Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
File: OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft (raw, json)
Hash identifier: kixO3UUg9k79MxG2tFACARLLFZs2mPnnJQiuBvb98a8=
Subject key identifier: 37:4C:43:43:50:10:94:9B:42:ED:C3:01:21:68:7D:B0:EA:C6:39:93
Authority key identifier: 39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
Certificate issuer: /CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Certificate serial: 01A0DD9879DDBAAF386D8D33C52FAE6CD11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
Manifest number: 11F5
Signing time: Sat 26 Sep 2026 12:02:32 +0000
Manifest this update: Sat 26 Sep 2026 12:02:32 +0000
Manifest next update: Sun 27 Sep 2026 12:02:32 +0000
Files and hashes: 1: OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl (hash: ji3L7QNBmbjvGqgoAF7fH78n9cCMJY4p+2jVTwezt3Q=)
2: qvZ-nKf7EFh0r3KXcsWmv_aLkqs.roa (hash: XaQIlBTlE+Jhvgae5CyaS1DgkFx27OpIcetptyKOkgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:79:dd:ba:af:38:6d:8d:33:c5:2f:ae:6c:d1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Validity
Not Before: Sep 26 12:02:32 2026 GMT
Not After : Sep 27 12:02:32 2026 GMT
Subject: CN=374c43435010949b42edc30121687db0eac63993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:0f:c9:ae:79:55:70:7c:2b:fd:df:b6:e2:
ed:9b:4a:86:2b:79:7e:76:02:16:4c:1d:af:27:6c:
96:89:d6:27:19:f3:55:82:a6:6a:c2:47:26:94:4f:
f3:6b:89:23:e7:dc:e2:ef:47:b7:39:35:1f:99:fe:
05:e4:5b:f4:4a:e3:07:8c:5e:3c:86:7c:e7:52:ec:
4e:94:9c:ce:2c:74:b3:ea:48:6d:c7:dd:34:8f:0d:
08:62:be:c8:b3:ff:8f:7c:95:a1:13:f5:38:94:d1:
b3:5a:75:6e:79:d3:00:6f:f1:c2:59:e7:dc:74:97:
a0:c7:19:13:b3:03:9a:2f:fd:f0:ac:a0:0d:63:55:
72:67:b3:d4:e6:80:68:41:ac:00:83:f9:7c:fb:91:
12:b7:dd:29:c3:91:ec:1b:a6:13:88:c8:dc:a6:ac:
e9:01:61:d2:0f:f9:18:c8:20:37:8b:3f:e6:e1:cf:
75:e9:00:e8:9f:93:f9:86:c4:d1:aa:0f:69:2f:ca:
e6:7e:30:3f:31:72:7a:01:1f:bb:03:6f:38:6c:de:
86:57:0b:74:b8:38:3a:ae:01:91:6e:e6:07:d5:a4:
f3:9e:c9:1e:e4:4c:f5:63:48:74:76:0d:4e:ce:a5:
66:27:7a:4e:99:b2:51:7d:2e:d1:6e:28:a7:b3:3f:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4C:43:43:50:10:94:9B:42:ED:C3:01:21:68:7D:B0:EA:C6:39:93
X509v3 Authority Key Identifier:
keyid:39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0d:87:d1:1b:74:45:0a:b2:92:3a:d5:17:45:cb:98:51:39:
0c:87:b5:3c:f7:55:35:f3:0e:3d:b2:d6:78:e0:eb:67:3a:a0:
f8:b2:6c:09:0d:13:71:7c:92:6d:33:95:be:98:48:d8:90:6d:
50:0e:e3:d7:e3:03:66:08:01:b2:e8:74:45:29:ba:e6:64:94:
48:19:6c:8a:95:b6:a8:3d:76:c8:ea:75:06:e5:20:e8:f2:b3:
f4:cb:a5:07:8c:bf:29:33:13:08:53:a4:2e:de:29:02:a8:f3:
d3:af:ce:45:6c:68:28:70:ee:bb:1b:42:c5:96:76:43:26:3c:
ae:33:1e:b2:63:e9:d1:e3:b3:0b:7d:b4:fc:d6:a2:f5:44:c9:
48:db:b8:d6:7f:99:aa:ec:ad:2b:32:f9:62:9e:04:33:d4:ce:
e2:02:10:10:3b:6c:c1:24:c1:f7:72:4c:86:19:5f:8c:05:11:
5a:5e:d3:d8:2b:af:bb:02:d6:32:da:0d:44:1e:70:f8:27:be:
b7:87:0a:b2:8c:29:03:5d:2f:9c:ce:66:b2:28:1b:3f:fe:05:
59:0f:91:e0:52:3e:d8:d3:5b:f7:37:00:e0:4f:8c:12:31:75:
b8:f8:02:2b:4d:f0:d9:61:a7:f2:37:ce:2d:4a:bb:a0:0f:9f:
8f:69:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:39:24 2026 by rpki-client