Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
File: oHkxBpr_ycmd5RjIJgYOGctHWmo.mft (raw, json)
Hash identifier: xsCTYqx/jAwtYqDRML8vAXQlZvK7tfRbk7Aub67yYRM=
Subject key identifier: 6B:CE:45:7F:B9:6A:DE:D4:B0:F7:AB:E1:30:3E:9A:23:EE:83:CD:43
Authority key identifier: A0:79:31:06:9A:FF:C9:C9:9D:E5:18:C8:26:06:0E:19:CB:47:5A:6A
Certificate issuer: /CN=a07931069affc9c99de518c826060e19cb475a6a
Certificate serial: 01A10324CABD0117F0B365D9DD025ABE08A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHkxBpr_ycmd5RjIJgYOGctHWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
Manifest number: 022F
Signing time: Sat 03 Oct 2026 19:01:45 +0000
Manifest this update: Sat 03 Oct 2026 19:01:45 +0000
Manifest next update: Sun 04 Oct 2026 19:01:45 +0000
Files and hashes: 1: 2nCCDGIY-zgjtBGd6Ratic4BUZk.roa (hash: ypGUracRtSQozaYCuAAYU3ve4jp+TLuRdz+sdn4iE+c=)
2: oHkxBpr_ycmd5RjIJgYOGctHWmo.crl (hash: +uBjoU24m7CtR9fOKzufF+iXQ21DQeBtS/4LYvIaARU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHkxBpr_ycmd5RjIJgYOGctHWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:ca:bd:01:17:f0:b3:65:d9:dd:02:5a:be:08:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07931069affc9c99de518c826060e19cb475a6a
Validity
Not Before: Oct 3 19:01:45 2026 GMT
Not After : Oct 4 19:01:45 2026 GMT
Subject: CN=6bce457fb96aded4b0f7abe1303e9a23ee83cd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:15:80:1e:5e:fd:b9:ad:f6:5b:bf:ac:6b:
48:1a:74:5e:5b:7a:7c:27:b9:4b:4d:9e:c3:c8:9d:
98:25:b8:10:d9:36:63:18:7f:0b:71:84:cd:ac:4f:
38:93:fb:48:65:a9:66:2e:f7:eb:ee:fd:50:9b:de:
2b:00:9c:13:39:0c:5f:4c:45:4d:b7:6a:5c:b7:a2:
88:c7:4b:fb:a9:67:ff:58:4d:1e:be:fd:a2:39:fb:
21:0a:ed:8a:33:78:35:27:82:94:5d:29:54:96:64:
19:72:b9:88:d5:3c:20:58:02:d1:97:5c:1e:74:71:
95:e5:27:70:2b:a9:8d:82:67:ff:09:3b:54:a6:32:
a6:8e:96:29:ed:dd:25:bd:d5:11:f0:8d:44:1b:f6:
cf:d6:e3:b2:70:c4:55:4c:19:c5:70:6a:54:db:5b:
65:ef:9f:44:b9:83:df:1d:f7:6f:7f:66:a3:a3:e0:
88:6b:ab:ca:70:05:72:3c:e6:ac:bc:ca:4e:96:71:
04:8b:ad:71:17:7d:ea:bc:25:69:cb:fc:97:6e:af:
b1:85:cc:cb:43:97:2f:f3:b4:77:a3:ff:cb:4e:9e:
e5:22:a7:66:5c:de:76:06:2b:ec:cb:98:b7:82:e0:
0c:d4:d1:2b:2c:f2:33:36:62:1a:ab:dc:c6:c4:a2:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CE:45:7F:B9:6A:DE:D4:B0:F7:AB:E1:30:3E:9A:23:EE:83:CD:43
X509v3 Authority Key Identifier:
keyid:A0:79:31:06:9A:FF:C9:C9:9D:E5:18:C8:26:06:0E:19:CB:47:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHkxBpr_ycmd5RjIJgYOGctHWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:26:76:1d:d0:c6:82:80:7b:22:ac:ae:3f:0c:88:9f:9e:24:
5a:84:a6:11:78:12:7c:eb:d7:92:6d:af:28:b5:82:06:d1:0f:
6a:18:df:ee:16:ea:6b:d3:6a:bf:63:4f:82:39:22:00:c0:6c:
18:fe:fc:af:84:88:1c:9b:b0:d7:d7:f0:7c:5c:39:8e:ef:68:
39:0d:ec:b0:b3:cc:95:4b:b8:48:31:a8:1a:d6:bd:7c:a8:b4:
52:cd:22:9f:81:04:55:68:71:ba:e6:ed:3e:89:44:b1:1d:34:
c8:d8:1f:d1:d8:9b:1e:ce:7d:a9:c1:10:98:a7:d7:45:58:de:
57:29:d8:61:15:e5:cd:b6:f7:af:bf:1a:35:8b:56:9a:86:a9:
f2:e9:a6:f2:fb:20:89:59:43:db:03:98:da:e8:50:a9:51:b4:
5f:1f:94:a4:c5:f4:71:a7:08:0e:02:34:00:f4:3c:a4:35:c2:
b3:05:d0:d3:25:36:48:c6:55:03:d1:97:20:6a:24:85:b5:f3:
e9:52:65:63:b7:2b:bb:1a:07:74:fc:f7:42:0c:b2:f7:c0:36:
07:53:00:27:27:41:5c:77:31:6d:51:21:29:91:4c:56:f8:2d:
6c:e1:53:34:d5:e2:62:b6:35:be:ec:81:e3:22:3f:51:a7:8f:
c4:64:d3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:37:16 2026 by rpki-client