Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: BaN6TXzPRrbNWSwri4LiZUQnS+/GEZ5MQgW+eLwTlUg=
Subject key identifier: 0C:70:2B:29:66:2C:15:56:E3:39:53:27:6C:26:11:05:F5:B6:DD:CD
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 019E1F47A02F5AB9CCC4F469DED2BAEA44E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 101C
Signing time: Wed 13 May 2026 03:00:48 +0000
Manifest this update: Wed 13 May 2026 03:00:48 +0000
Manifest next update: Thu 14 May 2026 03:00:48 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: 8BQaPY1J6GrXUcuidmPh08c89o4rRLTZH0wbYH3sj9I=)
2: cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa (hash: kFvba9VnGvbidEsHHI8Wcjcp/+eUykc2W3uRbNK02kM=)
3: qjdtJXvKqrFdakYUQsqmx-Vy5fY.asa (hash: 2+W615O+Y4gCKbasO+JnvmCUxJ0u10AqlRNALnO9hbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:a0:2f:5a:b9:cc:c4:f4:69:de:d2:ba:ea:44:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: May 13 03:00:48 2026 GMT
Not After : May 14 03:00:48 2026 GMT
Subject: CN=0c702b29662c1556e33953276c261105f5b6ddcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:b1:65:fb:7c:2d:47:7d:c8:c7:91:d7:64:
34:14:cf:9f:71:6f:6b:00:b6:26:2f:55:d0:2d:4d:
5a:75:bc:21:9a:09:a5:01:50:38:dc:dd:0f:cf:d2:
b0:5e:7e:5d:c9:98:df:6b:8b:71:41:0c:f1:df:6c:
a2:30:20:3d:70:2f:c8:53:31:57:de:f5:e3:ae:54:
5c:47:d8:3a:94:8e:6c:82:5d:22:5f:4e:57:fc:c1:
c1:d0:df:40:ec:9b:a2:15:15:ff:49:d0:70:65:ca:
4b:21:71:6d:40:c5:be:95:07:13:32:00:78:4c:fa:
39:be:c4:8e:59:d6:66:6d:29:0f:4d:09:8e:8b:1a:
eb:c7:86:5f:79:b3:11:52:73:1a:17:c4:9d:a1:d3:
10:fa:50:fd:ac:95:96:80:72:ba:35:a9:fa:8d:fa:
3d:28:19:14:f3:d5:63:f1:54:81:b5:bb:87:74:b6:
a9:a7:fd:20:c3:f4:70:4b:50:e4:4b:b7:03:81:25:
b4:25:34:4d:f4:11:9d:06:3a:2e:12:02:20:9c:d5:
3f:60:b9:d3:9b:b0:48:35:0f:7b:14:7e:a8:24:12:
89:7c:1d:31:2d:a5:31:a1:3a:d5:7c:3c:fe:d8:a8:
26:3e:8d:dd:d8:ad:22:5d:4c:12:34:d1:7e:8d:83:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:70:2B:29:66:2C:15:56:E3:39:53:27:6C:26:11:05:F5:B6:DD:CD
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8a:06:df:f4:87:2f:6d:aa:e4:20:de:91:75:70:80:d8:ad:
d2:9b:ef:9b:6a:c0:1f:79:ef:28:b3:03:2f:c8:bb:8c:31:9f:
47:37:30:67:81:18:dd:4e:73:b2:ff:58:a0:6a:0d:07:25:0c:
41:8d:60:44:f6:87:f9:cd:84:3b:76:02:5a:9b:14:ca:53:f2:
c8:39:3c:0f:4a:f0:e6:58:6c:a8:07:15:36:bd:be:9f:a0:f5:
a9:ce:bd:a6:7b:3c:7f:44:b1:30:87:57:f6:1e:66:01:a8:35:
36:d8:c3:29:4d:25:89:c8:e7:6c:76:4c:54:e3:0b:bb:ac:ab:
8c:8d:b0:5c:1f:0c:41:61:c2:e8:e0:ca:c0:ba:aa:c0:94:48:
06:df:c5:05:2f:d2:7a:6a:42:1d:13:82:d6:3c:66:37:b8:34:
12:d4:87:af:ad:b4:9a:3c:cf:98:72:1b:32:be:fd:71:c3:d4:
a6:fb:a7:62:ac:ca:bc:56:09:52:46:a2:86:61:16:db:c2:a0:
be:48:fb:49:df:47:56:b8:d4:7d:af:c8:f2:43:3f:f4:73:67:
30:ae:b6:06:e8:7f:f9:4d:54:03:a1:d8:fd:d9:2a:69:d0:5d:
b0:c7:a6:30:39:05:24:70:98:e9:eb:af:00:1d:ea:b1:c6:27:
02:01:f5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:51 2026 by rpki-client