Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: +Ablmg21jm1a+o+5w6kyHTgBfUROT53XqJIlvDqfjmA=
Subject key identifier: 73:B0:93:73:26:19:32:26:CF:95:55:44:10:CE:06:24:94:E0:61:15
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 019E1F7EEA2CB9A715A043A320DF1066BB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 0F9D
Signing time: Wed 13 May 2026 04:01:11 +0000
Manifest this update: Wed 13 May 2026 04:01:11 +0000
Manifest next update: Thu 14 May 2026 04:01:11 +0000
Files and hashes: 1: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: BfDdrf8ENhLHMJSHGhIo+o0yryJprjs3ms5bI5RYO2o=)
2: dvF-ax6xW9w6QlzjTOaIlgyWKik.roa (hash: E53mXDTZAgvYtLPLUqhUWEPa5aOM6nnfYCB3KgCjcD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:ea:2c:b9:a7:15:a0:43:a3:20:df:10:66:bb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: May 13 04:01:11 2026 GMT
Not After : May 14 04:01:11 2026 GMT
Subject: CN=73b0937326193226cf95554410ce062494e06115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:94:76:e0:80:7f:7d:ad:0e:40:b5:6a:2a:
79:2b:08:bd:41:10:01:30:12:82:04:a9:91:80:d5:
94:15:44:ce:9c:4d:b1:72:8f:ae:f7:bc:3b:37:c4:
c8:30:b7:07:b3:27:b9:13:93:86:be:15:be:c1:15:
b6:56:58:97:0c:33:a3:06:bd:fc:f1:c7:07:fd:a1:
a6:07:03:a7:dd:09:a2:63:6d:6f:8a:03:3d:4e:40:
c3:e0:76:73:90:cc:4f:eb:46:c1:f4:0d:f2:e4:60:
d8:2d:9f:56:76:3c:19:3d:94:9e:53:25:70:4d:01:
1d:1a:15:33:95:7c:a4:34:2c:61:4e:a3:ce:80:1f:
b2:b0:14:80:19:46:1e:69:fc:2a:f6:dc:df:30:07:
10:89:1b:de:ad:a7:1d:be:10:44:7d:c9:74:01:cc:
7c:2f:f0:09:04:9a:e7:02:12:28:4c:29:5a:e8:41:
a3:c5:dd:13:66:3a:61:51:8f:c3:9c:65:22:ca:6d:
c3:80:b9:b2:d6:6c:58:02:57:11:1f:25:50:b4:22:
35:a2:4e:ec:dc:27:2c:e1:4e:a0:14:22:e8:ac:1a:
94:63:2b:7c:1a:06:e4:6e:6c:82:58:1f:a6:2b:9d:
1d:f0:36:2c:96:fc:19:05:4f:4d:46:25:d9:d0:cf:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B0:93:73:26:19:32:26:CF:95:55:44:10:CE:06:24:94:E0:61:15
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3b:b5:a3:53:97:a0:77:79:b5:cf:27:b8:36:c0:03:30:a2:
cc:41:61:a1:68:20:1b:19:57:3a:cb:50:77:26:fb:04:4a:e5:
4e:7b:a8:15:45:1c:88:bd:7f:91:af:43:9e:40:99:63:16:fd:
08:78:1e:b3:cb:cd:1a:b1:23:c4:7f:15:7e:06:9c:76:e7:69:
fa:dc:9c:1f:a2:13:c1:59:65:cf:49:57:de:07:24:93:c1:09:
aa:35:37:bd:65:af:84:a0:0b:18:ba:5a:b6:3c:c1:81:a1:17:
22:e8:0a:26:72:74:f8:76:0a:46:0b:fc:3b:17:f2:ae:04:11:
9f:98:cf:68:f1:8f:01:b9:99:ca:a9:5d:ac:57:3e:45:9d:78:
00:43:d6:36:1f:76:da:cf:81:5e:2e:22:a0:25:ec:51:f5:ce:
0f:e7:f6:63:0d:6b:64:0c:de:e9:5e:07:24:e3:ba:eb:5a:ab:
a2:3a:09:c7:e9:55:0f:c1:5c:af:cb:f4:27:f0:a8:5e:e6:43:
de:68:bd:9f:f8:79:2e:7f:1b:23:44:75:72:18:04:99:14:ef:
3d:88:7c:f8:88:ff:d6:30:a1:5d:d0:a5:ca:0a:0c:61:ea:c4:
4b:7f:61:5b:af:51:e4:ea:f0:7d:25:cf:4f:18:d0:81:41:d5:
a4:a6:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:26:16 2026 by rpki-client