Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json)
Hash identifier: 8LVR/hqP0EWcuxwHuVPYWWhixc+K92jRFwg6+nhodd8=
Subject key identifier: 86:4E:81:32:70:B1:09:B6:7D:D4:C4:4B:DF:70:75:1A:85:33:42:C6
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 01A1833E3D74A8B9E238D0E47AD2CE6A20DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
Manifest number: 0370
Signing time: Wed 28 Oct 2026 16:00:56 +0000
Manifest this update: Wed 28 Oct 2026 16:00:56 +0000
Manifest next update: Thu 29 Oct 2026 16:00:56 +0000
Files and hashes: 1: dZ_wj-l4u9PRm9NioG9hfmoCmEg.roa (hash: XONI2zL//Bx6fEgV/SOZ940RDTOysbYIjp1Bo1GWQjc=)
2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: MXPYMd4cDT2JmiY77nq+L7cifUevAYKE2pHp4O9P/+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:3d:74:a8:b9:e2:38:d0:e4:7a:d2:ce:6a:20:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: Oct 28 16:00:56 2026 GMT
Not After : Oct 29 16:00:56 2026 GMT
Subject: CN=864e813270b109b67dd4c44bdf70751a853342c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:79:87:1e:bf:fa:2f:ff:b2:93:09:a1:ca:
b7:0f:12:a9:04:14:74:b0:c7:a2:e4:05:29:fe:15:
0d:f5:07:81:ce:98:36:e0:6a:4e:94:f4:eb:6e:8e:
a1:ae:ca:a4:d3:4d:09:9a:1b:e7:d2:33:dd:c7:2a:
f9:ef:79:a7:66:a2:24:28:b6:c6:39:1c:66:d3:13:
75:39:fa:2c:25:ca:7d:3d:c1:63:8c:4a:72:d2:60:
2f:56:01:6d:68:8e:55:64:94:a6:e2:53:21:b0:fa:
ff:27:35:27:0d:40:1a:47:af:91:4b:4e:65:92:74:
69:78:3d:7a:b2:f1:7b:da:13:a6:02:4e:c0:4c:22:
d6:90:9e:e8:13:98:d6:35:c6:da:af:35:14:c2:b1:
ba:6d:56:85:68:9d:40:79:d2:f3:8f:b3:5a:0e:84:
e6:44:78:c1:76:70:af:d8:54:fe:af:b5:14:b6:f6:
45:87:5e:0a:49:67:2b:65:f9:ce:de:29:07:81:52:
a4:c2:57:ae:8b:96:32:25:78:8b:9d:c5:d5:65:4a:
51:dc:a5:34:b5:d1:2c:40:a2:df:1b:61:6f:67:ef:
89:5a:d1:28:49:3c:7e:27:2f:2b:66:60:3b:5e:ba:
f9:8a:d2:72:e3:1b:45:82:35:cc:94:4d:53:90:76:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4E:81:32:70:B1:09:B6:7D:D4:C4:4B:DF:70:75:1A:85:33:42:C6
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6c:4c:cc:9b:fa:75:f0:1d:27:e8:6f:a6:17:1a:33:d3:4e:
79:0b:2d:81:44:d0:b6:e7:15:37:fa:2f:d6:24:d6:77:ec:33:
9a:66:67:dd:91:a7:03:02:7d:3c:58:46:2b:15:a4:54:2a:c3:
8f:46:c6:1f:e7:62:71:33:25:0d:e0:56:17:85:24:c5:d4:56:
ff:f6:46:f2:55:0f:c6:bc:1d:d7:33:1d:47:26:ba:2f:72:aa:
28:74:7f:1a:47:10:13:75:cd:87:aa:42:02:40:35:49:21:b2:
e4:97:15:ad:22:c9:b1:de:05:b2:fe:e5:fb:91:34:da:f1:f5:
8f:c2:5e:96:a4:51:c8:fc:e4:36:79:86:df:e1:88:14:17:5e:
46:68:ee:47:b4:b5:35:b2:79:82:c7:62:e9:55:a5:8c:a4:8b:
49:b4:3d:5d:0a:0b:8d:41:3c:99:90:ad:02:1b:38:d9:19:5d:
c0:3e:ad:05:29:25:92:71:d4:81:82:88:79:b0:f3:aa:e2:04:
48:1e:3d:67:7d:a1:4a:40:76:5e:63:c8:d6:dd:f5:50:ac:f2:
45:54:e0:73:0e:b5:30:a9:96:a9:4f:fd:fd:e4:6d:9e:88:26:
eb:81:4b:ab:1b:9b:52:c8:10:3a:03:bd:4d:68:ff:d3:45:a7:
4b:ff:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:48:22 2026 by rpki-client