Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier: moBM+NbBK3r+Aydc5Bwpvn9e0obbGe2aoxG+b5D44gg=
Subject key identifier: 54:71:4B:A1:CC:59:28:08:4D:78:E3:3F:44:74:BD:CC:54:E3:4A:E9
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial: 01A0F97C85DCFC7C1056676ABC5A06804C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number: 10BE
Signing time: Thu 01 Oct 2026 22:01:22 +0000
Manifest this update: Thu 01 Oct 2026 22:01:22 +0000
Manifest next update: Fri 02 Oct 2026 22:01:22 +0000
Files and hashes: 1: O4mhqRGKIoCKcIMKacGidJQTeig.roa (hash: o44fh95pYU44LJ84noRE8s+3KorVfsnK8XoKEFDXt+c=)
2: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: 46ypNTfsWlN+DMHn1obZmjf0kbzvKbOLq8fDawm3e1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:7c:85:dc:fc:7c:10:56:67:6a:bc:5a:06:80:4c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Validity
Not Before: Oct 1 22:01:22 2026 GMT
Not After : Oct 2 22:01:22 2026 GMT
Subject: CN=54714ba1cc5928084d78e33f4474bdcc54e34ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:73:42:9d:31:be:e3:15:b2:be:48:4d:f5:5f:
d5:b8:75:3e:ec:0f:e7:11:2e:51:45:48:3d:f6:19:
6f:c4:ee:9e:f5:a8:59:3f:03:b7:ea:6f:9c:98:54:
1b:51:2a:34:75:7c:97:35:3b:37:93:2f:86:1a:af:
88:4e:ea:f0:ed:23:6a:2b:00:a1:2c:5e:0e:63:95:
4e:53:c3:07:82:1c:09:23:d4:43:e0:8f:46:54:60:
ce:ac:6a:11:a8:c6:42:db:b0:94:5f:a7:2f:7e:c7:
fc:a5:06:4b:ea:e8:02:0a:6f:f3:6b:e8:35:91:3b:
88:77:7e:c5:ba:b7:c4:47:89:77:12:3c:2f:c4:68:
f1:6d:af:66:18:4b:91:3a:c7:2a:56:38:54:6c:22:
bb:a9:e6:f3:b5:aa:f2:92:70:a9:b5:ae:49:5d:0a:
82:8b:76:aa:7e:44:e7:11:9f:bc:d9:3f:27:8d:60:
9e:f7:3c:4e:0d:16:0a:c2:b9:80:92:f8:b5:27:38:
66:16:cb:1b:a4:3a:54:3e:f5:03:14:8a:7d:22:8e:
9a:f0:7b:01:ef:1c:a0:54:9a:42:d9:40:20:8c:03:
cd:35:0a:a4:f6:97:29:6a:f3:87:55:2c:2c:e4:51:
5c:48:f5:49:f1:77:da:e7:33:ed:aa:8d:b0:11:46:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:71:4B:A1:CC:59:28:08:4D:78:E3:3F:44:74:BD:CC:54:E3:4A:E9
X509v3 Authority Key Identifier:
keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a2:fd:fe:ea:91:e6:3c:82:fc:22:d8:19:59:c6:ad:61:e2:
ed:76:78:67:13:77:19:43:a7:6e:af:26:20:c9:ca:c3:9e:00:
fb:f8:ef:8a:df:c7:1b:90:b9:ce:0e:50:1a:77:64:cd:08:02:
6c:fc:76:f5:2a:a0:e6:eb:f4:fa:11:ee:32:7f:61:68:c3:f9:
38:c9:de:5b:da:91:17:20:3e:c2:0c:07:7d:cc:53:23:0c:b6:
f6:9e:d6:8b:e4:ff:3b:0d:07:93:8e:d4:6b:69:5b:54:ef:af:
16:b3:2d:07:57:55:64:17:81:7a:f9:bc:e0:6d:b9:24:77:46:
c2:23:c2:dc:ad:b5:ca:d1:4f:46:c4:ef:d4:38:f9:b3:0f:b7:
db:9b:96:ec:f0:bb:5f:66:c0:9c:86:36:5c:ba:21:a1:17:c1:
39:cf:20:66:e5:5b:05:d2:61:23:3a:0e:21:75:f2:c1:09:67:
66:3a:dc:19:a0:bf:d0:e6:c3:c5:db:28:72:c6:91:52:1b:73:
dd:10:ee:c7:40:b9:6f:a6:10:3c:95:d1:eb:c7:29:30:4f:ef:
ed:2e:3b:69:e5:64:bf:95:cd:bf:bf:b9:d3:3f:a2:5c:e0:0b:
88:ce:6a:ea:13:a1:22:e3:aa:7e:ae:40:b9:76:63:a4:af:e5:
d1:c2:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:38:59 2026 by rpki-client