Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: 5VfFrzXnQjDqvcaAJnp6pIntG1c4jF4YgNxobRdrSI4=
Subject key identifier: 65:A0:51:EF:EE:01:CC:86:BF:EE:EF:5F:28:0C:A5:42:C5:AD:CA:16
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 01A13CDCB1C144C4FBC3B68A968C5A71151D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 179E
Signing time: Thu 15 Oct 2026 00:00:58 +0000
Manifest this update: Thu 15 Oct 2026 00:00:58 +0000
Manifest next update: Fri 16 Oct 2026 00:00:58 +0000
Files and hashes: 1: CC_uQGJB-X8dNzS4njkHHnRy0EE.roa (hash: kLWeBF22uNWLbsgPVVSSeJVxiHQO+5+Sj42QETQzuhc=)
2: K1Er1aBJx6bVqmO9OdMkkQAcoks.roa (hash: jgg7YMoJBVhZFbz63ciqQ92UHrRAMfSOORFFb9rl/W4=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: YqY+2rNo9Yz5oDwmxz0Wohul0qBBjodU+PrGhHip2M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:b1:c1:44:c4:fb:c3:b6:8a:96:8c:5a:71:15:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Oct 15 00:00:58 2026 GMT
Not After : Oct 16 00:00:58 2026 GMT
Subject: CN=65a051efee01cc86bfeeef5f280ca542c5adca16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:8b:7f:ed:ad:07:ea:40:73:1d:f0:22:1b:
ab:66:2e:d0:12:d1:2e:6b:74:f0:28:d9:7a:e9:db:
bc:62:b8:ff:98:59:e3:fe:cc:b2:da:70:29:f3:39:
0f:fb:89:e1:42:61:56:55:2c:90:5f:29:0c:1b:86:
b5:57:1a:d0:22:31:fa:ea:6f:60:fd:c3:75:c3:b7:
5d:af:db:33:dd:b1:17:ec:5f:c5:36:84:c8:f1:2b:
3d:0a:fe:e6:2e:3e:94:95:a8:bc:60:f6:99:4b:28:
45:41:70:8a:fb:61:6b:7a:f3:32:1a:48:91:a2:ab:
5d:f7:61:02:2c:a5:e5:db:ba:8e:1c:7b:7c:ad:d1:
1f:66:fe:51:bc:87:02:c8:99:ad:0f:1d:df:0d:b3:
6b:33:ff:df:2d:b2:48:29:34:a9:83:67:7c:65:63:
3e:eb:e8:da:93:0c:0f:5d:63:f6:fe:64:8d:8f:97:
1c:fd:47:0e:90:ec:f2:1a:4b:5b:76:4f:25:4f:e8:
6b:c1:0d:bd:4a:82:91:ac:bf:3a:24:82:b8:fb:5d:
79:d0:42:cf:eb:58:2c:c5:4f:4a:ac:6c:6b:92:ee:
ec:08:7e:ae:bb:5a:43:3a:b7:be:f0:53:52:da:8f:
36:ee:dc:b0:93:7d:97:01:82:e8:97:21:67:c9:25:
c6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:51:EF:EE:01:CC:86:BF:EE:EF:5F:28:0C:A5:42:C5:AD:CA:16
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e5:42:4b:61:de:ce:12:30:fa:2a:6c:64:19:10:8e:a4:23:
75:c3:e6:6c:08:09:00:dc:0e:27:42:f5:27:95:18:ac:86:3c:
ac:42:35:fe:ee:b1:b0:b1:87:4a:49:07:75:93:b8:ef:3b:b9:
27:be:c1:6d:f3:98:cc:4a:8e:80:b7:6b:9d:e2:24:11:f6:39:
9a:7a:b0:20:d8:b1:57:54:be:6b:0c:32:cd:83:12:d7:f3:c7:
57:a2:c3:ad:60:47:8b:84:98:19:70:bc:ad:e4:67:09:46:87:
ca:a2:4e:f9:20:33:d6:9c:54:a0:9a:22:8b:4c:a4:38:08:e0:
a5:e3:68:03:9e:b2:ff:6d:8f:48:a6:b0:3a:19:41:3e:89:67:
80:56:e4:36:fc:5c:4e:46:14:01:4b:4b:7f:52:da:5f:7f:2a:
79:08:60:33:68:1c:27:bf:7e:9e:4a:5e:57:94:c6:7c:fa:a5:
5b:2e:a3:40:2e:fe:be:49:f5:1d:02:c7:7d:85:7d:46:ec:c3:
0b:be:4b:40:04:5d:dd:13:16:23:e8:39:9c:c0:76:b5:39:46:
d8:bd:5e:f1:43:aa:e6:a4:1e:09:43:be:76:e3:46:04:e4:60:
11:0d:e8:f0:3d:5e:43:0c:2d:17:f7:ac:a5:a9:e8:20:3d:a8:
0c:be:86:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:03 2026 by rpki-client