Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: 1sIb0EXUmvXQLFK4SAV5mY0I7LBXCfzEdNEQU6/IC/0=
Subject key identifier: C0:2B:86:B2:BC:B0:8E:27:7F:86:84:55:7B:B8:B4:F1:65:91:21:33
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 01A138C985C40A3F951630E4FC2B827C1DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 19C6
Signing time: Wed 14 Oct 2026 05:01:33 +0000
Manifest this update: Wed 14 Oct 2026 05:01:33 +0000
Manifest next update: Thu 15 Oct 2026 05:01:33 +0000
Files and hashes: 1: PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa (hash: ClKyMhw4ls8O+22d3zwyr4Of9HO2Cqaa8e0NaPqWqxo=)
2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: qk0k7v6I5pzrZgvImFiaKy0a/ncvP4Fj+MbpPgpHW+E=)
3: pteb03Zrz-92mfGhlVuUAxWiO1c.roa (hash: Tlsfv5MPyjgb+Ws3wZ+t04Extj+nRQ2rvjb3jvw/n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c9:85:c4:0a:3f:95:16:30:e4:fc:2b:82:7c:1d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Oct 14 05:01:33 2026 GMT
Not After : Oct 15 05:01:33 2026 GMT
Subject: CN=c02b86b2bcb08e277f8684557bb8b4f165912133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:71:28:d8:f0:61:f7:ce:55:d1:5b:59:a2:ee:
d2:97:65:2e:76:29:fe:ab:d6:1f:28:b6:28:4c:cc:
58:23:a5:ef:b3:99:f6:e0:59:4b:8a:c9:15:c9:cc:
13:d1:d5:33:5e:b5:12:c7:01:c2:32:1b:e3:13:e7:
c5:b4:c5:92:b8:d3:3a:af:8b:1f:33:b8:da:59:48:
c6:46:e5:15:39:f7:71:db:11:43:80:e3:bf:e2:af:
8f:0d:39:4d:a6:04:36:42:aa:b1:5d:d2:6e:4a:9e:
21:17:d8:66:83:b9:60:93:d0:ac:49:bc:39:2f:a6:
98:94:fe:d3:9a:61:59:f9:3e:29:fa:0a:e6:01:41:
64:31:cc:e2:f7:86:3f:12:df:5d:27:f0:8e:74:21:
54:ab:39:d0:89:9f:f0:49:70:ff:9b:84:8a:6d:85:
97:56:8c:86:36:36:d3:4e:b2:77:32:79:a8:ea:97:
c4:61:a2:28:a2:4a:ab:bf:6a:2f:a6:68:f2:a3:00:
bd:16:82:c6:52:2e:8d:64:0c:7f:02:ef:37:60:12:
19:3e:24:00:a4:7a:e1:cc:b8:e3:fc:7d:20:d9:55:
52:8b:20:3d:3d:9a:5b:c6:df:5d:51:5d:1d:80:c1:
2c:81:ee:f3:9a:37:02:38:8c:40:fa:f3:45:86:ce:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2B:86:B2:BC:B0:8E:27:7F:86:84:55:7B:B8:B4:F1:65:91:21:33
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:00:02:48:3d:9b:e1:92:59:27:48:95:d6:56:31:3b:a3:20:
4f:a3:63:4f:48:f7:d1:53:17:cc:d5:26:d2:cf:81:04:58:ca:
66:e5:74:da:7f:02:4c:70:c0:22:85:c0:5a:ca:32:f3:5b:e2:
fb:5c:04:1f:48:32:c4:e6:d5:94:37:53:e2:76:0a:a5:f7:68:
e2:1c:76:63:cf:19:86:71:13:ff:e6:4e:23:b6:ff:0e:4d:04:
38:3d:ca:08:7b:83:16:83:bb:11:bb:49:d1:5a:86:c5:cd:2a:
cc:25:93:2e:fd:be:59:98:da:30:97:fc:cc:0c:f5:68:8e:7f:
d1:76:24:da:3f:97:12:e7:74:b0:04:69:fe:e9:ea:30:f4:06:
79:9a:ae:8a:c5:19:7c:b6:1b:aa:78:50:e2:15:a9:84:47:a1:
ce:28:cd:95:f0:b1:4b:6e:79:91:7f:87:43:8c:15:51:81:24:
36:72:0a:ba:12:63:36:f9:2d:52:3d:ba:c6:d6:c6:7b:4c:8a:
9f:4a:a0:8f:6d:3d:63:7d:4a:d6:35:53:37:23:26:d6:10:8e:
5c:84:96:62:3e:3e:54:08:8b:37:07:77:c3:46:52:47:0f:c6:
7f:49:ec:d2:73:bf:e9:c0:cc:db:37:e6:89:ad:ea:9b:6e:eb:
dc:9e:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:06:30 2026 by rpki-client