Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
File: oIwpap_lpgUVguWt5HVJhfbxGzE.mft (raw, json)
Hash identifier: e6IvNYDT44WTk1Xri/vNLdVqBRYCmIblrin0gu/zWMo=
Subject key identifier: 41:EE:15:E5:5D:EC:C4:D2:6F:73:75:1F:48:79:38:13:B6:22:D9:A2
Authority key identifier: A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
Certificate issuer: /CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Certificate serial: 01A177A7FED7A088B2BC21CC5EDCB35969D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
Manifest number: 02EC
Signing time: Mon 26 Oct 2026 10:01:00 +0000
Manifest this update: Mon 26 Oct 2026 10:01:00 +0000
Manifest next update: Tue 27 Oct 2026 10:01:00 +0000
Files and hashes: 1: PZKZVJbLIiC-nyKzbha8Q1plbB0.roa (hash: OGaxQzQU67t4LsOvlqtFqnosSDCkJ4cDH47PaItpnpE=)
2: oIwpap_lpgUVguWt5HVJhfbxGzE.crl (hash: TqlyRbVPrcq2breiJa07ejS3MrMIt/RpKKGWfJRzWUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:fe:d7:a0:88:b2:bc:21:cc:5e:dc:b3:59:69:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Validity
Not Before: Oct 26 10:01:00 2026 GMT
Not After : Oct 27 10:01:00 2026 GMT
Subject: CN=41ee15e55decc4d26f73751f48793813b622d9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:f4:18:41:ef:d0:9f:c8:e7:78:af:30:40:
24:2d:81:c1:ff:10:ac:88:41:8b:48:71:2b:32:7b:
db:21:eb:fd:91:bc:76:4e:e4:bb:52:a7:63:72:fd:
70:f8:ec:7b:e4:68:8c:c3:1e:7a:bb:1e:df:c7:0e:
59:e6:3d:77:b8:5b:e6:51:ed:cc:ef:b9:31:d5:58:
80:02:9b:b4:b3:49:eb:55:dd:1e:c0:13:41:bf:77:
7c:17:21:a6:2b:16:ec:97:78:c8:e8:bc:af:fe:ea:
01:cd:ed:74:76:ce:11:be:c8:dc:e4:47:c0:10:80:
b6:b7:58:17:3e:57:7c:36:42:67:bf:21:f2:55:67:
3b:c6:18:1d:f6:e6:3f:66:7b:6c:07:cb:30:b9:62:
eb:c3:f7:43:07:9a:58:e8:dc:c7:b0:39:f5:e4:0c:
74:78:05:19:65:c1:17:14:86:8a:46:c8:03:44:af:
29:b5:49:2f:1f:fe:13:03:93:53:c4:6f:34:fb:17:
3d:ef:29:c4:17:71:37:f7:dd:30:5f:9e:f8:5d:bf:
a3:70:03:31:3a:6b:56:a6:7c:93:60:2e:91:f1:cb:
c9:b8:5a:40:d3:2c:f4:f1:23:0a:1d:32:70:75:08:
64:db:e8:b2:25:8d:77:a1:66:af:d5:e1:ec:41:ca:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EE:15:E5:5D:EC:C4:D2:6F:73:75:1F:48:79:38:13:B6:22:D9:A2
X509v3 Authority Key Identifier:
keyid:A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6b:1c:0c:88:72:a5:3f:7b:d0:d6:1f:76:1b:93:82:2e:61:
bc:c7:ba:d9:97:01:22:c1:3e:cd:2a:89:f9:df:b1:06:5f:5d:
d7:f7:c0:b8:62:a0:6b:75:ce:40:3f:a5:b7:66:d7:ad:95:a2:
02:ca:5d:d1:1a:d6:6f:56:cc:dd:13:a2:da:69:54:c9:4b:e2:
54:21:58:e7:a4:49:0c:26:87:ce:67:39:d7:09:b9:d7:1a:82:
e8:10:11:30:74:49:40:81:3e:74:f8:1f:70:42:bf:09:09:4b:
d1:8b:63:ab:e7:40:21:49:61:cf:70:a9:1c:47:9c:af:4e:c9:
ad:3f:9e:55:a0:ef:d7:af:1c:e1:fa:f7:89:6c:ba:07:9e:a6:
0e:d2:a4:cd:ed:09:ad:3a:80:4c:a3:b2:79:b5:7f:f7:36:59:
1c:cb:4d:5e:d9:7a:02:f7:3c:d5:dc:86:7e:9c:8a:56:df:93:
90:56:ec:a5:45:5c:c4:33:97:32:57:0b:bc:a6:42:d3:7b:95:
ad:b2:35:de:9f:4b:98:8d:90:62:89:20:94:12:ce:21:48:a5:
1f:80:6c:8e:64:e4:50:04:78:93:0e:87:04:88:5e:4d:6a:ad:
e3:7a:0a:c0:fa:1d:69:ef:56:ad:e7:2e:89:94:d5:ed:ae:e1:
03:53:7c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:25:43 2026 by rpki-client