rs=
Subject key identifier: 4A:FC:65:AD:C7:2F:0C:7B:78:00:0E:96:5B:4A:44:59:77:CC:AB:63
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 01A0B4D1B906B100E080FDCA1197FAC709DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number: 1037
Signing time: Fri 18 Sep 2026 14:00:38 +0000
Manifest this update: Fri 18 Sep 2026 14:00:38 +0000
Manifest next update: Sat 19 Sep 2026 14:00:38 +0000
Files and hashes: 1: 1j-0fRD2UKFFOwRpmh3BdgzS-KY.roa (hash: J/OpGEjDOcAf1NYGQDPN+Up9rV3l4EiqrJmyP7OZ814=)
2: 1jeMDJUiXFwN8iyBiVBPKoxXVXs.roa (hash: AMsBQ6qY2ffhJac7OKTZiKgzqFTd8W61KP5VxcegYfI=)
3: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=)
4: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=)
5: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=)
6: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=)
7: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: l7aACSX7GWZaiDp7hWtzyalJnbzCG4BCWeLy4wzd79w=)
8: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:d1:b9:06:b1:00:e0:80:fd:ca:11:97:fa:c7:09:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Sep 18 14:00:38 2026 GMT
Not After : Sep 19 14:00:38 2026 GMT
Subject: CN=4afc65adc72f0c7b78000e965b4a445977ccab63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:da:6b:ee:f5:1c:db:05:29:81:0d:8a:f8:
07:5a:81:ad:7a:9e:b7:16:d9:53:44:04:a7:51:0f:
2f:b2:fd:7f:24:f5:2f:86:e3:d8:fd:66:20:25:64:
3f:06:42:1e:ec:54:80:5b:11:7a:2d:ff:1b:83:b6:
ef:70:48:75:c0:27:25:5b:c0:44:2f:62:d6:ef:44:
6d:9c:aa:f7:60:30:e0:d2:26:47:1a:fc:dc:f2:ae:
ec:a0:63:48:92:42:6d:33:62:2d:46:76:7b:df:95:
3f:8f:3f:41:7a:a5:69:6d:97:97:27:cf:74:29:66:
f5:30:62:7b:cf:20:c5:16:bf:1a:73:e2:18:b9:f5:
2e:f2:ae:05:5d:e4:6a:02:45:80:23:e8:c7:9d:24:
eb:dd:96:c9:59:c7:92:2c:30:c3:56:32:58:00:7d:
fb:43:fb:c6:f4:cb:45:79:40:57:82:42:99:c2:c3:
f5:1c:77:42:50:f1:4d:a0:b9:fd:a3:a6:11:7c:3e:
a8:bf:fe:d9:5a:82:fc:f1:41:ec:a8:00:93:5f:e2:
a5:ac:99:6a:9d:af:6d:83:9d:84:6d:96:1f:09:91:
fb:ab:ec:59:31:c9:0d:97:de:3a:2a:56:90:d1:95:
e2:84:e8:bb:07:4a:d7:5b:47:ef:43:98:f2:02:31:
1e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FC:65:AD:C7:2F:0C:7B:78:00:0E:96:5B:4A:44:59:77:CC:AB:63
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3f:8f:49:3c:25:0c:b2:a3:ee:f9:a7:71:9a:12:01:ee:3e:
65:0c:6b:c0:99:a8:a0:ba:4b:9b:5b:d2:01:9c:c0:d3:89:a6:
72:1e:7b:14:2a:1f:64:68:ed:4f:83:4d:0a:5e:6a:00:c3:e6:
8f:7a:01:11:6b:f4:6d:fd:82:05:9e:1a:6c:3e:62:fb:f6:3e:
ae:3b:7a:c2:55:f7:66:f7:c9:23:af:25:88:74:ce:48:de:1e:
b8:6d:bf:8b:9f:53:77:77:a4:9c:33:bf:42:2a:d3:0a:5b:09:
56:a9:59:6c:f2:7a:7b:2b:32:36:48:89:88:52:78:4a:41:7f:
13:d5:c4:70:c9:15:41:77:b8:e8:85:19:54:6f:36:35:f4:9e:
85:93:8c:b4:55:c9:37:c6:e4:09:bc:d6:15:2c:f7:ca:5d:56:
79:6b:c0:47:ca:36:bd:a3:94:59:05:34:c1:37:93:f7:78:f4:
12:25:fa:50:4c:40:54:c8:c4:97:01:57:81:b9:97:c5:c1:61:
6e:57:0d:1c:d7:17:14:03:e5:70:08:10:71:e4:ee:8b:45:ea:
70:7b:52:19:82:fa:fa:a1:44:ae:e4:70:e3:58:77:0b:c2:64:
07:19:88:b9:8e:41:3e:39:f3:1f:6f:ef:d1:f2:c9:23:9d:6e:
8d:ca:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:07:46 2026 by rpki-client