Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
File: OjLwwcjLEx0TZbOPCKTltYLiW0E.mft (raw, json)
Hash identifier: OsDndk7Lg/CF6xwR7ItEZdDHjRX2wW4+BFP+8n7N6R4=
Subject key identifier: 84:C9:5C:3C:7F:8D:3D:5D:11:7B:B9:42:56:E3:8C:C4:CE:F8:F8:DE
Authority key identifier: 3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
Certificate issuer: /CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Certificate serial: 01A0D5DD98C7628CB527F0629673855D7EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:04 +0000
Manifest this update: Fri 25 Sep 2026 00:01:04 +0000
Manifest next update: Sat 26 Sep 2026 00:01:04 +0000
Files and hashes: 1: OjLwwcjLEx0TZbOPCKTltYLiW0E.crl (hash: o6t5M/uLWmTeQpbIfRP74yLADFogKFkAfgfBsmW3mq4=)
2: SyE1IAlXPkJZ9_iqXKQIoEOXgAs.roa (hash: s6NzmaozxO+4w9NIyythzaRrJ0Zd5+4CkcBBGqgurQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:98:c7:62:8c:b5:27:f0:62:96:73:85:5d:7e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Validity
Not Before: Sep 25 00:01:04 2026 GMT
Not After : Sep 26 00:01:04 2026 GMT
Subject: CN=84c95c3c7f8d3d5d117bb94256e38cc4cef8f8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4b:30:a1:3f:2f:3e:dd:66:bd:dd:7f:5c:8d:
c3:8b:74:69:7f:4e:54:0b:10:bd:86:c6:ac:3e:8e:
0c:cf:86:5b:0a:af:40:cd:00:67:72:ff:f2:47:fe:
ea:42:64:c6:9e:94:1f:e0:10:25:67:10:90:41:a9:
b3:a0:c4:8b:e4:6b:df:3d:f3:01:f0:5c:78:fa:19:
c4:ee:b7:28:f5:14:51:7a:5a:18:81:c3:2d:a5:99:
a7:f6:72:7a:7c:30:ba:f6:6e:dd:93:37:08:b7:2b:
63:f2:05:a8:eb:b2:47:3f:b4:74:ae:bc:cc:f2:d4:
26:0d:9e:13:af:68:aa:68:86:db:a3:fc:ae:69:7c:
aa:76:f1:69:0b:82:97:04:84:1c:92:1d:1a:75:9b:
7f:59:62:35:82:16:52:7c:a6:48:9a:1e:84:ec:c8:
c6:d8:f6:31:b1:02:aa:b7:3c:14:e5:31:2d:37:1b:
6f:0b:db:cd:19:84:9d:a4:fb:48:39:03:60:3f:15:
45:05:0e:9a:ca:25:2a:e6:09:e4:ef:65:e0:95:65:
b3:b2:53:03:df:90:e7:d4:58:7b:e5:d7:64:e5:f0:
ab:c2:b4:05:d3:d3:8b:e6:e9:f9:09:f1:23:8e:d3:
f2:c0:3b:90:96:07:97:71:7f:9d:49:74:47:b9:c4:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C9:5C:3C:7F:8D:3D:5D:11:7B:B9:42:56:E3:8C:C4:CE:F8:F8:DE
X509v3 Authority Key Identifier:
keyid:3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0b:19:4d:ff:4e:50:d2:3b:2e:33:32:7b:79:50:4b:3b:c1:
f6:8e:40:bd:bc:de:f4:a1:fc:8b:4d:f7:f8:94:c3:4a:a2:fb:
82:25:91:fd:1a:7d:5b:9a:1a:fb:3f:72:91:b3:41:38:82:a3:
90:b4:01:c2:de:d3:1c:d8:02:46:a1:73:57:79:8b:c8:61:50:
21:ab:7f:a5:39:3f:7c:36:47:64:86:07:5c:19:5a:79:97:0c:
1e:39:1b:61:6a:14:87:71:a9:6e:4e:ee:8a:8b:2d:e3:ee:97:
55:52:8f:b5:6d:ca:f8:bb:a0:ea:e5:37:68:de:fa:91:e0:2d:
90:07:a8:ab:b7:10:33:c0:d4:cb:cf:41:2d:55:0a:f0:98:ac:
3b:0a:c5:44:24:34:fd:19:e1:0f:42:0d:bc:7f:95:4c:bf:c7:
0e:8f:24:c9:82:85:40:1c:f9:45:ea:74:3a:2d:1a:ca:14:7e:
a6:1e:3b:fa:26:e0:5e:01:b9:1f:d8:fe:35:9c:fd:f6:77:27:
cb:4e:c3:99:cc:15:66:37:27:c3:0b:09:34:3c:72:54:ea:7f:
58:c1:9a:70:73:6a:12:74:0a:6b:f0:d1:93:a1:02:68:68:8f:
8d:5e:8c:c8:c8:8c:80:d0:9a:40:4e:cd:bd:25:ea:50:d3:83:
86:9f:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:04:40 2026 by rpki-client