Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: lanB5HQp96FjmUGXo8sFw6yqfW74eRtZGPv891+13Ds=
Subject key identifier: 72:74:92:07:3F:4B:3C:D1:CF:4F:F4:86:01:05:62:76:0C:9A:D0:2D
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 01A136DAF182FD8A5CE5E16F6C41082D4073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 19C5
Signing time: Tue 13 Oct 2026 20:01:20 +0000
Manifest this update: Tue 13 Oct 2026 20:01:20 +0000
Manifest next update: Wed 14 Oct 2026 20:01:20 +0000
Files and hashes: 1: PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa (hash: ClKyMhw4ls8O+22d3zwyr4Of9HO2Cqaa8e0NaPqWqxo=)
2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: K6qsbuLSSj3Y9LEdeotgaKosb3Uwo9/tsyzXtzlxp/E=)
3: pteb03Zrz-92mfGhlVuUAxWiO1c.roa (hash: Tlsfv5MPyjgb+Ws3wZ+t04Extj+nRQ2rvjb3jvw/n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:da:f1:82:fd:8a:5c:e5:e1:6f:6c:41:08:2d:40:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Oct 13 20:01:20 2026 GMT
Not After : Oct 14 20:01:20 2026 GMT
Subject: CN=727492073f4b3cd1cf4ff486010562760c9ad02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:f9:da:27:48:aa:b6:9d:b7:fb:53:f1:b0:
00:f4:08:38:df:ec:7e:bf:f2:4e:b4:1f:dc:be:80:
23:37:c3:97:76:63:5d:05:57:e9:52:30:37:d1:f5:
9d:06:23:ba:91:d6:25:1b:8d:c6:14:90:a7:fe:c8:
22:75:61:a3:eb:e1:4a:70:67:a3:29:36:4a:cb:29:
77:e1:5c:d2:02:47:d5:f8:2e:98:dc:c1:df:ea:04:
cb:d2:fb:c1:09:67:9a:68:2d:f7:e0:af:5a:91:92:
d3:7c:b7:b3:5f:43:5d:d7:15:cd:46:20:5f:e4:86:
47:de:c7:37:85:fe:10:e2:94:cd:98:87:70:fe:1b:
c9:20:37:64:85:d7:61:79:60:16:bf:23:1f:cd:22:
21:1f:ca:32:b5:f0:02:93:ed:97:0b:b2:3f:a0:e6:
a3:20:27:a2:09:5e:9f:74:ce:7a:df:f7:27:c6:7a:
d9:5f:90:37:9a:78:d5:25:99:2e:96:ad:54:7f:c8:
1f:9d:2f:a5:16:26:68:05:51:2f:34:a1:7c:c0:75:
d5:6d:86:df:4f:7f:f8:ab:bb:48:36:bf:87:bd:a8:
11:4e:0b:23:be:a4:7c:e8:b6:ad:49:30:22:b5:11:
00:c3:e8:f3:05:f8:b6:37:78:45:c0:c0:11:3d:2a:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:74:92:07:3F:4B:3C:D1:CF:4F:F4:86:01:05:62:76:0C:9A:D0:2D
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ce:73:0b:1b:d9:19:db:b6:ca:14:88:23:62:61:c2:cb:8b:
b2:6d:4a:27:99:57:b7:a6:6e:a5:b4:72:43:ea:11:d1:76:82:
79:52:fa:4e:4f:8c:d1:f2:67:d8:ed:93:38:ab:9e:5a:64:8e:
f7:4c:e8:2b:3d:83:36:41:ac:92:35:0f:3a:f2:86:f1:1f:91:
75:fc:7b:78:9f:fb:b1:d6:ac:fc:b1:8a:28:42:da:4b:82:9b:
ff:15:78:7a:80:a2:7e:73:44:25:33:cc:7a:cb:01:e1:37:c8:
1e:8d:ed:c6:9a:a2:f7:7b:3b:0e:6d:0c:ab:a4:bc:0d:37:47:
09:da:42:58:4c:30:5f:6f:01:e0:dd:d1:21:15:9e:b1:f5:99:
87:b9:56:ee:8e:1f:78:8a:9b:e0:b5:b1:e2:a5:07:11:fe:f6:
f0:71:cc:54:32:49:88:cc:3d:a3:ca:d5:34:b1:41:c2:02:79:
75:fc:b5:26:18:6e:f1:83:c7:ad:57:96:e7:e4:f5:f0:ab:a2:
5a:84:f3:af:31:37:40:80:3b:d5:ae:38:9a:94:14:f9:4c:db:
e8:4f:be:08:4c:60:df:92:e7:b2:af:c6:62:f0:69:60:85:6d:
af:45:a2:94:2a:59:be:9b:0c:3c:49:fe:d4:06:8f:e5:08:e7:
2f:3c:8e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:14:47 2026 by rpki-client