Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
File: OJwDADZ1arjNrJIrGvI3vOE2fOA.mft (raw, json)
Hash identifier: dL0Orl8hsAtX5kqTwH5oia/pYxh1c+Y3AW1dT/HKszU=
Subject key identifier: 63:76:E4:3E:C9:8E:02:AD:51:EC:18:8B:37:BF:31:8A:5E:60:A6:F8
Authority key identifier: 38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
Certificate issuer: /CN=389c030036756ab8cdac922b1af237bce1367ce0
Certificate serial: 01A0D15BC8DCC686A6776BE2DF0732A7A8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 03:00:48 +0000
Manifest this update: Thu 24 Sep 2026 03:00:48 +0000
Manifest next update: Fri 25 Sep 2026 03:00:48 +0000
Files and hashes: 1: OJwDADZ1arjNrJIrGvI3vOE2fOA.crl (hash: 9wqTRGSIyivNbQL+CbcujY3mgPT/BYboW9HeXsfPa/g=)
2: UDNnbwScWIceduT3mK8HBVvLzOg.roa (hash: vhtxGUgVNJ9daTmq66lTJXKGFzwiSTw9nac1gcWaxBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:c8:dc:c6:86:a6:77:6b:e2:df:07:32:a7:a8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c030036756ab8cdac922b1af237bce1367ce0
Validity
Not Before: Sep 24 03:00:48 2026 GMT
Not After : Sep 25 03:00:48 2026 GMT
Subject: CN=6376e43ec98e02ad51ec188b37bf318a5e60a6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:e4:03:5b:80:2c:9f:26:dc:30:d9:ca:7e:
4f:24:b4:83:81:53:2b:fb:ae:f7:94:87:ec:3c:03:
31:72:5d:ad:e7:e1:b1:11:90:15:6c:65:c8:4b:d7:
84:80:33:53:3d:43:ce:cf:09:c7:ee:17:6f:7e:9d:
c4:55:71:69:17:1f:bf:98:8d:90:79:60:17:ea:55:
23:8d:cd:e4:5c:fd:0f:02:7e:d8:b0:8a:d6:b0:65:
f5:17:81:f1:3c:8f:c7:63:d7:82:5d:4d:70:20:72:
48:cb:ea:36:da:a3:47:3e:69:ae:f1:4d:d0:30:71:
d4:ba:89:29:29:64:d2:dd:0b:92:4a:04:be:55:e8:
88:fd:7a:c6:3e:45:56:b5:3a:c4:6a:e3:6d:bf:92:
72:c4:75:fe:46:16:fa:d9:93:be:6d:42:5d:52:c6:
68:c4:0f:46:00:18:c4:fd:94:f2:88:9d:80:e8:2e:
71:b6:1b:ae:ad:05:75:37:8f:83:5c:9e:ed:24:c8:
ee:84:27:88:1d:12:bc:70:f1:f8:82:e7:fc:5a:9f:
1a:7d:e3:c5:38:b2:fb:42:e9:cd:3f:a3:39:d9:6e:
4f:82:d9:ea:d1:65:6c:35:12:3f:33:1c:93:4a:ce:
13:0f:fa:40:0d:cd:4e:83:7c:97:c0:5e:fb:a9:1e:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:76:E4:3E:C9:8E:02:AD:51:EC:18:8B:37:BF:31:8A:5E:60:A6:F8
X509v3 Authority Key Identifier:
keyid:38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:27:30:dd:1a:3a:21:6a:fe:f1:ac:6e:6f:73:2b:c1:24:9a:
cb:d9:7b:38:76:04:83:11:d0:62:80:db:18:54:0d:47:a4:18:
f0:47:ff:df:86:3b:ad:84:ab:f2:a8:d7:6d:5c:c0:06:89:f5:
49:1b:8d:03:60:a3:87:a7:d7:88:c3:fa:80:6b:9e:68:0b:b5:
98:51:0e:dc:c9:ce:14:6b:6e:7b:2b:fd:29:10:b1:93:5d:7c:
f1:3d:a1:93:66:dd:46:ff:83:86:65:23:47:48:50:e5:ca:f3:
6d:ab:59:28:37:8f:1c:c8:44:22:2e:1a:7b:60:a9:40:ef:d6:
b1:e1:2c:36:19:e0:f8:4b:d3:59:d4:c3:b8:68:3d:4e:7b:40:
42:35:97:81:6e:9f:4c:25:fc:a6:ad:45:9b:06:77:fb:e5:84:
e9:bd:fd:1e:15:16:3c:57:fd:24:b3:41:bc:7b:fe:e7:0d:8f:
f8:ac:77:22:b8:5a:00:a4:71:53:ce:34:96:cc:16:1f:66:6e:
0e:39:92:da:1c:4e:08:8f:8c:ab:7d:be:b6:de:56:68:f8:72:
96:5c:3a:cd:38:fb:e3:6b:45:eb:bb:4a:17:8a:45:b6:07:bd:
44:5c:be:fa:35:6c:f5:54:8c:d7:5e:94:19:03:01:5d:23:05:
2b:07:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:59:54 2026 by rpki-client