Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
File: OjLwwcjLEx0TZbOPCKTltYLiW0E.mft (raw, json)
Hash identifier: RAYFHrkaqYTenPuZMNUAtuwAqd2M7558bWPw4XkREfc=
Subject key identifier: 08:9A:8E:9B:BF:30:B9:F5:FA:87:A7:29:A8:0C:5E:2B:6C:7E:1C:E6
Authority key identifier: 3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
Certificate issuer: /CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Certificate serial: 01A1DE71373E58E9A5CC9E7A8B3AA1A2CC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:02:03 +0000
Manifest this update: Sun 15 Nov 2026 09:02:03 +0000
Manifest next update: Mon 16 Nov 2026 09:02:03 +0000
Files and hashes: 1: OjLwwcjLEx0TZbOPCKTltYLiW0E.crl (hash: Os3qadJdcr/ehF25Bl3n0gA7pfcunNI41yS2JgMqQgc=)
2: SyE1IAlXPkJZ9_iqXKQIoEOXgAs.roa (hash: s6NzmaozxO+4w9NIyythzaRrJ0Zd5+4CkcBBGqgurQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:37:3e:58:e9:a5:cc:9e:7a:8b:3a:a1:a2:cc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Validity
Not Before: Nov 15 09:02:03 2026 GMT
Not After : Nov 16 09:02:03 2026 GMT
Subject: CN=089a8e9bbf30b9f5fa87a729a80c5e2b6c7e1ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:78:c7:be:62:55:94:14:67:6c:b0:65:10:
54:f9:52:74:5e:39:7a:e3:2a:15:ea:e9:77:01:cd:
7d:28:c1:32:c6:7e:18:d9:de:ca:b9:02:d2:91:3b:
7e:46:10:70:ec:31:da:82:a0:e5:39:50:db:1c:8b:
bf:d9:3b:b6:82:75:14:0e:89:dd:23:a1:4d:da:77:
37:48:da:8f:8e:05:9f:1b:88:3c:06:41:09:98:df:
5c:ae:f0:d1:e9:81:6c:13:db:86:67:f3:09:ef:77:
c7:57:3e:5e:c8:45:e2:da:dd:2c:b0:4a:6e:65:1b:
94:58:88:70:7c:7c:d9:2d:0b:37:1a:fe:fe:70:33:
79:67:06:f4:34:10:48:b1:82:35:bd:6d:64:c2:0c:
3f:74:e9:a1:fa:d9:76:1f:37:f5:1a:3d:8d:36:47:
30:4a:69:c2:9d:c6:d3:29:68:d6:fb:d7:60:41:a6:
cb:2c:a0:cf:a2:66:40:84:d6:48:31:e2:81:bf:cb:
0e:52:39:e1:f7:b5:00:5a:fb:74:66:f1:ff:14:9d:
52:64:70:1f:c1:30:42:da:53:5e:37:74:27:4b:94:
26:f5:57:06:03:00:cc:48:90:fd:96:43:f0:75:7c:
00:1b:ca:20:ff:73:36:a5:92:56:86:71:6d:4a:97:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9A:8E:9B:BF:30:B9:F5:FA:87:A7:29:A8:0C:5E:2B:6C:7E:1C:E6
X509v3 Authority Key Identifier:
keyid:3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f7:ce:4d:35:26:ff:0f:e1:98:51:09:f3:71:2e:a8:ea:88:
68:75:2a:ce:69:0a:84:d4:0e:ec:a7:be:0d:46:8f:9f:b0:ff:
12:9e:03:30:db:b1:6a:88:f4:5e:f3:8d:3e:46:4a:db:22:34:
02:ab:cb:e7:d6:fe:9d:da:fa:cf:69:29:19:52:a5:1f:28:b1:
d5:b4:78:20:fc:7d:53:77:9d:8a:92:99:50:c0:d7:b3:73:bb:
b7:d3:a7:bf:fe:bf:7f:69:64:d6:e4:02:60:d1:65:59:cd:a3:
03:01:a5:10:8d:14:5b:85:34:68:02:8a:46:02:ae:02:4b:7c:
02:3a:8a:53:58:4c:59:20:36:bb:a5:23:3a:82:d4:dd:6d:89:
49:cb:2a:81:bb:c0:0d:9c:20:31:15:c6:ea:96:58:bc:55:5f:
65:87:59:c5:ac:7c:45:a8:61:fd:60:20:48:94:4f:64:14:92:
c2:80:cb:80:21:1e:23:4a:71:58:85:37:01:ee:d0:70:a8:c0:
e3:8f:8d:1c:38:6a:4d:d2:77:ac:85:40:a0:37:7e:7e:1a:2b:
44:63:b0:1d:47:17:2f:ee:79:1a:03:8a:cf:c6:81:82:e0:15:
46:75:a5:40:58:33:7b:1d:0b:72:a1:9a:f6:d6:81:a2:34:ed:
e2:5a:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:55:20 2026 by rpki-client