Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
File: oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json)
Hash identifier: 66fclA6pmlz05aVRHbJs9qFcQRcP28uix43er8EWWpo=
Subject key identifier: CF:42:60:B5:10:83:D5:9D:8C:10:34:81:11:17:25:C6:A9:5A:87:F1
Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
Certificate issuer: /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Certificate serial: 01A08C0D0B7B6BADB94D1283A7ECB1B7F392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 16:01:00 +0000
Manifest this update: Thu 10 Sep 2026 16:01:00 +0000
Manifest next update: Fri 11 Sep 2026 16:01:00 +0000
Files and hashes: 1: 0xOSlFF4qEJ0-V611FUixhfdX0Q.roa (hash: 2cl0zm8Cn1RFnkSxPtYibLq9wI+6x0kOdV+BL5DuDG4=)
2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: XYtiDcH4hQ9HbhoXAxRheZ5dboKxPKMJKk7CgThZ7ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:0b:7b:6b:ad:b9:4d:12:83:a7:ec:b1:b7:f3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Validity
Not Before: Sep 10 16:01:00 2026 GMT
Not After : Sep 11 16:01:00 2026 GMT
Subject: CN=cf4260b51083d59d8c103481111725c6a95a87f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:f8:b1:51:93:df:45:20:93:36:10:69:29:
64:43:0e:3d:09:59:b8:8a:e4:88:27:01:84:10:a1:
ff:5a:4e:30:9e:87:79:77:db:60:b3:c1:be:65:9c:
cf:d7:14:a5:ad:ed:22:5e:69:c5:70:1a:ee:6f:98:
4f:03:06:04:c9:14:59:87:75:c8:2f:d9:ee:17:8f:
63:17:05:57:dc:36:f1:a6:1f:8a:36:25:67:55:f2:
87:f1:fc:51:9b:36:ce:69:01:51:05:98:2d:7d:6f:
6e:f1:a7:3f:24:a5:82:41:3c:ab:6c:80:b8:b0:68:
1e:71:1c:6f:99:4a:66:2c:29:40:9e:0f:e6:ee:84:
ad:99:93:65:2c:21:4d:7a:5a:27:9c:28:5c:eb:27:
f9:60:56:9c:bc:74:a3:5b:8d:99:b3:a2:f5:1f:db:
3d:b1:98:30:9a:e6:aa:26:44:2d:3d:d9:44:83:a0:
37:09:2a:44:94:5a:80:17:a6:fa:be:78:a2:35:10:
1d:28:ac:12:17:61:1a:93:1c:9d:8c:c7:aa:95:c7:
3f:02:f1:a4:7c:a2:86:4a:18:27:7f:8c:b1:f8:30:
e8:bc:5d:ec:51:85:4c:08:a1:b6:5d:d9:1e:98:2a:
61:e4:c0:e3:24:dc:c3:3b:25:68:22:f6:62:b4:dd:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:42:60:B5:10:83:D5:9D:8C:10:34:81:11:17:25:C6:A9:5A:87:F1
X509v3 Authority Key Identifier:
keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a9:1b:a2:39:35:d4:6b:a2:5f:0e:7d:5b:00:07:df:61:57:
de:7e:b8:ed:1b:3f:89:fc:d5:c3:90:8a:65:02:f2:53:21:df:
a5:39:ba:89:db:49:48:86:74:e2:16:a0:98:16:cf:e7:7a:44:
f2:0c:9a:a2:50:8a:f9:ac:b0:45:f0:55:7e:4f:3c:6a:f9:02:
d7:1d:d7:7b:f8:8d:36:90:ac:16:2d:93:a8:d5:c5:17:31:05:
00:14:50:78:df:f6:0d:4f:23:11:aa:9c:9f:76:e0:f2:7e:03:
25:c5:53:7d:0f:58:df:0a:61:2e:c5:c9:c4:51:49:ad:57:d8:
ea:39:3c:23:49:e9:1c:a1:6b:f1:6b:86:d2:f8:7c:13:be:c6:
0a:3e:c7:74:e6:e0:cd:80:ad:b2:4c:23:28:6f:ab:c7:90:46:
fa:54:ba:0c:e8:07:dc:99:66:80:f8:71:57:3b:50:eb:dd:1b:
85:9a:55:47:4e:38:2e:c7:9e:54:bf:fa:dc:cf:80:95:02:68:
a1:77:a1:28:32:5a:43:ee:de:c4:d7:f6:97:c0:81:2c:92:ba:
9d:63:0e:ab:9c:d1:6b:46:0a:8d:a8:1e:0e:b2:85:19:f8:bf:
62:09:0b:c6:35:0e:27:e8:d6:92:b2:61:2f:2e:9a:82:62:a9:
d0:ad:b9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:12:30 2026 by rpki-client