Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: 65v4pV/Xj7+tt0UMRGXcAfinVd49WJJxle5GRncl0xo=
Subject key identifier: E2:BA:1B:5F:A7:1C:DB:32:D5:84:B3:09:B3:51:80:B5:5E:FC:D9:E4
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 019F9022D5AF75F802D6C65D5D2DB58483E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 10DB
Signing time: Thu 23 Jul 2026 18:00:29 +0000
Manifest this update: Thu 23 Jul 2026 18:00:29 +0000
Manifest next update: Fri 24 Jul 2026 18:00:29 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: 0N+1uGI32V0dd5x8E0AY5ni7EyOETuvBc7HfzpXwcOw=)
2: cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa (hash: kFvba9VnGvbidEsHHI8Wcjcp/+eUykc2W3uRbNK02kM=)
3: qjdtJXvKqrFdakYUQsqmx-Vy5fY.asa (hash: 2+W615O+Y4gCKbasO+JnvmCUxJ0u10AqlRNALnO9hbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:d5:af:75:f8:02:d6:c6:5d:5d:2d:b5:84:83:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Jul 23 18:00:29 2026 GMT
Not After : Jul 24 18:00:29 2026 GMT
Subject: CN=e2ba1b5fa71cdb32d584b309b35180b55efcd9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:1f:a6:75:30:b4:9f:81:6f:ed:c8:1a:28:
b8:f3:da:18:1e:e8:cc:67:5f:b6:55:dc:62:3d:17:
53:b0:e3:8d:74:41:1e:db:5a:21:97:ee:f7:da:f8:
f2:c5:19:15:0e:cd:95:2f:a7:e2:59:3a:e9:58:c3:
d4:2f:d4:86:f7:89:5a:8d:d3:2a:04:bf:ec:a9:fe:
f0:66:97:6a:0c:c7:8e:bf:02:05:1a:60:9f:88:4d:
b1:4c:26:22:de:a6:7f:40:77:9d:00:4f:1c:b5:c3:
1e:0b:95:54:49:ed:a3:05:e0:a5:98:9c:5d:cc:ba:
ca:63:d7:f4:f4:e0:af:ca:a3:26:e5:6a:70:48:01:
03:c9:1f:97:4b:09:ac:95:05:66:a3:fe:75:7a:0f:
d7:77:66:2a:d3:c0:56:ad:2a:77:d6:9a:88:96:8c:
93:c2:f6:45:da:75:cd:5b:a8:48:eb:90:49:92:f9:
c5:96:5d:66:ca:f0:e2:29:eb:20:7b:70:cc:98:af:
67:b8:0f:62:13:eb:56:c7:1e:a7:6f:e2:2b:95:ce:
ca:95:0e:16:a7:73:fc:fc:e7:98:be:a4:7d:6e:20:
a0:da:48:7b:8e:c2:e6:36:75:65:8c:9f:bb:ba:08:
a2:b5:f7:3c:1b:81:1e:3f:af:17:ce:6c:d0:fd:82:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BA:1B:5F:A7:1C:DB:32:D5:84:B3:09:B3:51:80:B5:5E:FC:D9:E4
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ea:75:ab:e3:6c:24:7c:04:d6:cc:79:36:f1:7c:61:0b:5b:
24:7c:94:39:68:71:f2:ea:10:06:d6:e1:2a:0c:0c:9a:87:c7:
07:a3:07:fd:c6:ae:aa:39:f5:d5:4a:ed:2d:c8:22:3e:09:34:
6e:29:33:2d:5d:ef:ca:63:d8:58:a5:e3:1b:f4:eb:dc:d2:96:
63:45:03:95:3a:98:ea:81:51:ea:65:96:a2:6c:71:dc:48:f1:
b6:0f:74:f2:cb:12:23:27:d3:dc:66:6f:b7:8d:98:b8:f0:c6:
63:ad:d4:6f:63:a8:10:dd:b6:2e:bb:f8:45:57:51:b8:90:83:
92:99:9b:5f:03:6c:ee:ef:91:d6:b1:d9:a1:e1:1f:40:af:85:
12:13:1f:74:01:93:f4:75:10:7c:fd:8c:1f:72:d9:c9:db:86:
4a:ce:ad:18:89:9f:1f:b7:77:70:c2:a1:7e:d5:53:5b:44:56:
b7:4c:40:da:00:1a:37:b3:54:9f:00:5f:1f:05:63:79:6e:65:
e9:53:2a:bd:b1:84:8c:6b:47:cf:fd:de:45:e5:13:d5:a8:d4:
5e:b0:e3:91:e3:56:2b:38:e5:86:6d:f8:b0:90:75:e0:fc:39:
62:9e:9c:58:61:d9:d5:97:0e:13:c6:1e:77:87:e4:14:3c:75:
38:bb:05:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:12 2026 by rpki-client