Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
File: oCN2bGLetRKXFVcI7MtCHIsEeAo.mft (raw, json)
Hash identifier: bATlkpLUSeuNsAsa7mHcT6ioBG9tIacbinLLei4OTds=
Subject key identifier: 0B:6C:86:10:F8:F6:00:0D:DE:CC:42:51:5D:8F:D4:15:6F:B7:78:CF
Authority key identifier: A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
Certificate issuer: /CN=a023766c62deb51297155708eccb421c8b04780a
Certificate serial: 01A17B16B2EB4F3D41EEEC1AFB42115D75D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
Manifest number: 1816
Signing time: Tue 27 Oct 2026 02:00:47 +0000
Manifest this update: Tue 27 Oct 2026 02:00:47 +0000
Manifest next update: Wed 28 Oct 2026 02:00:47 +0000
Files and hashes: 1: g0-HGh4bznaFgiFX5KCpF3Q8z70.roa (hash: kuqsXcay0qN76iKLs/AKqPrHvwfsG46t73MVLxZfYe0=)
2: oCN2bGLetRKXFVcI7MtCHIsEeAo.crl (hash: 9/VgEqQYuWTc77fxN3G9hLGiWj8qOefAKLZP+Ty2QkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:b2:eb:4f:3d:41:ee:ec:1a:fb:42:11:5d:75:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a023766c62deb51297155708eccb421c8b04780a
Validity
Not Before: Oct 27 02:00:47 2026 GMT
Not After : Oct 28 02:00:47 2026 GMT
Subject: CN=0b6c8610f8f6000ddecc42515d8fd4156fb778cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:8b:4e:4a:7e:c7:ee:4d:85:fb:70:09:5f:
f5:e3:a6:c3:f2:46:87:2b:af:41:97:ae:a3:db:46:
50:aa:6d:0f:58:19:99:73:99:06:c4:07:78:da:4f:
41:48:52:69:d9:66:c3:92:e9:ea:59:3d:aa:30:e5:
0a:a8:f4:b7:23:f9:02:63:85:1f:e7:a8:4d:c0:6c:
f2:0d:0e:26:d8:2d:fa:0d:5b:f7:fd:82:c4:42:50:
5d:72:d5:fa:e1:18:59:87:fd:6e:3d:d7:7f:46:ce:
51:e4:8c:b3:9f:55:3c:7e:3d:de:b8:c8:e7:9c:9c:
fb:27:2c:9d:d4:ed:fa:5d:1b:01:fe:ec:3c:7f:49:
80:2e:01:85:48:bd:ba:29:8f:6c:bb:e3:a8:5b:ef:
99:89:9e:e5:cf:14:a7:96:ef:8f:34:a6:8e:c1:a5:
be:3b:0b:7e:41:24:89:e6:7a:75:71:8e:02:d4:67:
4f:65:ee:42:cb:06:2a:07:b8:05:00:05:9b:b9:b6:
00:26:7f:95:aa:a2:22:36:e6:60:42:01:f5:a2:b7:
c9:77:02:90:03:50:2c:a6:b6:c8:c8:ee:29:86:2b:
5a:83:6c:09:92:de:ac:69:d8:16:58:52:ec:04:d7:
d5:a4:74:ad:39:40:12:2f:b7:62:7c:e7:d3:6d:5b:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6C:86:10:F8:F6:00:0D:DE:CC:42:51:5D:8F:D4:15:6F:B7:78:CF
X509v3 Authority Key Identifier:
keyid:A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:22:5d:5b:b9:78:c5:6a:b6:2d:49:a0:cc:0f:6f:3e:b8:05:
67:16:3c:08:5f:aa:24:63:bd:bf:e0:6f:d1:d3:8a:51:48:4b:
39:87:49:0e:6d:26:53:e0:6d:6a:53:95:3f:35:a3:08:1b:31:
48:8c:44:90:3d:ed:1d:ed:75:bc:06:bd:f5:01:9f:18:7a:ca:
07:28:d5:e3:31:84:9e:06:b7:44:cf:5f:59:15:76:f9:a7:14:
9a:7c:8a:39:1f:25:86:35:f4:a7:9a:61:cf:a6:23:55:19:01:
67:97:0d:5b:78:55:9a:56:09:19:91:12:81:54:bd:5c:5b:00:
9a:3d:40:a3:1b:4d:3c:d3:c7:bf:a6:04:2b:5e:8e:90:e0:57:
b6:54:96:7f:45:b2:b2:05:97:5d:b5:3f:3f:12:ab:b2:5c:e7:
98:ad:0e:e4:f5:68:70:9a:83:fa:5a:66:e0:c5:b0:90:3d:6a:
11:d5:2b:17:e4:cb:ec:21:45:fb:e8:92:79:55:31:ab:33:7c:
33:9e:41:7f:7b:96:10:76:5b:9f:80:71:5f:00:9d:6b:2a:56:
ab:fa:8e:2a:54:da:03:c1:26:a7:ed:39:a8:7b:b4:b9:a0:d1:
56:ee:ad:f0:46:6e:63:0d:c6:c4:63:1c:73:bb:f2:2c:f6:37:
3d:a7:e2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:59:49 2026 by rpki-client