Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
File: oCN2bGLetRKXFVcI7MtCHIsEeAo.mft (raw, json)
Hash identifier: z/iljF0l22l+pOA1Xques2xfc5Wzu6PNbYyyX2pfVcU=
Subject key identifier: 12:9F:1D:CA:B0:5D:6B:F5:F6:64:8B:D0:A5:CF:42:02:BD:B0:0B:56
Authority key identifier: A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
Certificate issuer: /CN=a023766c62deb51297155708eccb421c8b04780a
Certificate serial: 01A06EA7DD835C337CDB9713E8ED3C944709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
Manifest number: 178B
Signing time: Fri 04 Sep 2026 23:01:29 +0000
Manifest this update: Fri 04 Sep 2026 23:01:29 +0000
Manifest next update: Sat 05 Sep 2026 23:01:29 +0000
Files and hashes: 1: g0-HGh4bznaFgiFX5KCpF3Q8z70.roa (hash: kuqsXcay0qN76iKLs/AKqPrHvwfsG46t73MVLxZfYe0=)
2: oCN2bGLetRKXFVcI7MtCHIsEeAo.crl (hash: FCZQ1u4A4aZfIJ7jWTKRwuc2raw3/ADR9Suwg9Ikyxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:dd:83:5c:33:7c:db:97:13:e8:ed:3c:94:47:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a023766c62deb51297155708eccb421c8b04780a
Validity
Not Before: Sep 4 23:01:29 2026 GMT
Not After : Sep 5 23:01:29 2026 GMT
Subject: CN=129f1dcab05d6bf5f6648bd0a5cf4202bdb00b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:61:f3:1f:f0:28:a8:e9:20:59:73:80:d4:
e9:95:38:e4:f5:56:23:39:cd:27:70:55:8a:83:0b:
e1:22:35:20:6d:c9:c3:7d:bb:e7:1d:23:3e:bd:68:
3c:62:4d:a4:e5:92:bf:c5:78:63:a6:9f:ac:bc:d4:
1d:cc:c3:1c:5c:ad:9b:ee:97:e3:ac:b7:e3:30:23:
bf:37:eb:f7:15:0d:64:82:79:bf:49:9d:18:69:cf:
a9:9c:f3:49:29:66:59:c8:e5:01:00:15:a6:cb:fd:
27:a7:6f:8d:13:9d:67:95:75:eb:d3:5e:ee:16:0e:
12:28:40:13:58:f8:64:85:b2:62:c0:a0:b3:20:26:
38:75:19:d7:d1:7e:56:db:29:e5:b9:2d:87:74:fc:
00:22:24:8d:6e:18:a0:8c:a7:e0:2a:48:64:46:53:
7e:3b:86:80:14:92:b9:eb:01:97:8b:fd:69:fd:f5:
76:73:d6:75:69:6a:ac:dc:54:89:a2:cf:4e:67:e9:
1d:eb:27:59:b4:90:51:0c:72:72:dd:82:4d:5f:09:
9e:d5:dd:0f:73:cc:c1:b9:0e:60:14:eb:ed:f9:89:
77:d9:ed:1c:65:78:8d:ac:41:7d:6a:20:58:9e:d2:
15:2d:ba:e0:e8:82:c1:41:4b:72:29:10:e6:e2:28:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9F:1D:CA:B0:5D:6B:F5:F6:64:8B:D0:A5:CF:42:02:BD:B0:0B:56
X509v3 Authority Key Identifier:
keyid:A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:38:41:ab:65:07:37:1b:8b:ad:62:9f:a5:64:09:6f:2e:e1:
9d:cf:d9:11:65:c0:30:1d:59:f8:ad:fe:f8:b9:e2:33:bf:8e:
83:c0:c4:cd:a4:94:56:b8:b5:44:a5:d2:93:e5:a3:b1:e9:ec:
0c:49:1a:32:49:d4:28:53:b6:88:0b:4e:3f:89:fb:2b:de:29:
41:30:2d:83:dc:e3:7e:23:23:89:6d:ef:3d:89:4d:f1:36:52:
05:75:8a:d6:a9:2f:59:f6:1c:a5:fd:d1:73:59:bc:d7:8d:cf:
7d:b8:fa:98:b2:49:90:a5:75:ba:12:f4:04:68:bb:e1:20:0d:
74:35:c6:42:94:d2:ac:dd:bf:fa:7b:33:9a:c5:6d:93:70:81:
00:88:c8:8e:73:a1:c8:47:db:59:99:26:13:7f:cc:4e:58:15:
20:aa:20:90:9c:c5:de:2d:88:c9:80:06:82:df:e2:cf:1c:ac:
28:63:a8:71:53:cd:82:47:47:81:07:08:34:ad:cc:45:66:7c:
72:f6:df:0a:58:f4:fb:f5:cc:85:49:8c:ae:8a:b3:86:83:fe:
2e:6c:6d:26:2d:c0:d2:59:1e:14:0a:db:18:96:5d:6e:61:4d:
e5:cc:25:a9:91:9a:e1:d6:be:b1:6e:ee:19:a1:d7:15:10:ec:
cc:5a:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:43:58 2026 by rpki-client