Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
File: OxiO137kpO6Av-8i-pD5LCGJF0k.mft (raw, json)
Hash identifier: b1c2EgJcb/XGguIXiJy+CUV6fZqKfgAyQfPSIbLQWTA=
Subject key identifier: 9C:35:32:5B:88:55:65:A7:38:2D:08:8F:E3:66:6B:D7:6B:0B:1D:33
Authority key identifier: 3B:18:8E:D7:7E:E4:A4:EE:80:BF:EF:22:FA:90:F9:2C:21:89:17:49
Certificate issuer: /CN=3b188ed77ee4a4ee80bfef22fa90f92c21891749
Certificate serial: 01A0E7781FB03B4C78AE4D6A5DC0EBCE2859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
Manifest number: 012C
Signing time: Mon 28 Sep 2026 10:03:24 +0000
Manifest this update: Mon 28 Sep 2026 10:03:24 +0000
Manifest next update: Tue 29 Sep 2026 10:03:24 +0000
Files and hashes: 1: OxiO137kpO6Av-8i-pD5LCGJF0k.crl (hash: ZXUHR96Hiox8ulXaKuHBldCoO1dQyG2TczJ2XS4mPnU=)
2: RuW8-PgIfibhBoqNocX_t7ptPOE.roa (hash: zV6LrJuAjMC8MbTSFPKsE8qN0Xu/5M2QJ39L5RQKY/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:78:1f:b0:3b:4c:78:ae:4d:6a:5d:c0:eb:ce:28:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b188ed77ee4a4ee80bfef22fa90f92c21891749
Validity
Not Before: Sep 28 10:03:24 2026 GMT
Not After : Sep 29 10:03:24 2026 GMT
Subject: CN=9c35325b885565a7382d088fe3666bd76b0b1d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:4e:3f:1b:94:30:87:61:d4:84:6f:7d:6a:
9b:98:9f:97:ab:92:34:f8:2e:3f:05:52:92:6d:3d:
a1:b2:5a:ea:3d:06:25:d2:13:19:3d:07:c2:2e:d4:
87:15:43:99:7f:3b:d3:d4:c6:0e:d4:41:24:5b:d7:
11:47:93:b1:2a:86:1c:0c:c7:b4:dc:c2:f0:05:74:
13:46:c0:03:62:7a:83:40:2e:b0:50:1c:0f:7e:d7:
71:57:ef:4f:27:33:76:ee:fc:93:4c:f1:e6:6b:aa:
7b:85:8c:a0:e8:fc:d8:69:a8:9f:e0:71:1d:2b:97:
78:5b:97:2b:90:67:08:bd:a3:a4:df:ff:cd:7d:8b:
ab:78:74:c3:19:58:52:4d:98:1c:ff:67:fd:56:73:
c0:ca:0c:3f:d4:96:1e:cf:16:ba:13:92:67:83:53:
5f:47:20:f3:68:45:d1:27:d0:01:83:ac:e5:85:fd:
a4:68:dc:fa:76:11:7a:3a:c6:21:6b:64:b1:e3:95:
97:ff:5a:94:cf:87:70:37:37:41:cf:76:38:78:5a:
17:07:fa:67:a1:1b:56:35:0a:af:00:70:7b:6c:e8:
0c:0a:11:c4:67:e6:bf:92:2a:87:9d:0f:f9:1f:2a:
0c:f5:a8:a9:46:ea:13:70:32:ab:3d:e7:48:21:f0:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:35:32:5B:88:55:65:A7:38:2D:08:8F:E3:66:6B:D7:6B:0B:1D:33
X509v3 Authority Key Identifier:
keyid:3B:18:8E:D7:7E:E4:A4:EE:80:BF:EF:22:FA:90:F9:2C:21:89:17:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:aa:bd:e6:7a:d6:33:48:2a:82:51:9e:1a:ac:52:fa:b1:e9:
96:72:05:22:c7:20:b1:9c:f2:d4:c5:9a:e1:1d:c6:76:17:03:
da:c0:37:b6:4e:03:17:88:4b:2a:49:97:db:39:3b:8c:8f:b9:
94:cf:b7:44:4d:6c:ee:54:4e:ee:e1:8d:8a:86:0e:6f:98:fb:
47:82:4c:af:26:96:ca:f3:28:fd:5c:39:d8:a1:05:3e:f6:86:
bb:ef:9e:a1:38:f3:bb:f1:96:88:aa:df:31:f9:cd:e6:93:4c:
c8:a2:c9:ac:0b:0e:70:63:2f:b2:f9:fd:56:b9:9c:eb:f4:8c:
f0:fb:fa:c3:0a:22:ad:31:75:46:ec:85:05:e4:88:b6:16:9a:
a5:b4:8d:ee:97:e8:96:47:cc:56:b8:54:cc:1c:dc:8c:90:d9:
8b:0a:12:b7:01:52:d6:f3:b2:f1:45:f8:ef:ad:a9:b8:5e:9a:
c4:24:39:8b:ec:92:e2:09:93:5a:f0:99:fb:47:e2:42:27:ea:
0e:28:82:13:97:9c:e7:eb:a9:e4:94:45:47:1c:7f:e1:5a:45:
dc:42:67:07:5d:16:e0:e8:47:1a:84:d7:83:25:60:d0:26:b9:
81:dc:10:27:fd:f3:d6:54:b8:aa:d6:6b:fe:ec:f0:ea:e0:8d:
30:94:c3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:25:11 2026 by rpki-client