Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: TFrr+HEwUhciGaifwIqG4pfQe9ylNm+zx114BQ9r8pw=
Subject key identifier: E5:89:5C:FB:43:DF:F6:4F:C4:46:8D:49:0E:9F:25:71:88:8E:79:C2
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 01A0D0B6B4CB9F3E61AF9C4A0B65613B9AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 1182
Signing time: Thu 24 Sep 2026 00:00:29 +0000
Manifest this update: Thu 24 Sep 2026 00:00:29 +0000
Manifest next update: Fri 25 Sep 2026 00:00:29 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: s891BRNEv6wEAeUbvpWoIHoiDSD4IEdIJvY+v7QjmQs=)
2: cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa (hash: kFvba9VnGvbidEsHHI8Wcjcp/+eUykc2W3uRbNK02kM=)
3: s148UHmTyL2I6MjySz-GFW3mNYI.asa (hash: a59MaIiFr2fa8TsMCT5CNyhH5jJOVRe6D3jxY/4FIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:b4:cb:9f:3e:61:af:9c:4a:0b:65:61:3b:9a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Sep 24 00:00:29 2026 GMT
Not After : Sep 25 00:00:29 2026 GMT
Subject: CN=e5895cfb43dff64fc4468d490e9f2571888e79c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fd:60:00:02:da:a5:4e:8a:e5:bb:c3:5b:0d:
d4:e4:a5:cf:4e:2a:18:ac:34:72:52:89:83:a9:2c:
e4:21:54:a7:4d:85:c8:5d:bf:3b:38:5c:b4:63:f1:
7f:f4:fa:13:3b:ab:bd:14:d8:3e:6f:75:62:d9:15:
12:e3:48:c2:4d:28:f1:db:45:73:20:bd:1e:c7:a3:
de:ed:b4:96:6d:b4:21:5f:50:f7:b7:bb:73:49:1c:
ca:e2:28:88:d5:51:64:c2:8b:d0:92:72:ae:8d:99:
87:f3:4f:a5:9e:9a:9c:6d:cb:fa:85:7b:94:45:e3:
31:b8:93:1f:ad:dd:16:0e:49:ca:f3:0c:84:a0:a8:
3d:f0:f7:b7:62:a5:48:3a:ec:b4:d0:9e:4e:d5:1e:
dc:fc:a3:e0:73:54:05:2b:c9:bd:df:47:10:26:11:
6c:ee:c8:1c:55:62:c4:00:af:1b:8f:44:77:6f:8f:
bd:35:d8:71:bc:29:9e:33:f9:88:b4:56:2d:73:ae:
67:56:87:b8:a5:66:51:45:7f:6d:cf:29:9b:d3:a7:
02:98:f0:7d:86:c0:b2:fa:3c:9f:2f:50:22:94:ed:
3f:53:3d:92:d1:67:a3:0e:05:6a:74:f6:c0:26:2e:
64:b5:7b:a2:bd:c3:44:4a:4e:7b:81:86:80:08:41:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:89:5C:FB:43:DF:F6:4F:C4:46:8D:49:0E:9F:25:71:88:8E:79:C2
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:63:0d:36:f8:1a:4d:05:7b:6a:47:26:79:60:b7:fa:69:e3:
73:32:eb:fe:bd:21:6b:d7:7b:b8:19:1a:ac:d5:66:4a:b8:5a:
85:12:e3:e2:0a:f2:52:80:d8:54:60:4f:c5:6d:2a:a2:f8:1f:
a1:0a:5f:66:ea:0a:4a:d6:4f:fb:61:bc:20:38:e8:2d:bf:a0:
1b:be:a6:d4:e0:ad:70:63:1b:ad:2a:29:e8:95:62:01:e7:40:
34:13:a5:b0:5b:1c:4c:ec:fa:cb:73:f5:38:e8:dc:46:46:ee:
0f:76:73:7f:2b:b4:d4:f3:ea:4c:8a:c2:af:99:bb:5a:0e:c0:
93:7c:48:93:a5:08:71:50:0b:64:0c:c3:08:23:4c:fa:59:87:
1a:d3:5c:09:73:d5:41:7a:98:d4:03:3f:a1:ba:55:da:4e:93:
c4:f5:a7:6d:fb:18:9a:2a:bf:5f:ae:e3:ac:5a:b0:c9:a6:a5:
b9:fe:d7:eb:01:49:bf:a2:24:54:5e:57:93:7e:a3:29:05:45:
a3:e2:69:1a:8e:50:f9:d9:40:ef:57:f1:73:3b:82:1e:ef:42:
55:cd:fc:87:83:12:9b:10:c9:ea:d6:a1:dd:8b:35:b7:11:8b:
80:99:12:67:cb:44:70:a0:4e:d9:d9:2b:78:07:6d:70:be:93:
29:b7:3b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:15:06 2026 by rpki-client