Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json)
Hash identifier: JSGnlLfQAzJ9k21XCP/Ebv9kVWGZn1KkoOjBIjsuma8=
Subject key identifier: 36:B3:FD:1D:C3:20:1A:77:51:57:D1:8D:50:9A:6C:9C:F4:70:78:AC
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 01A08A8D20E92C36F1190981EB50BCE77981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
Manifest number: 02EF
Signing time: Thu 10 Sep 2026 09:01:39 +0000
Manifest this update: Thu 10 Sep 2026 09:01:39 +0000
Manifest next update: Fri 11 Sep 2026 09:01:39 +0000
Files and hashes: 1: eJVssC0DvhrNsetFk5GFgWO2ky4.roa (hash: VMsArrM9TNs3d/cIZWSHtA+Rp0/uFzRn7Tdd8sCFb+M=)
2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: utOOUgLE90cyj96en/mGU4BCwQGYviib/DXzFLjJYsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:20:e9:2c:36:f1:19:09:81:eb:50:bc:e7:79:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: Sep 10 09:01:39 2026 GMT
Not After : Sep 11 09:01:39 2026 GMT
Subject: CN=36b3fd1dc3201a775157d18d509a6c9cf47078ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:1c:e4:dc:c6:cb:91:61:c7:b3:50:be:40:
90:1c:dc:29:a9:1a:e6:c9:bd:4a:0c:6d:a1:5b:cc:
fc:be:8e:d2:8a:ee:90:69:72:65:e6:3c:0e:a0:b8:
86:2f:e0:18:86:84:5d:27:98:f0:bd:04:69:b3:f8:
4b:8c:a7:bd:c8:b6:02:b6:04:49:00:49:9e:e7:c9:
4d:ce:8a:bb:58:d5:60:eb:21:15:5b:7a:ed:a1:74:
90:06:34:1f:db:b6:c9:28:d1:41:40:77:1b:9e:00:
02:41:8e:29:da:af:b7:f0:ac:a6:8c:91:f1:b1:be:
f3:99:e6:4d:97:0a:4d:b7:68:32:4d:3c:28:07:af:
8a:7f:e1:6f:ec:88:ff:4b:29:bb:97:f4:88:c5:99:
4c:43:fd:2b:4e:cf:14:70:c2:4f:2c:f0:57:c4:06:
83:70:b3:2b:ca:af:0f:18:b8:2d:6a:1d:06:3b:d9:
d5:43:2b:f0:e7:5a:ae:e1:56:12:db:f6:02:13:82:
48:2a:ab:88:46:8d:2d:d9:21:3b:dd:b9:5e:51:69:
ef:70:64:2e:01:b4:b1:58:37:06:b2:7e:04:20:ae:
fb:97:59:a8:c7:78:9a:e7:87:62:67:33:96:4e:dc:
a5:8f:b4:14:e0:54:67:ba:ee:1b:22:4b:fd:47:5b:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B3:FD:1D:C3:20:1A:77:51:57:D1:8D:50:9A:6C:9C:F4:70:78:AC
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e8:60:42:33:04:6a:1b:f2:7e:55:76:27:bd:51:09:e1:2c:
b9:d4:c8:6b:6b:cc:1b:a8:fa:3b:67:eb:11:75:51:77:a7:a6:
9f:80:b8:d0:b8:fb:4c:3c:bc:49:de:fb:12:a0:b6:a6:d3:67:
d8:77:48:47:55:21:4f:e2:5c:de:a0:57:45:d5:30:45:68:86:
3c:d6:34:5b:72:0f:76:7e:3b:dd:e5:21:43:19:ff:c8:09:23:
0e:d8:49:d6:76:b0:96:65:80:e1:81:89:ea:56:04:b6:d0:fd:
2b:86:4d:44:bc:cd:10:22:47:fd:3b:38:ab:81:6b:24:fe:fd:
bc:3e:ba:cc:04:d4:b0:0a:c0:fd:7b:a2:53:be:a1:59:d6:4b:
bc:54:18:9b:5d:02:f1:1f:03:cb:3b:7f:b4:19:30:33:98:6b:
89:69:9a:50:39:7b:96:41:f4:42:aa:50:3c:bc:b4:75:aa:fc:
b8:b4:dd:34:7f:2d:61:f2:51:77:8e:ce:d1:e9:2f:ee:b9:a2:
d4:35:4b:81:ae:df:8e:69:c1:ac:74:bc:01:22:e2:69:24:97:
ae:e7:3f:14:91:2b:5d:04:82:0c:6b:2a:48:9a:41:c4:d1:52:
26:30:fb:7f:f7:97:69:8f:a2:99:06:d6:09:87:cc:a5:4e:b0:
24:dd:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:36:08 2026 by rpki-client