Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
File: OxJehmsjfJZ06em3qavRi1fXHxA.mft (raw, json)
Hash identifier: gFCIJBsIGypTrfCcl/MFVev03yJZNuPjKpCz0zbXo8M=
Subject key identifier: 47:D8:94:1A:B5:48:0F:6F:57:A2:3E:CB:37:EE:8C:9A:04:C1:3E:49
Authority key identifier: 3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
Certificate issuer: /CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Certificate serial: 01A0CFA3C774AF5FB22B365406F845B3A30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 19:00:12 +0000
Manifest this update: Wed 23 Sep 2026 19:00:12 +0000
Manifest next update: Thu 24 Sep 2026 19:00:12 +0000
Files and hashes: 1: OxJehmsjfJZ06em3qavRi1fXHxA.crl (hash: VHNJ2/JzL1EJPZId2a9gEF5qsCDSFSoPsZ0e8gccIBc=)
2: Xhri0AVup-iOcfJupA4s7w3cpYc.asa (hash: 4eaUl5vtgL4q0oqF8vNtbDWxyFZPR38UGBwc1PJc8Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:c7:74:af:5f:b2:2b:36:54:06:f8:45:b3:a3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Validity
Not Before: Sep 23 19:00:12 2026 GMT
Not After : Sep 24 19:00:12 2026 GMT
Subject: CN=47d8941ab5480f6f57a23ecb37ee8c9a04c13e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:76:1b:df:da:56:9e:ad:75:a4:ed:7e:59:
36:ce:26:6e:b1:7a:1b:c7:8d:45:58:ee:2e:5f:b6:
c9:8d:04:7a:48:db:43:ae:1b:c3:76:f7:5f:da:55:
02:ad:f1:db:0e:4e:2d:4c:a3:51:5d:72:49:b7:38:
89:74:02:f0:72:a2:93:78:e9:1e:92:ab:ea:cd:8b:
39:2a:8e:75:43:91:c9:24:ad:5f:54:2f:31:10:7c:
d5:f4:be:f8:64:7a:28:70:23:56:5c:cd:d4:a4:e5:
70:3b:53:e7:1e:4a:61:91:a2:08:e9:d3:06:63:1b:
10:56:53:3a:bb:f3:6f:67:70:95:51:0d:e1:ec:99:
ba:06:b9:7b:a7:82:c8:0a:89:4f:1e:ef:6b:05:9b:
41:87:e7:28:b7:80:19:49:14:db:e3:7d:32:3f:93:
5d:1d:18:04:51:a4:1b:d1:83:c6:11:0b:64:36:f5:
40:90:97:62:ae:7f:41:dd:28:7a:9e:a5:79:3a:97:
ef:62:22:5d:c9:d4:89:df:5c:58:cd:7f:07:3a:ff:
7e:3c:49:69:68:b5:ff:c7:77:1d:1f:f0:7e:ca:c6:
70:01:cd:9b:f4:96:76:8a:59:57:ee:fa:a1:81:ab:
d6:84:9e:8c:e2:ff:48:33:11:3b:cc:6d:ac:73:73:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D8:94:1A:B5:48:0F:6F:57:A2:3E:CB:37:EE:8C:9A:04:C1:3E:49
X509v3 Authority Key Identifier:
keyid:3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:57:a0:38:bd:10:5b:ad:da:a8:3e:3c:9c:6a:48:79:92:db:
19:83:58:74:aa:3c:6e:8f:58:84:ae:95:5c:c7:49:ec:26:3d:
24:3a:7c:8b:14:96:39:5e:68:13:d5:de:fa:db:c0:5f:33:99:
c3:14:ae:34:a8:b6:b8:c9:bc:fe:6e:60:43:fa:34:44:75:1c:
9c:76:6d:29:b1:c8:3b:9f:99:24:4b:16:ff:5a:9d:38:a2:e8:
eb:16:cc:77:89:0f:c7:dc:42:1b:54:9d:f4:e0:96:eb:e6:d8:
65:f6:8a:a1:c8:b1:1a:28:1f:96:77:ce:f2:56:3b:f8:1b:62:
f1:e2:63:da:34:13:05:7e:6d:79:2a:f2:83:7c:9a:3e:49:51:
dd:87:ee:60:32:b1:f1:c3:d6:6d:5c:1e:6f:44:54:e1:e3:11:
41:12:19:2c:dd:a1:72:79:ea:f6:24:3d:25:6c:c0:03:61:a7:
68:49:f6:c6:8c:fe:fd:18:30:99:ce:69:1b:dd:2c:44:45:7b:
0e:f2:1c:5a:64:54:70:59:b0:77:fc:2a:77:81:16:d7:29:36:
15:3c:ac:ed:ff:90:57:96:eb:80:2c:da:97:2e:2b:e7:70:11:
70:43:31:05:fe:90:ce:42:09:f2:0d:41:5f:ce:9f:9e:c8:3f:
cd:79:09:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:42:39 2026 by rpki-client