Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: HSGPLuYhuj7eIc2d0xG+S+68p9Am6QaecUMHs/tAW20=
Subject key identifier: 33:8C:05:EF:4B:58:3C:89:AC:31:42:2F:F6:23:5C:7E:F6:BD:9A:5E
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 01A1DEDE1CD9321B52FF004FCAAFAFDE08E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 1B15
Signing time: Sun 15 Nov 2026 11:01:00 +0000
Manifest this update: Sun 15 Nov 2026 11:01:00 +0000
Manifest next update: Mon 16 Nov 2026 11:01:00 +0000
Files and hashes: 1: HB0mAnXIi3cdGWwy23VMRe8l_zI.roa (hash: wqAuEMrBfGTMifeXpjAaOd2i68cV7lsD/gjIWcG8fPk=)
2: Nz5W3BN4ZjHHnfTwDK9mx25OOMs.roa (hash: 4X4JU2IkrH3hnMIsqC1O1nM7TPhLWSgyIr/mX4pbhgU=)
3: T2t_xfVZXRNbtvRxNe7dXC_zNrE.roa (hash: x9eWNVsjLMUdwTZXlgJ2q2p+tC/R6jk5R7CPFpe0Gtc=)
4: Vo_SaDBYFaFpGX5Y-m7VqahrFaM.roa (hash: kjlra/8PMQflhmLgkMss2nkJdtFhet74M/BhTvxUY+E=)
5: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: 1onrOoO27f8NT9I5iNKs1HjGrY6GC07/ABAf0ph+YRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:1c:d9:32:1b:52:ff:00:4f:ca:af:af:de:08:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Nov 15 11:01:00 2026 GMT
Not After : Nov 16 11:01:00 2026 GMT
Subject: CN=338c05ef4b583c89ac31422ff6235c7ef6bd9a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:f3:98:a4:ff:29:bb:2d:98:33:8c:eb:42:
71:87:a9:92:2a:95:d6:8f:11:a7:32:f5:72:1b:6d:
c3:9b:b7:21:00:7d:c7:bf:e3:f8:19:cd:24:b1:39:
ba:93:19:85:c3:bb:a9:22:a4:6f:2c:6b:e5:6d:75:
34:5e:90:ae:08:b2:05:3e:d7:d9:00:40:d1:5e:6a:
85:06:5b:61:ff:03:3e:42:d4:a7:67:d6:73:9b:bf:
b1:cb:02:ab:ba:24:4b:2b:8d:6f:93:39:c3:5d:61:
74:3f:30:9a:7a:d0:c7:21:4f:7c:a0:a8:1b:f2:66:
79:0d:3b:da:4f:e1:27:98:09:ca:4e:90:1b:de:2d:
0a:0a:68:1f:b3:b6:98:43:22:df:c7:b9:15:72:c4:
64:d0:c8:54:d5:a8:7c:6b:7c:62:d2:f5:4e:c4:82:
a2:3e:e7:69:d8:fe:c9:65:4e:21:fc:8d:ee:f8:4a:
11:ba:8a:be:70:a6:3e:d5:08:cf:8e:37:09:a9:6d:
79:b4:28:c6:33:59:2e:f4:c0:ca:0d:71:e2:96:07:
c6:77:37:82:03:f0:a3:61:1f:6e:0c:43:3a:f0:08:
03:b5:44:be:91:41:60:81:04:ff:1b:c1:85:99:c9:
7e:26:1a:13:cf:14:3e:cc:01:fa:f3:11:65:42:d4:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8C:05:EF:4B:58:3C:89:AC:31:42:2F:F6:23:5C:7E:F6:BD:9A:5E
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:10:62:a0:cd:6d:5c:94:10:65:72:c6:22:86:40:29:20:f9:
55:db:70:d5:17:52:76:09:82:4b:dc:ce:2a:c6:40:ab:f5:66:
fe:10:05:e2:02:29:ca:44:25:ad:11:be:80:b4:25:86:ef:a5:
a9:28:4c:90:9f:7c:d6:8a:dd:1a:e2:78:08:dd:65:d1:24:d4:
38:97:a0:f7:92:09:85:63:30:fc:58:70:2b:f8:c1:e1:0a:ca:
9b:9f:45:57:6e:f3:d7:b3:ac:73:62:c9:a0:7c:01:5f:08:5b:
23:11:14:15:b5:2c:c5:7f:a9:54:04:37:10:f0:9a:ae:ee:c7:
a6:ac:b0:3b:40:a9:5a:3a:ab:68:bf:d6:c4:c4:ae:ef:9d:22:
75:e1:9c:ac:aa:60:c6:05:6d:78:13:94:65:48:47:28:0d:4f:
26:ba:b7:64:8b:24:fd:47:68:4e:fa:49:ae:e4:e2:4f:f0:68:
96:62:09:95:89:6b:48:9c:0b:d4:b5:2d:81:ce:d4:d6:03:0f:
b8:6f:93:a1:fd:a4:0f:08:01:ff:a6:6b:42:44:e5:20:fc:29:
fb:ff:1e:f3:ad:0d:ac:d8:65:80:f2:0b:1c:12:3c:31:90:67:
17:7e:d5:d9:54:cb:75:2d:d2:0a:93:5e:73:d6:15:b2:24:84:
be:a8:76:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:43:08 2026 by rpki-client