Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
File: 0OhNbWqe7eaC7xtcePGz8KMxORE.mft (raw, json)
Hash identifier: bHvuHpHU+xZHtYewstWRFZke1F5yJ2OODFH+KeLXbuc=
Subject key identifier: 95:C6:74:4F:6E:13:6E:0C:07:AF:BE:2E:C0:C8:26:13:4C:DD:A5:E5
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Certificate issuer: /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial: 01A1DE39572BE18102E4788E08A442791611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
Manifest number: 0CCB
Signing time: Sun 15 Nov 2026 08:01:02 +0000
Manifest this update: Sun 15 Nov 2026 08:01:02 +0000
Manifest next update: Mon 16 Nov 2026 08:01:02 +0000
Files and hashes: 1: 0OhNbWqe7eaC7xtcePGz8KMxORE.crl (hash: xt3Hj/9C4OeV2+Pe8bA7ieZ4yynx95L1WIBgFsOpaWU=)
2: iG53FLKNGEtI7O_-qbJCuOHpkfY.roa (hash: btGtfmg9m2lBCFlLyRHCIrg7YepxRxneqBtZfQH7n/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:57:2b:e1:81:02:e4:78:8e:08:a4:42:79:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Validity
Not Before: Nov 15 08:01:02 2026 GMT
Not After : Nov 16 08:01:02 2026 GMT
Subject: CN=95c6744f6e136e0c07afbe2ec0c826134cdda5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:c8:3f:70:07:5e:8c:88:85:ff:92:63:0e:
42:4b:db:e7:af:d6:e9:64:c8:d3:d9:97:52:8a:e3:
6f:da:1a:52:6f:13:af:4b:6d:ba:8d:56:c9:8a:0e:
39:8a:93:b1:e4:43:7c:c2:ec:eb:8f:e4:14:1d:f3:
52:1d:3d:01:53:bc:9c:69:20:95:b3:ab:04:9d:45:
50:f5:b9:33:b5:95:28:ae:0f:e5:e7:cc:a1:e5:28:
17:39:0b:f9:f0:9b:c0:a5:cd:2b:d0:01:04:59:0f:
08:41:a1:4f:37:7e:44:4f:a1:b5:eb:ad:9f:29:2e:
10:0c:f3:28:cc:eb:dd:73:00:04:3c:6d:0f:ba:36:
3b:15:f8:ed:76:e6:2d:8e:3e:6b:0b:16:e3:6b:a2:
12:21:ee:52:68:8a:0e:fe:0f:7a:35:fe:93:97:9d:
d0:5a:fa:1c:dd:12:94:7c:1f:10:e4:8f:b9:04:cb:
96:fb:bb:65:25:d2:cc:9b:bb:e4:02:a0:13:3e:50:
18:67:01:68:e9:24:3a:ef:97:16:6a:eb:42:7d:93:
ed:15:5e:22:09:84:9b:88:00:ae:90:1b:f1:10:bc:
f2:5c:37:c2:4e:b5:2b:85:5e:f9:97:73:6e:7c:91:
98:81:55:d0:cc:93:51:a4:35:2d:84:d6:53:d5:1a:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C6:74:4F:6E:13:6E:0C:07:AF:BE:2E:C0:C8:26:13:4C:DD:A5:E5
X509v3 Authority Key Identifier:
keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0f:59:85:9b:80:67:26:e1:1c:e2:6c:bd:26:b3:1d:ae:c7:
ba:f4:35:42:fb:3e:13:e0:5b:b4:8f:78:18:c8:3e:03:e9:97:
99:6a:cd:0c:33:f4:c2:c1:1f:bd:82:68:1e:cb:ef:55:5f:84:
3d:9c:37:04:e4:09:de:c4:11:3a:31:77:96:b4:2a:37:b2:b1:
11:59:6e:d0:bb:f7:5a:2b:cc:59:96:e9:2b:23:19:1f:16:47:
02:33:00:62:19:2b:09:b1:81:9a:75:f8:4c:1c:37:b6:2f:89:
b6:93:d9:23:46:fa:8b:fb:30:bb:74:01:1b:74:2c:46:6d:e7:
7c:ad:e6:34:b4:32:51:7e:ec:e0:79:60:89:6b:a6:e3:3d:59:
fd:0c:45:4f:68:a5:3f:08:48:47:3f:64:dd:3b:65:8d:71:0d:
fa:52:af:3e:ad:e2:56:04:04:09:9d:32:2c:e0:69:ba:66:e3:
58:17:6c:1e:69:aa:b7:7b:85:83:b1:ac:98:52:c2:e2:9d:93:
6f:14:cd:6b:8a:d2:72:8f:75:c3:9e:91:ed:19:45:da:4f:f7:
79:79:ee:3b:42:ed:62:8e:d7:03:3f:53:a4:5d:33:80:05:10:
18:41:38:77:fd:1c:46:28:da:de:f1:cc:73:38:1a:cb:2f:9d:
3a:bf:dd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:57 2026 by rpki-client