Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft
File: OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft (raw, json)
Hash identifier: anL0KQyonSZQHCJW7uNslpUDcWdoxBTewm4qZIDqShE=
Subject key identifier: 59:76:46:88:57:38:25:65:F0:B2:72:F2:4A:66:94:36:23:C6:AE:C1
Authority key identifier: 3A:A5:18:71:0D:03:97:2C:75:A1:76:DB:C2:B9:97:38:80:D0:8C:9F
Certificate issuer: /CN=3aa518710d03972c75a176dbc2b9973880d08c9f
Certificate serial: 01A1DA94566FF83636CB12A01F07E69070BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft
Manifest number: 016F
Signing time: Sat 14 Nov 2026 15:01:56 +0000
Manifest this update: Sat 14 Nov 2026 15:01:56 +0000
Manifest next update: Sun 15 Nov 2026 15:01:56 +0000
Files and hashes: 1: OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.crl (hash: 9IlKUKOW9iZrkfXKS6hcRqU8mw3QktLm6w5x3SS6fIg=)
2: lGUSShaLZbHrG2hxXfbd3gujno0.roa (hash: cC+BsnEt29P3BJfc+K3wjvfhKLVQR7wZcV1TURDbdTs=)
3: naOdqcYODmRtxOcy9Qc1k89TSYc.asa (hash: xGnv4cIxdw0NhIR5zzNkuvrK8dWoa3n0RqBgikLm7Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:94:56:6f:f8:36:36:cb:12:a0:1f:07:e6:90:70:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa518710d03972c75a176dbc2b9973880d08c9f
Validity
Not Before: Nov 14 15:01:56 2026 GMT
Not After : Nov 15 15:01:56 2026 GMT
Subject: CN=5976468857382565f0b272f24a66943623c6aec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:b7:23:60:43:4d:1e:e6:c5:68:7a:8a:22:
04:bf:e2:7e:33:cc:d8:1a:0d:46:60:08:08:f1:0a:
03:bb:52:03:ef:03:2b:d9:47:59:ec:7f:ab:6e:95:
27:66:20:66:10:40:85:30:5a:e2:20:e1:99:76:ef:
77:3e:f2:04:51:c3:26:c0:61:d2:fb:41:d8:f9:4a:
ca:1b:f0:f1:db:6b:06:3c:73:3c:e9:6f:0c:5e:9f:
04:e0:07:0a:5c:c1:17:3e:e7:9b:96:3a:10:24:95:
94:0b:90:4c:4e:3f:71:6c:a2:39:02:2a:fa:29:8e:
dc:8f:37:f8:bd:c7:f8:80:22:92:c4:9e:b0:b7:cd:
d1:51:c4:d0:07:bc:8a:40:f6:82:e0:b0:b8:f7:d8:
de:af:94:0a:7d:11:a1:ac:f8:e7:32:cd:e8:e3:bd:
ae:ac:4c:51:8e:e7:74:b7:95:99:ae:02:ae:b5:2c:
bf:0f:7f:71:9e:9a:fd:b1:01:48:f8:ee:6f:bd:37:
16:9a:96:cc:c4:1e:7e:bf:58:a5:b4:b3:b5:ac:de:
c5:95:cb:35:33:bf:de:55:b9:7f:c7:bf:1c:ae:5e:
80:37:17:9c:8f:01:91:37:fc:a3:fa:f9:83:3c:30:
cc:8c:e7:4d:ab:4b:36:e5:da:0d:9b:50:ce:65:68:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:46:88:57:38:25:65:F0:B2:72:F2:4A:66:94:36:23:C6:AE:C1
X509v3 Authority Key Identifier:
keyid:3A:A5:18:71:0D:03:97:2C:75:A1:76:DB:C2:B9:97:38:80:D0:8C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/OqUYcQ0Dlyx1oXbbwrmXOIDQjJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:14:af:ab:9d:ef:b2:49:a3:ab:36:b5:c6:cc:be:dd:d7:7e:
3a:50:7d:9c:17:d5:7d:3c:f0:89:fb:6f:b7:58:cb:4a:43:5c:
98:f4:9b:78:94:bc:90:8d:2f:d4:79:5e:bb:12:63:4a:57:37:
4f:a1:fb:9d:49:e0:4c:da:8b:b2:c6:57:02:a0:5a:09:59:60:
96:89:1d:18:54:ae:6e:3e:f0:c3:1a:39:64:04:dc:9f:fd:ce:
4c:06:3f:70:e7:55:84:24:38:a0:44:c3:3d:ec:ad:05:89:26:
be:4d:5d:a2:3e:3f:49:7c:8b:f2:eb:c7:2c:76:0d:3d:16:91:
12:ae:d9:c1:4c:67:9a:6a:d5:0e:97:94:81:51:8c:57:57:dd:
4d:fa:73:22:12:7a:2c:6f:b4:24:8c:53:a9:03:ce:97:85:4d:
de:e4:17:c0:b3:7b:59:8c:9c:27:f0:bb:3f:17:97:a8:83:f0:
88:0a:27:55:41:93:40:9f:65:48:60:dc:9e:26:79:f8:dd:5b:
45:9f:f8:4a:5d:47:35:5a:c4:a7:54:90:62:5a:db:52:ac:5f:
ae:b5:3c:2c:54:ae:51:4d:9b:68:9b:b8:e0:46:89:f0:af:1c:
af:dd:95:8d:2b:85:36:a3:e0:13:9c:d4:1e:70:a9:69:18:7c:
8e:c4:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:52:38 2026 by rpki-client