Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File: OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier: htCz6vrXp2f5vwoiLtKbMxZHaxqZ4HajAV6xpxPsTu8=
Subject key identifier: 51:9A:0D:44:16:DB:9F:9E:99:50:3B:94:56:81:02:B3:DB:5A:E6:0B
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 01A13B5BCC8882BC6E101548E9CDD0A85F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number: 1240
Signing time: Wed 14 Oct 2026 17:00:34 +0000
Manifest this update: Wed 14 Oct 2026 17:00:34 +0000
Manifest next update: Thu 15 Oct 2026 17:00:34 +0000
Files and hashes: 1: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: vIDwhw7XbZ5nTNk1m7KKmuobqHwyGP0L0PBw0VldlKA=)
2: TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa (hash: w2y72ko+lJjiVlRbZd4qD2G3W4qa+BLqf6Sn4G+/dow=)
3: XWcYfudW_fCjYcND3H407xe959o.roa (hash: hWyo7JRjc5zRnP54qNBVfiEpztNdLDDxrtX9abLg7Ps=)
4: rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa (hash: ng9lqabxlxHQ1G6hpIjPJfi43vHsrt3ed7Cyb0T70ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:5b:cc:88:82:bc:6e:10:15:48:e9:cd:d0:a8:5f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Oct 14 17:00:34 2026 GMT
Not After : Oct 15 17:00:34 2026 GMT
Subject: CN=519a0d4416db9f9e99503b94568102b3db5ae60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:8e:77:a2:fc:a8:2c:23:eb:1c:74:ba:1d:
14:4e:25:3a:b6:80:ff:d8:98:26:0d:04:7e:41:57:
ff:63:93:7a:0b:22:76:2c:3b:94:54:84:ab:6c:86:
37:f0:9b:3b:eb:03:ce:7f:65:a9:17:ec:58:74:1c:
65:11:43:f7:ba:e7:0a:38:df:c3:bb:27:1a:82:f5:
3a:d3:19:7c:70:0d:3b:c0:b7:d1:fe:70:35:7f:b9:
05:92:4c:f2:27:22:bb:e9:8e:a5:ae:ba:a3:e7:18:
8e:dc:c8:24:fa:a4:8f:64:65:cb:e0:d4:1a:7b:64:
40:b0:7b:90:b0:b5:3b:ac:43:a0:93:ba:c9:16:46:
52:c8:55:be:60:54:8e:1b:a2:90:88:69:c9:42:30:
41:d1:d5:df:ab:1f:92:8e:68:3d:ee:97:17:06:4d:
7f:ef:2b:a3:5b:f0:84:fc:a1:77:eb:42:51:ab:e1:
2f:21:18:8e:a4:d2:16:3d:a7:c6:dc:3e:6f:9d:49:
9d:4b:92:96:eb:ba:67:4f:fc:1b:4d:d7:6d:c8:b1:
cf:62:27:b0:fc:39:dd:50:9a:3b:08:26:7c:34:9e:
7c:f8:05:a3:8d:c9:67:83:d5:e0:c0:ba:50:7d:2b:
4c:9e:56:98:8a:45:85:c0:28:4c:ef:c5:92:18:fc:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9A:0D:44:16:DB:9F:9E:99:50:3B:94:56:81:02:B3:DB:5A:E6:0B
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:bf:05:22:15:c4:70:3f:0c:77:03:1d:4c:03:2a:94:a5:33:
5d:9b:f3:48:d6:da:0d:20:ca:c7:19:f7:1a:2d:45:15:c0:1a:
7f:8f:74:22:99:d2:af:36:6e:2c:8e:42:9e:06:e7:ea:9d:c3:
ba:84:35:e2:6f:e9:86:28:fe:05:1f:1c:89:06:98:f9:09:47:
2f:a0:8a:a6:c6:70:44:ae:9e:a6:cd:4f:b6:f1:a7:b1:88:34:
ec:11:cc:9d:f1:85:05:ae:69:ae:83:63:e0:58:65:6d:ff:c6:
23:68:63:f3:63:0b:31:b5:ee:4d:2b:fe:60:a3:7d:3c:54:ac:
f3:6a:41:5f:be:3c:84:14:ed:9b:6b:40:89:d5:46:5c:13:89:
0e:88:b2:74:1c:68:f7:ef:56:3a:5f:79:bb:09:f9:26:14:54:
32:01:68:51:db:6d:02:06:b5:f9:59:c0:12:ea:84:69:cf:0b:
85:5e:02:89:37:0a:61:39:ca:70:82:30:bc:7e:6e:a9:f1:13:
3d:58:92:26:02:b2:b4:c4:35:3f:86:5d:67:d4:32:3a:2a:8b:
de:9e:6c:89:be:b0:16:c7:eb:f2:83:dc:32:92:53:c4:ec:86:
74:d4:40:fa:ee:c0:0e:c5:7a:fd:40:08:27:a2:c2:5e:57:2c:
52:f7:e5:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE7W8yIgrxuEBVI6c3QqF9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMzQ4ODkyNTFlN2NiMTMzZTkwNmM3MDg5MWJhMWEwNDk1
ZWQ4NjAwHhcNMjYxMDE0MTcwMDM0WhcNMjYxMDE1MTcwMDM0WjAzMTEwLwYDVQQD
Eyg1MTlhMGQ0NDE2ZGI5ZjllOTk1MDNiOTQ1NjgxMDJiM2RiNWFlNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxiOd6L8qCwj6xx0uh0UTiU6toD/
2JgmDQR+QVf/Y5N6CyJ2LDuUVISrbIY38Js76wPOf2WpF+xYdBxlEUP3uucKON/D
uycagvU60xl8cA07wLfR/nA1f7kFkkzyJyK76Y6lrrqj5xiO3Mgk+qSPZGXL4NQa
e2RAsHuQsLU7rEOgk7rJFkZSyFW+YFSOG6KQiGnJQjBB0dXfqx+Sjmg97pcXBk1/
7yujW/CE/KF360JRq+EvIRiOpNIWPafG3D5vnUmdS5KW67pnT/wbTddtyLHPYiew
/DndUJo7CCZ8NJ58+AWjjclng9XgwLpQfStMnlaYikWFwChM78WSGPxFDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGaDUQW25+emVA7lFaBArPbWuYLMB8GA1UdIwQY
MBaAFDo0iJJR58sTPpBscIkboaBJXthgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMt
ODRmOWVkODdhYzMxLzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMtODRmOWVkODdhYzMx
LzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsr8FIhXE
cD8MdwMdTAMqlKUzXZvzSNbaDSDKxxn3Gi1FFcAaf490IpnSrzZuLI5Cngbn6p3D
uoQ14m/phij+BR8ciQaY+QlHL6CKpsZwRK6eps1PtvGnsYg07BHMnfGFBa5proNj
4Fhlbf/GI2hj82MLMbXuTSv+YKN9PFSs82pBX748hBTtm2tAidVGXBOJDoiydBxo
9+9WOl95uwn5JhRUMgFoUdttAga1+VnAEuqEac8LhV4CiTcKYTnKcIIwvH5uqfET
PViSJgKytMQ1P4ZdZ9QyOiqL3p5sib6wFsfr8oPcMpJTxOyGdNRA+u7ADsV6/UAI
J6LCXlcsUvflPw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:43:25 2026 by rpki-client