Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
File: OxJehmsjfJZ06em3qavRi1fXHxA.mft (raw, json)
Hash identifier: n9NL5d8S06k5Rwqn5/64kIs2J4HBq3M8DubMv6NfT+s=
Subject key identifier: 82:A6:8D:89:C2:B2:07:E8:1B:3E:C2:38:D3:82:82:90:F8:3E:59:6C
Authority key identifier: 3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
Certificate issuer: /CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Certificate serial: 01A0E106EF016D5297BCBC631EA357B46BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 04:02:02 +0000
Manifest this update: Sun 27 Sep 2026 04:02:02 +0000
Manifest next update: Mon 28 Sep 2026 04:02:02 +0000
Files and hashes: 1: OxJehmsjfJZ06em3qavRi1fXHxA.crl (hash: L6MZ0VOWkkGr+jR7yK+VIV7MpwAVfL/ZbuuWKl+lc8o=)
2: Xhri0AVup-iOcfJupA4s7w3cpYc.asa (hash: 4eaUl5vtgL4q0oqF8vNtbDWxyFZPR38UGBwc1PJc8Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:ef:01:6d:52:97:bc:bc:63:1e:a3:57:b4:6b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Validity
Not Before: Sep 27 04:02:02 2026 GMT
Not After : Sep 28 04:02:02 2026 GMT
Subject: CN=82a68d89c2b207e81b3ec238d3828290f83e596c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:04:5a:5f:c6:e5:50:14:24:2e:59:7b:f8:
84:7f:c5:76:03:35:6e:a4:b6:56:1b:06:84:a5:29:
71:32:54:dc:53:82:a2:c4:12:9e:ee:e6:3c:5e:fc:
a5:81:55:f3:25:48:92:9c:a2:43:5d:dd:5f:eb:5a:
67:be:9f:09:cf:56:ff:28:74:d6:17:8d:9f:32:f4:
e8:a7:fa:ea:a3:6f:04:14:08:7e:06:1f:1d:73:8f:
d5:e8:1d:bb:17:b4:b1:3b:53:ae:2c:cc:72:11:cd:
a2:0a:97:35:cd:16:71:bd:95:c9:8c:7c:42:5f:e0:
6a:14:77:67:03:5f:49:bb:cf:3f:cd:78:62:ed:b7:
7d:fc:6c:d9:7a:9a:cb:74:8a:57:23:1a:0c:fe:49:
8c:b9:9b:69:6b:b1:52:1c:a0:dc:0b:3f:19:03:52:
c0:c2:de:d5:13:3e:ac:00:b6:17:b5:66:fc:1e:32:
fe:fd:75:04:1d:67:ea:c7:aa:24:e6:fe:ab:69:e1:
0e:cb:86:9f:41:c2:8e:51:57:fd:59:c2:43:ae:93:
db:90:75:43:40:cb:10:89:4c:4f:ba:58:78:bb:11:
f9:eb:dc:b1:00:20:64:df:b0:8c:eb:44:06:96:e8:
ca:f4:d5:1d:ea:04:f9:a5:56:03:19:d9:75:e6:ff:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:8D:89:C2:B2:07:E8:1B:3E:C2:38:D3:82:82:90:F8:3E:59:6C
X509v3 Authority Key Identifier:
keyid:3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bc:db:9a:25:67:06:2a:8d:19:b0:31:a9:8a:92:1f:0b:a6:
39:23:27:af:5d:cd:90:e9:5a:a9:3f:d3:9d:db:fe:d1:07:f2:
50:1e:f0:a6:b1:21:a4:eb:ec:68:5d:67:7f:5f:13:aa:d7:70:
78:96:c6:b6:ab:85:eb:df:57:88:6e:fd:4c:20:48:a1:ba:be:
c1:5d:3b:55:ca:de:95:7e:c9:9f:cf:73:6c:22:2f:7d:e2:98:
5e:cc:20:49:49:7b:5d:93:c8:03:a9:4c:f3:3e:ca:c7:e5:79:
07:69:82:37:6e:12:34:2b:02:dc:96:80:28:55:ca:60:08:64:
84:22:ff:9a:fd:44:df:da:f4:01:6c:4e:a4:86:fe:3c:32:46:
5a:62:80:bb:7f:80:d5:c0:b4:6b:04:ed:0b:26:15:95:9f:f4:
71:af:2d:f9:6a:af:03:c1:cc:96:6b:54:24:60:ae:87:12:40:
81:5a:e7:dd:65:f5:5c:0e:85:53:5a:2d:51:28:da:54:d9:be:
5b:13:c5:66:4e:39:fe:ad:0c:3c:ed:6e:66:9c:28:f4:b6:9e:
89:59:12:a2:91:da:77:23:31:0d:8e:4c:36:75:73:09:45:45:
6c:3e:ee:ca:23:57:dc:19:5d:39:9f:0f:b4:8e:a6:ed:b6:2e:
09:92:9c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:00 2026 by rpki-client