Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.mft
File: oY2Cx7EM1bE6e3GL0ERWoktXIEo.mft (raw, json)
Hash identifier: CCrcTq33VPFtXAJnMk9zs0aVA98H6tq/3q3Cw6JeNU8=
Subject key identifier: 2A:7E:E5:ED:91:31:10:1D:3C:10:6D:2A:A6:E3:5A:1A:6A:92:71:C2
Authority key identifier: A1:8D:82:C7:B1:0C:D5:B1:3A:7B:71:8B:D0:44:56:A2:4B:57:20:4A
Certificate issuer: /CN=a18d82c7b10cd5b13a7b718bd04456a24b57204a
Certificate serial: 01A1931ED5B198C9F3B698B81E4FC593C932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY2Cx7EM1bE6e3GL0ERWoktXIEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.mft
Manifest number: 014A
Signing time: Sat 31 Oct 2026 18:00:33 +0000
Manifest this update: Sat 31 Oct 2026 18:00:33 +0000
Manifest next update: Sun 01 Nov 2026 18:00:33 +0000
Files and hashes: 1: kbLynu4mQGlqu4X3QYEBsUFsAu4.roa (hash: xZ8gHAKSrl/T1WoSM0PbChAbKr0bp3bbKxflPz07Cq0=)
2: oY2Cx7EM1bE6e3GL0ERWoktXIEo.crl (hash: p5eVcezzyQ5sMgjG4/8bb5tR2Eld5uVbSzFdfW7/6GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY2Cx7EM1bE6e3GL0ERWoktXIEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:1e:d5:b1:98:c9:f3:b6:98:b8:1e:4f:c5:93:c9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18d82c7b10cd5b13a7b718bd04456a24b57204a
Validity
Not Before: Oct 31 18:00:33 2026 GMT
Not After : Nov 1 18:00:33 2026 GMT
Subject: CN=2a7ee5ed9131101d3c106d2aa6e35a1a6a9271c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:d0:2a:17:94:73:a6:4b:ee:e6:27:e1:50:
0b:e9:25:60:08:92:b8:50:7b:59:47:b4:37:ad:85:
e2:2b:18:5c:a1:cf:47:75:15:f1:92:e8:11:67:53:
16:6a:e5:ad:ab:16:cd:d2:ab:c4:92:bc:2c:53:52:
81:74:33:2d:8c:82:9e:df:04:25:80:4d:a8:48:5d:
7c:32:57:33:85:d6:ba:c2:5c:09:db:a6:8e:1c:01:
36:bc:13:ec:6d:54:8c:14:1e:8c:29:b4:1a:7c:a1:
61:10:01:f8:a1:4f:7e:f9:dd:d9:f2:87:59:c9:17:
db:1c:36:0f:ab:eb:7b:ed:11:68:15:6c:d9:e6:ab:
8c:1a:cb:75:3b:54:d8:0d:bf:a6:9e:41:a8:c7:93:
41:e9:3a:2a:e1:44:53:eb:51:e9:bb:d5:10:8a:6d:
a0:15:a3:dd:86:c5:61:02:d0:8a:9a:eb:fa:c3:e3:
d1:ba:62:39:0a:3e:73:7a:b2:fb:56:c8:3e:dc:0c:
c5:e7:1d:0e:20:ca:0e:a9:c8:2d:32:df:20:75:69:
ac:19:25:e6:25:6f:e7:3d:a8:1e:b2:d4:ff:ae:cd:
a3:21:73:f6:26:1f:04:22:35:38:3f:be:a1:b7:16:
67:ee:8f:94:8b:d2:16:ce:2e:d6:ee:8c:70:56:22:
d3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7E:E5:ED:91:31:10:1D:3C:10:6D:2A:A6:E3:5A:1A:6A:92:71:C2
X509v3 Authority Key Identifier:
keyid:A1:8D:82:C7:B1:0C:D5:B1:3A:7B:71:8B:D0:44:56:A2:4B:57:20:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY2Cx7EM1bE6e3GL0ERWoktXIEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:39:91:11:0f:18:52:4b:28:05:c9:05:65:d5:33:4a:ab:81:
27:a8:db:1c:c1:8c:e3:4d:60:4e:b2:18:79:c2:0a:56:c6:ed:
71:e9:83:4f:bf:5d:02:a3:0c:84:1e:1d:7d:55:c7:93:2b:6d:
8e:fd:42:36:82:64:7a:1f:4d:40:a6:e7:6f:2c:35:92:33:3e:
19:fa:aa:3f:57:1f:1e:bb:95:2f:e0:5b:18:45:8f:5e:14:30:
5e:a8:3e:49:c8:ee:58:3d:e0:12:b9:17:00:5a:45:eb:95:e9:
f9:82:58:4c:ea:df:0c:a1:41:58:27:6d:6d:ce:ba:4e:da:1d:
2f:2d:56:1b:91:25:5d:ce:8a:ae:20:d6:f7:2a:a5:3b:d0:e0:
0e:66:9f:6e:97:98:14:39:54:e7:cc:2c:32:f8:2e:fd:17:73:
d7:09:8a:8a:2e:6e:f2:52:e8:15:78:54:cd:db:b8:75:4b:8b:
23:e3:75:bf:15:4e:44:92:b0:4f:7f:be:98:ec:a2:65:a9:ba:
dc:68:0b:e7:bb:29:f4:bf:2b:6e:b6:fe:49:57:89:c5:a0:da:
b3:d4:21:aa:67:63:0a:37:ba:a7:2d:1a:02:6c:8e:d7:8d:41:
31:69:df:53:90:d9:bd:18:2b:12:b3:51:a2:f7:f7:b8:16:43:
6b:96:e0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:22:17 2026 by rpki-client