Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.mft
File: OIzM14vxZTPzMYVEPqgtza2SBBA.mft (raw, json)
Hash identifier: tmubfqBpg5t4U9kOaXMDQi8FZlj959kXL85WpVvKM5I=
Subject key identifier: 87:31:2B:F2:57:45:86:41:D3:11:9F:67:16:1A:A8:D5:66:79:73:BD
Authority key identifier: 38:8C:CC:D7:8B:F1:65:33:F3:31:85:44:3E:A8:2D:CD:AD:92:04:10
Certificate issuer: /CN=388cccd78bf16533f33185443ea82dcdad920410
Certificate serial: 01A0D9BBA2CF5EAB29027A3C28E6D4ABA4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.mft
Manifest number: 10AE
Signing time: Fri 25 Sep 2026 18:02:27 +0000
Manifest this update: Fri 25 Sep 2026 18:02:27 +0000
Manifest next update: Sat 26 Sep 2026 18:02:27 +0000
Files and hashes: 1: OIzM14vxZTPzMYVEPqgtza2SBBA.crl (hash: VrejOu1P9fSO9tncIMPoWVQVvWjo2aPM1f/so6SMT0A=)
2: lzXkzHb5e6mg4oE0vsIegFdcHEs.roa (hash: AAwn2QJRCuwjLBg290zcDtj4v0hSm4DxXCwXXNuyeR0=)
3: y9ltkbYuoIzmN0YajfYF5C93BL4.roa (hash: Fp9F7GELN6xhd6lTjRCIyciJdim+5sVhKm5rN6WFBTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:a2:cf:5e:ab:29:02:7a:3c:28:e6:d4:ab:a4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388cccd78bf16533f33185443ea82dcdad920410
Validity
Not Before: Sep 25 18:02:27 2026 GMT
Not After : Sep 26 18:02:27 2026 GMT
Subject: CN=87312bf257458641d3119f67161aa8d5667973bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:13:aa:b4:b5:cf:e1:77:5b:c0:ff:09:9d:
fe:05:fa:b0:c1:1c:88:04:d7:a0:78:2b:85:c7:ba:
32:b4:3f:6e:1f:72:dc:20:a0:43:1a:08:59:43:4a:
f1:e0:cd:e3:dc:a8:af:20:a9:18:7e:38:a9:da:08:
f7:13:2c:37:aa:1f:f6:98:b1:b0:8a:8b:1d:f1:7b:
da:e0:4f:19:9b:c6:dc:87:5f:f1:e6:1b:7f:cf:48:
08:41:da:f3:e0:53:e8:81:0d:8a:59:19:08:70:84:
3c:ed:7c:26:95:95:ac:0d:c1:de:9a:45:a2:26:e8:
18:74:0f:fb:7c:a3:0d:1f:34:e4:e4:b4:af:5a:3b:
25:32:63:bf:a5:86:29:e8:26:2e:fd:1b:c2:e0:8a:
31:fa:fb:b9:47:7f:9f:99:e4:14:a8:4c:13:33:28:
61:a9:4f:db:ae:c4:50:3d:f0:c2:4b:a7:c1:a9:ff:
d0:ca:7e:73:49:a7:5b:f1:02:5a:f6:e1:f8:a5:79:
c9:c9:86:0c:c1:3e:fd:17:0f:6b:71:e1:c1:16:94:
38:5d:26:ba:b8:0f:6a:6a:68:c1:96:d6:0a:02:c0:
cf:5a:36:db:e0:aa:c6:d5:a3:60:86:0a:f5:6d:04:
cf:a2:6b:59:88:f6:70:a7:0f:46:06:d4:44:4b:62:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:31:2B:F2:57:45:86:41:D3:11:9F:67:16:1A:A8:D5:66:79:73:BD
X509v3 Authority Key Identifier:
keyid:38:8C:CC:D7:8B:F1:65:33:F3:31:85:44:3E:A8:2D:CD:AD:92:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e7:cf:ae:15:07:27:7e:8c:6c:54:95:4a:ae:91:12:f5:91:
ff:89:aa:79:8c:c1:31:7f:99:d1:a4:91:ce:de:63:e0:85:a9:
09:ab:92:05:0f:09:7e:74:77:0f:a7:67:4c:a3:69:6e:7c:a3:
51:f8:8b:87:ba:05:29:22:bc:3c:f1:71:77:af:7e:27:5c:f6:
f3:64:f3:c8:85:81:be:53:30:0a:bc:c7:e6:12:6a:6a:14:1f:
b3:c5:fb:81:b1:1e:9b:22:92:fc:fc:a5:98:6d:9c:ae:9f:f9:
0b:e9:a7:62:d1:74:80:75:8d:5b:46:66:0d:cb:03:b4:98:ea:
1a:b8:08:d0:d4:e6:a6:21:8d:89:4a:46:a7:55:e4:a8:04:f7:
74:32:b1:68:ad:f3:10:c4:d4:d6:d7:46:41:7a:42:45:f9:ab:
02:ee:71:36:0d:47:89:9e:ad:c6:55:06:fc:d3:4b:b0:de:1b:
df:4f:df:6d:ea:95:40:57:e5:1b:c7:28:03:df:97:2c:1a:cb:
63:e5:e7:94:d1:2d:f5:ea:98:1f:12:ad:25:e4:d5:c4:96:ae:
1a:22:ca:a8:9c:66:fd:a1:c8:20:cd:80:5a:74:2c:eb:1d:84:
db:36:98:e4:d8:54:d6:9d:3a:61:74:10:16:68:96:1c:4d:b0:
f9:3d:44:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:43:48 2026 by rpki-client