Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: XAX7Zkq6O1feByJOkhw4KHYIUgiejczAJ/SQiaiG3Dk=
Subject key identifier: 8D:AE:EF:ED:56:D9:E9:AB:C9:BA:BE:EB:68:91:94:FC:67:E8:82:D0
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 01A0DCF282ABF84DF5A97F6513ECA390B6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0F95
Signing time: Sat 26 Sep 2026 09:01:15 +0000
Manifest this update: Sat 26 Sep 2026 09:01:15 +0000
Manifest next update: Sun 27 Sep 2026 09:01:15 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: gS0/UHULRYSclk5mMH3iDy2/7qjUQXPyqmp61ytIjgU=)
2: UFBgy25q3CguK3nxfqwvatepW1g.roa (hash: m6Q6Vl1NfvutDppfODeVLNYdAatkJRM43X4ANyU2Y1Q=)
3: opow8uP9IKSNWNqVgii4cTwADfA.roa (hash: +b/EweslPo3iR9ssvZX7aiO4HVHajEP37IxcMi09yZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:82:ab:f8:4d:f5:a9:7f:65:13:ec:a3:90:b6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Sep 26 09:01:15 2026 GMT
Not After : Sep 27 09:01:15 2026 GMT
Subject: CN=8daeefed56d9e9abc9babeeb689194fc67e882d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:d7:26:d9:87:9e:8b:21:63:65:51:a1:cb:
0c:2b:a6:55:b5:ab:67:42:b9:a0:0d:2c:af:5e:55:
93:4e:9a:6b:5b:e9:98:c1:6d:b3:f1:38:94:12:c8:
5b:1a:ea:9f:8d:2e:78:c1:c7:90:5c:e2:01:a1:52:
4b:ed:af:b7:1f:ed:4f:d9:1c:6f:b6:4e:b0:c9:4d:
46:83:2a:43:80:0a:bc:cd:9b:33:56:2e:3a:4f:72:
09:e4:94:11:af:47:b4:95:a4:30:ff:3d:27:d0:7f:
84:a2:69:3a:b7:84:04:24:68:92:67:7f:6f:d7:be:
96:89:13:7c:89:77:c3:9a:25:17:0e:0a:fa:ed:ff:
95:12:52:6a:a6:c2:5a:9f:5a:98:19:a9:cb:d2:f2:
e8:ce:24:82:f6:68:10:d6:cf:40:5b:59:16:19:57:
5e:b5:3f:f6:f8:1c:6a:dc:9a:0f:4d:cf:9e:47:fc:
f0:eb:58:d4:69:94:8d:23:d8:4f:5f:ee:06:8c:9c:
72:5d:68:03:dc:28:61:bb:e3:a8:9a:53:75:ea:93:
7e:76:bf:b9:b4:2e:75:f2:68:b2:be:ce:25:27:00:
d0:26:44:46:39:59:16:44:33:2c:c9:d5:ff:04:f6:
74:fe:08:59:90:a7:73:55:3f:69:c5:8f:05:3a:fb:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AE:EF:ED:56:D9:E9:AB:C9:BA:BE:EB:68:91:94:FC:67:E8:82:D0
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:72:30:92:1c:f1:cf:36:65:07:1c:f9:e3:09:aa:2f:8e:2b:
ea:0d:ab:2c:08:92:df:a8:1e:21:0f:17:e3:3e:1a:f0:bf:3d:
09:61:2a:80:85:48:5e:c8:31:f2:f3:95:a9:6c:fa:c3:50:8f:
e4:69:99:7b:ea:ac:d4:eb:19:22:6b:68:b7:0f:3c:e5:53:03:
dd:f3:e8:cc:29:e8:e4:94:ee:87:90:0a:9e:2a:c7:19:6d:a4:
a5:82:79:80:96:89:07:db:3b:1f:b4:da:e0:39:54:c4:f1:8c:
ed:b5:a0:c4:d4:1e:80:4f:61:d6:a6:54:62:54:6c:02:3d:e1:
2d:ed:f9:b9:85:65:56:3d:c7:55:17:fa:92:f6:b2:a0:69:71:
00:37:c8:db:8d:a3:10:2e:38:cf:04:7a:91:14:26:01:cb:50:
55:25:8c:b6:83:08:e4:40:90:da:21:0b:ab:56:01:78:1e:05:
93:60:7b:a9:3f:53:52:66:d4:7c:c4:9f:f6:e4:ab:93:70:25:
f4:d7:67:5e:80:06:61:64:da:c5:07:fd:a4:2f:78:e3:54:84:
0c:95:52:70:7c:cf:36:7f:3b:f7:8d:3c:11:35:d6:59:f5:0b:
ef:da:22:fa:d2:da:29:ea:f4:4a:51:a4:71:4e:c7:c0:e0:c3:
9f:78:f9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:43:59 2026 by rpki-client