
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier: INLNt6mUHK1sWbac8Cw3ATJUSa6UmbPJ62s/9KfduV4=
Subject key identifier: E2:6B:86:6A:F6:05:13:BD:FC:54:38:EE:C1:1E:69:73:23:49:4E:45
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 01A1DB6F639FA8DE4E2ABB884962D03DC2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number: 14D7
Signing time: Sat 14 Nov 2026 19:01:12 +0000
Manifest this update: Sat 14 Nov 2026 19:01:12 +0000
Manifest next update: Sun 15 Nov 2026 19:01:12 +0000
Files and hashes: 1: 0an2pQXOSUa9Qv0CDLezuYXP9Rc.roa (hash: GI3HMCo+UnX0/WFi5FDffbeewol6/ny0qWi9o7/s4mw=)
2: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
3: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
4: U8YrDUVn3egAnNyXxX_1fs7ypak.roa (hash: 0J1ye72rXLmhonZZf0ebjERiurn0AgXIl7ABqMnbTn0=)
5: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: MyxbSag25LuOvi+x5LypFwmIT8RXJEw/WLsPUv9Ksrw=)
7: sA9dK_96uoFn9OzLmWPj0jDqoGk.roa (hash: qjwTSEU6zfUdrsc6+xbvb6xBiHxiA+zK04XvFe2R5m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:6f:63:9f:a8:de:4e:2a:bb:88:49:62:d0:3d:c2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Nov 14 19:01:12 2026 GMT
Not After : Nov 15 19:01:12 2026 GMT
Subject: CN=e26b866af60513bdfc5438eec11e697323494e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:32:f3:d2:ec:6e:fa:2b:15:d2:75:02:36:
34:ac:52:56:b5:32:87:d7:9e:7c:69:40:03:fe:86:
b8:42:5a:b1:ed:a4:e6:51:8e:a8:08:01:ae:68:00:
a3:01:26:15:c8:ef:29:ab:74:62:d7:f1:a4:81:ee:
d5:85:fb:22:45:a2:fd:42:8d:d9:dc:8b:bc:7e:b8:
0a:2e:d6:a0:1c:9b:dd:30:c7:4a:2e:f7:bf:db:99:
e3:b4:d6:ac:6f:35:85:ab:c3:29:6d:a5:f1:14:6b:
2d:9a:bb:e0:d4:a2:10:a8:f0:d5:e2:23:fc:72:38:
2b:88:75:7f:c2:a9:fb:12:76:e7:29:df:7a:cf:d1:
62:49:5e:56:20:27:57:37:6a:69:e6:dd:f4:7d:c4:
bc:ff:2d:ae:7a:e2:b7:59:c5:65:6a:ee:fe:b1:35:
e6:4b:91:d0:26:5a:24:e2:f6:d4:cd:42:4f:29:6f:
d8:27:13:e5:ff:cd:9b:a3:18:59:35:2f:4e:06:3a:
5b:b0:a1:f8:83:e4:30:08:dc:2e:41:b5:9e:1e:25:
a2:ad:7f:c3:66:a0:f6:85:d8:99:9d:03:9a:45:66:
57:ea:61:79:07:bb:11:60:83:24:52:8c:34:80:7e:
0c:46:b4:6e:96:f2:ef:5a:00:9c:8b:d9:d3:7e:2c:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6B:86:6A:F6:05:13:BD:FC:54:38:EE:C1:1E:69:73:23:49:4E:45
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8e:69:b1:eb:46:73:63:42:d9:66:44:6a:75:12:e4:b3:1c:
61:f1:34:8e:77:80:d1:dd:79:5c:8a:fb:a7:20:e3:76:21:c1:
28:8b:09:08:73:43:7d:51:44:4f:8e:c3:68:f4:23:e4:e5:84:
8a:a3:04:56:f9:b7:72:8d:65:28:a1:0f:bb:0f:da:fe:8e:92:
be:ee:c6:4e:c7:09:63:6e:11:d6:37:46:6b:c8:0e:e8:d7:b2:
29:ad:e2:2e:91:73:3c:fe:ca:cb:1a:b3:21:dd:a8:ce:f7:98:
40:23:e0:21:f4:63:06:63:1c:4b:d6:ac:a7:fb:88:89:7e:97:
50:1d:5d:59:3d:c5:86:12:df:3b:fb:77:15:f2:50:88:4c:08:
80:b6:99:f9:2e:56:3a:cc:ef:8b:1b:74:fb:ec:e0:4a:c2:95:
06:5a:e0:22:42:31:9b:e9:4e:b2:03:5f:fc:28:66:eb:0f:cb:
9c:c5:29:da:a3:83:29:8f:6d:10:50:0e:90:d2:0b:cf:d9:94:
dd:c6:0a:d9:e5:45:bd:26:2a:eb:9b:cc:81:a1:08:d6:05:e7:
82:58:cf:7e:e4:c4:5e:ef:96:d7:49:fa:45:fd:35:f2:1c:aa:
01:a1:d2:42:1a:bb:71:29:c6:78:ee:a8:be:28:94:2c:aa:55:
e5:b6:ca:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:19:55 2026 by rpki-client