Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
File: oIwpap_lpgUVguWt5HVJhfbxGzE.mft (raw, json)
Hash identifier: DWqyPC/SXuIF6orF3O+g/IxOboLYeujhBC3PfeGkpjI=
Subject key identifier: D5:D8:18:41:24:BC:15:1C:72:8B:6D:7F:31:69:68:6D:AF:E5:F5:B8
Authority key identifier: A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
Certificate issuer: /CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Certificate serial: 01A08C0C9BF96B5A5ED9E62F47E7B4A3C442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
Manifest number: 0272
Signing time: Thu 10 Sep 2026 16:00:31 +0000
Manifest this update: Thu 10 Sep 2026 16:00:31 +0000
Manifest next update: Fri 11 Sep 2026 16:00:31 +0000
Files and hashes: 1: PZKZVJbLIiC-nyKzbha8Q1plbB0.roa (hash: OGaxQzQU67t4LsOvlqtFqnosSDCkJ4cDH47PaItpnpE=)
2: oIwpap_lpgUVguWt5HVJhfbxGzE.crl (hash: 27PD2xxMkMRFzUJUHndiDd8md24SfE2bzCKnkr1bbXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:9b:f9:6b:5a:5e:d9:e6:2f:47:e7:b4:a3:c4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Validity
Not Before: Sep 10 16:00:31 2026 GMT
Not After : Sep 11 16:00:31 2026 GMT
Subject: CN=d5d8184124bc151c728b6d7f3169686dafe5f5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:9c:a0:e1:ea:a9:ca:bf:32:20:f6:88:db:
22:76:99:e4:a5:90:5e:d3:bf:a9:05:47:71:b8:1a:
af:b1:d1:82:94:1e:85:9c:90:a9:00:5c:2b:0d:14:
43:57:1d:00:c3:5a:2d:47:1b:07:15:db:96:0f:d8:
57:f1:be:91:8f:cc:3d:45:bc:0f:cd:97:3c:15:c0:
ed:f5:20:3d:30:b5:63:5d:63:1b:30:dc:9e:c3:ad:
bd:0b:78:91:4d:49:6f:ff:1e:25:1d:29:1e:25:6f:
07:04:b0:13:66:df:dc:40:f1:fc:39:74:a7:eb:85:
83:0f:c9:35:30:d0:bd:04:7c:e0:46:21:62:ac:cd:
b8:34:3c:8d:c1:30:60:75:96:48:a7:3e:95:d9:d8:
cd:b0:e9:f1:09:bf:80:31:ef:68:9e:1a:29:a4:c1:
a1:9b:07:92:db:57:01:40:45:78:dd:e1:09:fd:c6:
70:c0:60:80:88:c4:ac:d5:ab:62:cf:75:d0:71:de:
f8:e8:04:b5:41:55:f5:c5:b7:13:85:a9:e1:69:ce:
d5:20:48:b6:b3:2b:54:b2:13:91:3c:dd:e2:a3:37:
fc:02:d3:1c:7f:dd:c8:b0:f8:4b:e8:72:0d:2a:d4:
a9:56:a6:1b:12:3f:06:83:cb:35:e5:ea:bc:3b:49:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D8:18:41:24:BC:15:1C:72:8B:6D:7F:31:69:68:6D:AF:E5:F5:B8
X509v3 Authority Key Identifier:
keyid:A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9e:30:90:b5:a3:7f:7a:d5:3d:e3:a7:48:6d:28:ef:74:5d:
35:5b:4c:82:e8:38:00:ac:d5:69:48:20:ff:34:d0:4c:a4:b2:
99:8d:96:8f:11:e2:b6:9e:8d:f3:5b:f9:e3:38:b7:f5:03:28:
23:3d:9f:91:76:1e:67:5d:ed:c4:a2:49:1f:ed:24:67:99:a1:
5e:d1:75:b0:c0:19:a0:92:86:2f:e2:62:79:fa:8c:d8:ce:a5:
10:29:fb:ed:54:ed:6f:e8:5b:e6:2e:bf:0e:4b:da:46:ed:4a:
85:b1:b4:a3:4f:e2:33:82:24:49:85:76:9b:8c:ce:2e:e3:3f:
a9:e7:f5:8c:a8:0b:a9:13:88:74:14:eb:f6:aa:de:8a:bb:27:
90:f2:4a:44:cb:e0:ec:c2:dc:d9:ad:78:8c:25:be:a9:b5:26:
25:dc:6a:eb:43:06:e5:3c:41:2e:a8:ad:11:69:6c:0f:9a:0c:
77:1d:bb:93:ca:e0:33:71:a4:c6:e4:54:51:ad:0e:48:52:2d:
e1:f9:c4:09:ec:7f:14:47:e5:14:f0:a8:0a:e9:99:1a:54:d4:
ef:34:e7:f5:ee:e1:d3:93:d8:ab:42:d4:0e:11:21:aa:66:af:
25:71:08:3d:af:6a:3f:f6:9e:4e:43:03:92:8f:7f:eb:24:dd:
5f:8d:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:08:08 2026 by rpki-client