Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
File: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft (raw, json)
Hash identifier: 72cyc+78KBGTdv4D462MhjiaEh+Mr9AlY+TfmgiRw3g=
Subject key identifier: AE:AB:9D:C6:EB:FC:F4:53:F4:5D:2B:80:95:54:DA:E1:F9:17:79:BA
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial: 01A105B7ACFDFB18BB70B429E222D3E1A8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
Manifest number: 1936
Signing time: Sun 04 Oct 2026 07:01:25 +0000
Manifest this update: Sun 04 Oct 2026 07:01:25 +0000
Manifest next update: Mon 05 Oct 2026 07:01:25 +0000
Files and hashes: 1: 1-5k5xjduxlogWOiXreI7TJnM024.roa (hash: IbwzFMhgk6SMkYxfNDiP7rzrsaMadpQ6ZIFm72M7F0g=)
2: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl (hash: qiYx6qMCEzK3YcqewAfhZUl9E4hk9U9W2enwXWNwy+0=)
3: hoZB4uwEY_q6KMB_f7K8Wv-PN1E.roa (hash: oRaNPiY2nbAHYZp302rtEoBRBq8TpuSrhYRfxHIcF88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b7:ac:fd:fb:18:bb:70:b4:29:e2:22:d3:e1:a8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Validity
Not Before: Oct 4 07:01:25 2026 GMT
Not After : Oct 5 07:01:25 2026 GMT
Subject: CN=aeab9dc6ebfcf453f45d2b809554dae1f91779ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:fa:52:0c:bb:63:bc:57:a4:21:36:89:db:
93:74:dc:e5:de:36:36:d3:c3:f3:fc:9d:a8:b8:0d:
90:e2:af:a7:2a:ac:82:ba:1b:67:e1:96:d4:94:38:
30:ff:7a:1b:24:f6:85:11:f1:ab:d7:bd:79:bf:8d:
78:55:e7:37:0b:db:ae:67:5a:29:54:05:a6:aa:6c:
50:52:f9:fd:20:7b:df:f0:20:cb:b3:12:15:e8:e3:
d8:d9:c0:90:52:0a:4b:98:a7:d7:0e:8e:ad:9d:61:
2d:1a:8b:49:e0:03:80:d7:b3:90:e6:51:1e:b5:1e:
60:bb:ca:42:82:ee:cc:e8:40:ee:0d:71:2a:43:19:
5a:59:25:19:52:e2:05:df:73:6b:5c:17:3f:af:bd:
ba:af:43:1c:b5:8e:f7:3d:32:65:48:a8:c9:43:b5:
97:08:58:b4:9d:23:d9:d7:84:a7:71:33:e7:1b:a6:
1d:e4:18:03:87:d5:a9:98:c8:03:be:03:c1:61:9e:
b6:41:17:1f:4c:7d:3f:c9:a0:00:ba:34:73:03:e2:
d9:eb:c3:ca:4c:cc:ef:ed:d4:58:a0:3c:c7:7d:a9:
7f:ed:94:bd:21:42:69:54:92:7a:03:c1:2a:ba:c6:
9e:58:9d:0e:8f:dc:1f:c1:56:06:32:05:de:a9:6e:
e7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AB:9D:C6:EB:FC:F4:53:F4:5D:2B:80:95:54:DA:E1:F9:17:79:BA
X509v3 Authority Key Identifier:
keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:52:25:11:5c:7b:3d:18:f5:ce:e1:f8:f2:44:bf:65:62:0d:
a6:16:27:9d:e4:a4:6f:e6:48:ac:c5:45:fc:6e:42:45:28:b7:
30:5d:b2:aa:72:d2:67:95:82:d1:35:41:1a:06:34:f9:d5:6a:
a8:e7:92:9e:f9:5a:e2:39:05:d1:50:bc:b1:0a:ad:b9:a7:e0:
6e:5c:41:e0:2b:9b:e9:a0:c0:f0:b7:a7:06:07:e9:88:73:cd:
39:95:ab:7a:3a:af:d4:1a:1a:2a:22:28:2d:3b:c6:44:f3:08:
af:a0:4e:c5:b1:f3:50:cf:4d:15:b9:03:fe:e6:61:44:ac:2f:
0f:5c:d0:15:de:70:8a:3b:e1:95:3d:b8:18:c8:ad:1c:02:61:
91:e9:d6:6c:a5:b5:9c:51:26:37:79:4b:74:29:d2:f7:b5:15:
57:1f:0b:d5:8e:38:84:da:24:a9:1a:ae:f3:77:31:40:dc:30:
5a:0c:af:6c:a5:25:cc:07:1b:2e:a1:83:8a:d9:22:b3:1e:b4:
cc:92:ae:e8:40:99:b0:3e:d5:e0:9d:1c:97:5f:c6:ac:48:c8:
08:b2:b8:8c:6d:7f:63:3e:15:30:01:f4:52:15:5b:73:29:31:
6d:06:72:53:51:77:39:01:94:7a:10:4e:96:30:ba:f6:f9:78:
a6:3a:eb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:12:38 2026 by rpki-client