Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier: ABMSoQ5j5rnpXaZDC+sSKSSBwopCQ4JyzNzrCo26jYU=
Subject key identifier: 97:E4:D3:17:EC:B4:29:E6:43:70:05:17:10:89:4A:A7:A2:91:05:AE
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 01A0D45DF70C2C09AFAE6A2B2F7ED1D08C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 17:02:02 +0000
Manifest this update: Thu 24 Sep 2026 17:02:02 +0000
Manifest next update: Fri 25 Sep 2026 17:02:02 +0000
Files and hashes: 1: CA-MzpWp9Dx3CrADIEvJQZw4E7E.roa (hash: cFLJlMvt+zbdg7Xdn6mpst0pNhdveJ/oPmHZEhv3T5Y=)
2: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: SoG/98OHp3YsATn2aEMV47VnyfoR6wrxfyXrL3GGhw8=)
3: YbU5wyUqLqEHDmRvFcj5yxlUnP4.asa (hash: kL358urGtKDFubZ/xfiLlds0XnPgCtrLaQBg7SppGts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:f7:0c:2c:09:af:ae:6a:2b:2f:7e:d1:d0:8c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Sep 24 17:02:02 2026 GMT
Not After : Sep 25 17:02:02 2026 GMT
Subject: CN=97e4d317ecb429e64370051710894aa7a29105ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:67:7c:21:ba:c7:a7:a0:ac:53:6e:21:e9:
10:20:8c:5a:61:7b:d3:17:42:7e:ba:f8:45:f7:9d:
46:74:db:44:f1:19:26:51:0a:d1:cf:21:1c:e7:4f:
70:7b:2a:9f:0c:08:ec:6e:0a:24:02:2c:b0:2b:9d:
aa:91:5a:5c:57:af:d5:c2:b2:cb:4d:93:49:cc:7a:
c5:78:fc:29:72:8e:41:28:0a:2d:43:3a:30:2d:bf:
e7:e8:d6:1b:67:51:ff:63:5f:fb:21:ce:0a:ec:9a:
7d:d2:e9:e5:3f:dd:61:a8:91:1e:61:80:71:dc:3f:
19:1c:f2:ec:95:8e:82:53:7f:25:3f:86:5e:4a:26:
63:44:4f:26:7b:bb:ca:28:49:fc:36:96:50:8f:b4:
c7:19:73:8d:31:59:12:3d:8d:2c:8a:55:d3:6a:73:
d3:f4:57:d8:f4:f7:07:b5:96:6a:63:91:5b:f7:3a:
6b:cb:7f:c5:f4:bd:42:4f:c6:1d:5d:6f:b1:37:12:
a7:0f:37:6c:ef:09:fb:4e:d3:bc:9d:33:f6:e4:65:
5d:23:27:9a:c2:ba:fb:be:d2:3a:53:f6:42:89:4d:
ea:31:ba:65:9a:a5:eb:7b:27:1e:0b:11:65:dc:9b:
d0:4f:f4:a7:65:a7:e0:ab:dc:d4:48:7b:10:b8:5a:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E4:D3:17:EC:B4:29:E6:43:70:05:17:10:89:4A:A7:A2:91:05:AE
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:71:66:0c:10:7c:0c:62:4b:37:a4:37:a9:57:84:b7:76:3c:
cf:06:36:c1:52:1a:fe:ea:0e:5e:55:00:cd:78:65:85:58:5b:
2a:4b:dd:6b:f4:e2:e7:2e:c8:d2:4d:a7:40:90:1a:0a:55:27:
2b:a8:16:ba:b3:30:07:ab:d7:2d:67:3b:99:71:f7:af:30:6c:
30:72:a8:b3:3d:e0:fc:f3:af:2a:24:ab:b2:3a:39:15:c4:51:
b4:76:da:a6:d9:88:af:9a:f2:1f:d7:cd:52:43:2d:f0:2e:47:
ea:f3:71:7d:ef:b7:4d:70:6b:c6:0b:ea:73:35:a5:e7:62:38:
76:98:76:d7:d1:70:e7:37:c6:4c:ef:fd:a3:43:84:43:cb:af:
a7:21:97:84:2d:be:cb:5f:fa:f1:fb:5a:9b:64:dd:f5:95:08:
8f:37:f9:1f:0e:0e:bb:bf:21:d8:fd:17:64:8c:10:e1:b7:1b:
b2:4e:f0:73:5f:4d:15:66:38:d4:48:b4:f6:b9:5a:fd:6a:b5:
d5:3d:d2:dc:14:13:1c:9e:90:72:59:94:75:26:87:28:9a:8c:
4e:50:ab:e4:6d:1d:90:c4:f4:38:fb:7e:86:4c:61:cd:56:f8:
08:6c:c8:cd:f0:83:f3:0f:e1:7f:89:27:7c:af:0c:2a:47:ee:
14:b0:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:18:32 2026 by rpki-client