Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.mft
File: oY2Cx7EM1bE6e3GL0ERWoktXIEo.mft (raw, json)
Hash identifier: JrGRKeG/sgWefBTKDrdGkUTJPSAB+ES/seG3tMOVzqw=
Subject key identifier: 9D:7E:8E:CA:F8:40:75:44:49:F0:0A:1F:CA:7B:EC:76:E2:B0:DC:09
Authority key identifier: A1:8D:82:C7:B1:0C:D5:B1:3A:7B:71:8B:D0:44:56:A2:4B:57:20:4A
Certificate issuer: /CN=a18d82c7b10cd5b13a7b718bd04456a24b57204a
Certificate serial: 01A08E68F634A17CD39219294FC3C24CC4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY2Cx7EM1bE6e3GL0ERWoktXIEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.mft
Manifest number: C3
Signing time: Fri 11 Sep 2026 03:00:38 +0000
Manifest this update: Fri 11 Sep 2026 03:00:38 +0000
Manifest next update: Sat 12 Sep 2026 03:00:38 +0000
Files and hashes: 1: kbLynu4mQGlqu4X3QYEBsUFsAu4.roa (hash: xZ8gHAKSrl/T1WoSM0PbChAbKr0bp3bbKxflPz07Cq0=)
2: oY2Cx7EM1bE6e3GL0ERWoktXIEo.crl (hash: s33M+wQTWkZb/zuz5tFext9LtG07kOu1kd05iAma3ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY2Cx7EM1bE6e3GL0ERWoktXIEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:68:f6:34:a1:7c:d3:92:19:29:4f:c3:c2:4c:c4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18d82c7b10cd5b13a7b718bd04456a24b57204a
Validity
Not Before: Sep 11 03:00:38 2026 GMT
Not After : Sep 12 03:00:38 2026 GMT
Subject: CN=9d7e8ecaf840754449f00a1fca7bec76e2b0dc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:2e:00:b9:1c:dc:8d:7e:c9:6b:fb:a8:7f:
1c:38:06:22:73:55:be:c8:8c:e1:59:24:20:2c:d7:
12:fe:33:b6:8a:8f:31:55:b5:fb:86:97:e4:d5:e8:
3c:a6:3c:52:40:aa:7e:be:0c:41:90:d9:cf:b4:e9:
cf:4a:fd:38:c1:c5:41:58:7d:20:9b:91:a7:e8:3c:
b4:75:7a:f3:79:c2:4c:27:b7:b9:dd:0c:2c:f7:bb:
1d:83:57:21:17:b6:13:e4:d7:7d:08:4d:22:8a:e3:
92:c8:ee:30:7a:b1:47:9a:d4:5a:76:06:9b:00:24:
66:55:a0:7c:6c:77:2b:26:4c:1b:4f:78:7c:de:3b:
a8:d0:e0:ea:29:17:ad:8e:ef:7f:34:b5:fe:57:33:
94:ff:96:54:63:f8:b0:68:59:d3:72:be:97:e8:07:
af:34:e9:39:57:2e:7b:79:5c:ab:00:14:83:6c:b7:
c4:14:bd:6b:5e:02:fb:b1:d8:f9:bc:14:53:89:72:
98:04:57:d7:a9:93:e9:ec:29:76:02:32:8c:51:0a:
05:c7:22:34:de:b5:c2:d1:2f:ba:3a:1e:9f:53:21:
49:62:f9:11:d8:6e:95:1d:b5:b7:a7:13:ca:35:f1:
bd:32:a5:02:c6:b6:21:3f:7d:d9:b1:95:e8:36:2a:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7E:8E:CA:F8:40:75:44:49:F0:0A:1F:CA:7B:EC:76:E2:B0:DC:09
X509v3 Authority Key Identifier:
keyid:A1:8D:82:C7:B1:0C:D5:B1:3A:7B:71:8B:D0:44:56:A2:4B:57:20:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY2Cx7EM1bE6e3GL0ERWoktXIEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/oY2Cx7EM1bE6e3GL0ERWoktXIEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:25:f0:92:d3:94:cb:ab:5a:c7:37:b8:d5:48:68:d5:d3:48:
ae:e4:ed:d5:03:72:d7:3a:57:f3:c8:2c:4f:30:51:66:f7:14:
0d:c5:cb:c9:6e:10:b1:7c:14:98:c3:26:36:2f:7f:7d:eb:9b:
3c:36:ad:c7:27:6f:ee:76:0c:31:53:62:94:4a:a2:c8:40:b6:
c4:35:08:c8:d9:9d:47:0c:27:20:c2:1f:97:d5:ff:95:2a:83:
b2:56:ac:52:8a:c4:79:3a:e9:5c:6e:97:74:0f:4b:9a:d3:03:
f5:26:dc:41:f1:4c:02:b2:f7:d4:e0:8c:64:fd:0d:98:73:ef:
0f:38:12:92:ab:8e:12:14:10:47:b2:19:bf:fb:bd:2a:54:1e:
f6:f1:54:e8:d8:f8:56:20:f2:2f:28:60:09:b1:1c:78:29:e7:
2d:e2:3b:a4:0d:22:1c:6c:c9:86:56:8f:d9:f9:da:72:4d:9f:
7e:36:32:16:ba:c3:49:09:51:f0:37:3c:2c:48:63:15:94:2b:
ea:d0:af:27:4f:38:e0:93:2f:8c:90:7c:4e:c7:47:db:c1:73:
92:73:ab:6b:34:79:6b:1d:38:bf:b7:ed:14:42:99:d7:6c:a4:
a5:fa:13:0f:1e:df:48:ef:47:af:03:4b:99:8f:ac:68:a6:89:
d8:ef:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:56:52 2026 by rpki-client