Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: SjnjnDKibVlOnrBx6mchFAZ+nCx2sR8F6LA/6OsdUQE=
Subject key identifier: 8D:7F:66:3F:06:B0:5F:4B:0E:45:3C:6A:B9:C6:AA:A8:97:FD:48:4C
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 01A1046E06FF6338F312C9E44E927AE64D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 0BA3
Signing time: Sun 04 Oct 2026 01:01:21 +0000
Manifest this update: Sun 04 Oct 2026 01:01:21 +0000
Manifest next update: Mon 05 Oct 2026 01:01:21 +0000
Files and hashes: 1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: JGScnLCfxJJs2sGBhOkl1Vv+44ARnu1ePFblIKMWoKg=)
2: futCv-J21MxYYna1NlT0XMLEUxQ.roa (hash: Nuw/WTHENdY0hVuqEP9gOdFLaQ350WDyvFQ78Xtrdks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6e:06:ff:63:38:f3:12:c9:e4:4e:92:7a:e6:4d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Oct 4 01:01:21 2026 GMT
Not After : Oct 5 01:01:21 2026 GMT
Subject: CN=8d7f663f06b05f4b0e453c6ab9c6aaa897fd484c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:4f:92:22:ca:7d:ef:df:c9:8c:92:14:76:
31:26:92:b4:6f:77:75:f9:80:fc:c4:f3:5a:1f:b4:
20:a6:1b:7c:37:dd:50:e3:c3:c2:5b:54:b2:1f:a0:
82:51:e2:d2:12:a3:45:c0:13:88:79:e2:ba:df:ad:
94:75:8a:7a:15:19:d9:9d:5f:94:4d:6d:37:2b:d2:
8f:de:f2:2a:e9:0d:a3:de:f9:c4:0e:23:d0:94:05:
0b:0f:cb:d1:2d:5d:7e:d2:27:85:7d:7c:fd:d0:3b:
de:e1:d2:c4:73:20:e1:ff:bf:12:4c:d9:7b:ef:07:
c6:44:55:04:17:ee:df:35:4f:bb:a9:49:26:4a:8e:
25:7d:b2:97:aa:d5:bc:8e:ec:20:07:25:e2:c1:88:
56:1e:4f:ec:70:65:e2:48:49:d6:3f:b8:af:1c:87:
da:7a:39:cd:d6:7d:89:20:c3:60:5e:ad:ba:0b:58:
39:12:9a:f8:9e:7b:b4:15:a8:36:cb:c5:95:a0:87:
56:94:44:0d:73:5b:b4:71:ab:22:64:d1:54:c6:4b:
e4:94:53:68:c2:c0:1f:ef:d6:25:c3:ad:4d:49:76:
d7:aa:a5:cd:f2:ab:6b:d2:d9:db:ba:94:ff:60:0f:
7a:de:13:90:dd:bb:db:99:58:57:95:e5:e7:a9:83:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:66:3F:06:B0:5F:4B:0E:45:3C:6A:B9:C6:AA:A8:97:FD:48:4C
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ef:c4:84:33:cc:17:5d:23:0f:a5:64:9e:25:8a:66:e9:30:
63:81:ae:94:97:1b:17:4b:45:a6:ed:a3:55:e5:00:88:36:5a:
59:b7:a3:61:55:5e:9f:85:31:9a:5a:3a:da:10:0b:7f:98:1e:
fa:b2:2d:ee:b3:e5:33:2a:7e:90:3a:fe:7b:93:1d:3f:d1:1e:
5a:6b:2f:34:c3:20:f8:de:69:5e:6d:c0:6d:46:1e:e7:f9:ae:
ac:b6:c5:2e:13:ea:7b:bc:10:d1:02:52:4e:5c:99:41:64:08:
8e:39:33:01:a5:80:55:3f:5e:ed:b4:11:90:f4:39:39:91:85:
07:f4:fa:39:6e:a2:f3:51:9f:9c:65:ac:6f:40:9e:e7:77:60:
2b:9c:9c:8d:3a:75:e4:ba:98:06:8d:39:4c:b8:e2:66:56:e4:
b1:cc:f7:34:b3:1d:7c:84:0a:84:2f:08:81:2a:ea:eb:5f:a2:
ea:8e:bd:b6:20:e5:3d:ca:f4:bb:99:07:8c:0c:4c:3d:6b:0c:
37:9d:43:e0:80:f7:05:e4:f2:8c:bc:78:58:0c:e7:c7:40:4e:
d1:75:fb:5e:90:a3:6c:8d:52:95:36:55:77:de:4e:8f:2f:d3:
0d:a6:0c:fe:7c:ad:27:b6:97:ee:ce:34:8d:f7:ef:d9:0f:80:
f5:ee:9e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:51:57 2026 by rpki-client