Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: f/kwXGNL3Q+bf6IyxfRRqFwDFpnvF4vCFAY4goTAw6Y=
Subject key identifier: D7:82:B6:7B:A8:8A:1F:E5:D1:D1:AB:FE:BC:57:DF:88:C7:A4:AA:56
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 01A11C75BC90DE7E7C48F72578DA61D9297D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 1A99
Signing time: Thu 08 Oct 2026 17:00:40 +0000
Manifest this update: Thu 08 Oct 2026 17:00:40 +0000
Manifest next update: Fri 09 Oct 2026 17:00:40 +0000
Files and hashes: 1: 0iskxAKnPV1t3vVtL0ZxiR5NqDo.asa (hash: dTnlTRCOpAxkRq/1/Z4AQAvbwk3FcS0Wqrww9bcRVV4=)
2: mfvEjWb3rQFbj32_BBadoAv_Y0s.roa (hash: FGRbYmzgAXrFUwzG+mMOatKnvNqH9Ov9gtrQRgDuAmE=)
3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: ENi1swZO2tQj+oOTnquKBUBE4lqTtd3TNEp8sqor84I=)
4: wvfBOreCybbt9afiUMU5R2NBdJQ.asa (hash: IVFtZ0X879D2RM6GVRG/lhLBfD0N96F/6jJoFE+cRr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:75:bc:90:de:7e:7c:48:f7:25:78:da:61:d9:29:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Oct 8 17:00:40 2026 GMT
Not After : Oct 9 17:00:40 2026 GMT
Subject: CN=d782b67ba88a1fe5d1d1abfebc57df88c7a4aa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:e4:0d:52:7f:fa:fb:d5:20:09:b1:ad:b1:
e0:34:3a:45:56:69:c7:dc:5a:f4:0d:07:da:c9:91:
2c:a8:af:2d:fd:a5:8b:a7:2f:92:21:18:1e:8b:0d:
b2:7a:9d:9c:39:8a:1c:d0:82:c2:40:13:91:77:f3:
a8:9e:9c:43:f8:72:29:74:c8:39:9f:98:85:3b:5e:
2a:67:0b:1d:5f:e7:9a:9c:c1:23:d3:12:3b:6e:00:
87:67:d9:b9:d9:f8:03:0c:c1:4e:64:39:4b:cb:fe:
ee:5b:65:a2:9c:c7:5e:0b:c6:fe:e8:ad:30:42:e0:
8c:e9:25:13:2c:7b:65:57:b6:38:5d:e2:6f:d0:fe:
fe:87:fd:ef:db:c3:da:97:f0:6a:2e:c7:0c:69:84:
9b:33:6c:94:d7:0d:dc:d2:18:70:01:66:05:25:14:
ff:b0:15:06:2a:d0:00:1c:65:31:22:e0:97:d5:f1:
cc:b7:87:ef:6e:ae:3b:9c:57:7a:7e:44:47:d2:5b:
5e:bb:26:bd:22:3c:ce:c0:df:cd:a6:cc:33:63:cd:
58:19:01:40:a7:15:f1:65:9e:d4:fd:ee:c6:e7:0c:
a2:dd:9d:04:5a:a3:05:61:43:45:4a:83:c5:4c:87:
11:0c:f6:c9:bc:fe:ec:34:33:62:51:bf:5b:cc:9e:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:82:B6:7B:A8:8A:1F:E5:D1:D1:AB:FE:BC:57:DF:88:C7:A4:AA:56
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:31:11:dc:1f:64:2b:04:c1:9d:ae:4f:e1:73:54:2a:e5:19:
79:8d:91:e8:0e:86:b6:2c:1e:54:57:0c:4a:2a:3a:0e:c0:54:
e0:ab:c7:b5:c7:60:a0:93:08:0e:f2:aa:fb:5f:68:60:6a:68:
ac:6b:5b:11:1b:86:e3:46:b3:bb:91:80:0b:ed:86:fd:fa:c5:
57:3e:e7:26:6b:ce:df:d9:b7:bd:b0:93:2a:2c:60:d8:ab:f1:
dc:16:0b:02:97:e8:72:13:28:9d:ea:02:a2:43:1b:ad:51:8d:
63:5a:a7:30:9a:b2:32:c5:dd:eb:cf:9c:5c:6d:eb:9a:2a:aa:
15:67:0c:71:4e:b2:da:b7:93:3b:e9:03:a9:63:80:57:89:be:
db:70:33:ce:50:89:1f:f7:d0:43:63:4f:02:89:1d:fd:3b:1d:
8f:9b:11:a0:2d:19:a1:bc:fd:2c:3f:f6:03:4f:f9:ee:d2:3b:
67:48:83:66:95:ef:ed:5f:f2:a7:29:a4:c5:20:e2:3d:50:1c:
1d:ac:92:64:c2:ad:1b:45:1f:79:68:e9:e3:54:ec:d1:90:d7:
55:d0:34:6f:98:69:32:7f:fc:13:97:92:e8:eb:60:b3:01:7f:
fd:d7:a8:ac:5d:96:a4:18:32:cb:63:05:d8:df:a0:b4:52:78:
bd:20:21:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:27:34 2026 by rpki-client