Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: AWSf8JIutfeVTFKiHg0r3x1cl3c3stMjtzCXqXItORA=
Subject key identifier: 24:3C:CD:74:A0:F9:B1:D1:9D:7C:88:13:78:4C:D7:E5:F9:51:DE:2C
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 01A123F8F569AC8A21BE4910C9AF337AAFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 112E
Signing time: Sat 10 Oct 2026 04:01:20 +0000
Manifest this update: Sat 10 Oct 2026 04:01:20 +0000
Manifest next update: Sun 11 Oct 2026 04:01:20 +0000
Files and hashes: 1: 8RlFcN6gLbpUc6FFzlURVV6HRUw.roa (hash: Tx6IxgxGtMFyzuZm5nI4v5qQk6SBxlPImSdMh1gmEkw=)
2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: KSGONXdnxrL7vTu/BHAoVMKNXevciDFzFgiK/rfFREw=)
3: dvF-ax6xW9w6QlzjTOaIlgyWKik.roa (hash: E53mXDTZAgvYtLPLUqhUWEPa5aOM6nnfYCB3KgCjcD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:f8:f5:69:ac:8a:21:be:49:10:c9:af:33:7a:af:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Oct 10 04:01:20 2026 GMT
Not After : Oct 11 04:01:20 2026 GMT
Subject: CN=243ccd74a0f9b1d19d7c8813784cd7e5f951de2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:a1:66:56:9f:32:b6:41:5a:05:70:28:22:
99:1a:53:b2:40:06:12:65:2f:31:07:b7:4d:b7:0f:
da:1a:38:14:41:f1:fd:76:0f:1b:61:99:59:c6:f5:
82:b0:f8:97:59:5c:a8:5a:ec:4d:7e:fa:35:72:c1:
22:49:14:99:95:b2:37:80:e8:ba:14:d1:78:8f:f0:
0f:21:9d:d9:e1:7b:77:0c:40:a8:93:29:76:ca:a9:
5a:c3:da:0a:22:0b:e1:0d:f6:7d:7c:09:23:04:52:
b5:be:bd:22:0f:2f:de:54:20:99:4d:ee:19:fc:7e:
03:32:08:99:f7:f0:cd:84:11:c0:65:70:f9:fb:1a:
f2:33:ab:2b:3b:27:42:6b:cb:46:21:d1:d7:40:ea:
33:5a:c3:20:da:62:51:2c:39:46:ed:87:34:4d:47:
72:91:0d:37:d4:3b:09:da:c8:73:d7:23:7c:14:11:
b5:09:9a:99:47:d5:21:84:ab:26:27:74:de:99:0a:
89:b4:d3:94:7a:d5:31:3a:b6:f9:f0:c8:a2:52:37:
c8:54:e1:e1:7e:bd:c8:8d:89:eb:a8:7a:fe:7c:58:
d9:85:e6:8f:82:a0:4e:ad:2a:8c:19:64:a5:1d:be:
7d:47:88:82:71:5e:28:31:5c:a7:f1:d1:5d:a6:82:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3C:CD:74:A0:F9:B1:D1:9D:7C:88:13:78:4C:D7:E5:F9:51:DE:2C
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:55:4f:d7:0e:00:50:c3:2e:9c:92:be:a6:83:d0:5b:c2:f0:
b3:31:85:75:f3:a6:6e:80:87:8f:27:8d:94:6c:cb:3c:31:3f:
17:66:91:50:9c:0a:b1:41:c5:a3:37:8c:8b:c3:f0:44:21:e4:
e6:c0:11:e5:74:19:01:8a:53:ad:39:eb:3e:0c:30:ca:66:49:
62:0a:fd:48:c7:14:51:13:7d:03:0c:1a:dd:b1:f2:1a:12:f6:
c8:90:fe:8f:c7:cc:8e:cc:42:e7:89:06:13:1b:e7:7b:b1:79:
fd:07:9b:cb:ba:9b:f5:62:75:ec:b1:15:87:8b:dd:7d:19:ad:
3e:50:cb:19:55:68:99:76:e0:3b:35:17:d0:2e:f6:04:21:73:
de:bd:f8:4e:be:0b:5b:eb:d0:17:2e:57:2d:d3:94:ee:b4:3b:
d5:18:28:a9:c9:e8:25:b5:62:52:72:ea:17:bb:c5:9d:32:f5:
d6:04:ec:e7:99:21:48:d3:67:d0:5e:53:6f:4e:3f:00:cd:5a:
05:96:c9:f2:2e:e2:6a:e4:01:a1:25:4b:58:cf:50:09:34:ea:
17:ea:d0:f7:96:dc:25:31:9b:84:cb:92:1e:fb:b8:89:69:90:
33:94:b5:62:55:8a:c6:3d:40:36:13:fa:1d:3e:db:72:a2:0c:
c5:cc:ce:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:58:13 2026 by rpki-client