Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
File: ojKhc4Do4liY3qnCIzIaKs5SNvE.mft (raw, json)
Hash identifier: N43/c0osP8XPGi4btgWlVWFlUkPxadDC+yJebhRHiKs=
Subject key identifier: 75:06:29:F1:53:4B:33:C1:CF:A4:01:34:13:40:FB:07:94:B5:C1:6C
Authority key identifier: A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
Certificate issuer: /CN=a232a17380e8e25898dea9c223321a2ace5236f1
Certificate serial: 01A0F0425C3DE2B96BE245710332FDA09CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
Manifest number: 01BC
Signing time: Wed 30 Sep 2026 03:01:15 +0000
Manifest this update: Wed 30 Sep 2026 03:01:15 +0000
Manifest next update: Thu 01 Oct 2026 03:01:15 +0000
Files and hashes: 1: ojKhc4Do4liY3qnCIzIaKs5SNvE.crl (hash: XP9z4VCWGz+fmJ8wIlweablA5ZIEl7qziC61668J76U=)
2: xyoH9R_BmdJ-gyu7Oy-9rS-zs-0.roa (hash: HGNIvY3ULeEgQ68bK1r/+JhRNbs682fuQL9Y7B95gbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:42:5c:3d:e2:b9:6b:e2:45:71:03:32:fd:a0:9c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a232a17380e8e25898dea9c223321a2ace5236f1
Validity
Not Before: Sep 30 03:01:15 2026 GMT
Not After : Oct 1 03:01:15 2026 GMT
Subject: CN=750629f1534b33c1cfa401341340fb0794b5c16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d6:dc:04:7c:ab:f3:da:0b:a9:ac:d0:49:dc:
19:c8:6d:1c:8c:a1:3a:6e:46:d0:4d:78:51:ce:6f:
91:8e:e4:ef:2c:03:7e:04:0a:a1:94:fa:6d:b6:7e:
8d:71:38:f3:13:52:d4:6c:88:48:46:3b:79:1a:88:
9a:b1:ab:6e:70:ca:c9:16:26:d9:1f:78:47:44:55:
92:6f:38:97:a7:78:cd:95:4c:12:82:40:66:27:26:
9a:87:a2:3d:2c:78:ad:6d:40:0c:7a:ff:41:9d:dd:
81:8b:c6:0a:33:1f:f7:ef:2d:bd:7c:bd:24:b6:58:
b7:26:5f:ec:78:40:05:b2:02:39:a0:e1:4c:7f:7a:
0a:fc:8a:80:9a:6d:fb:bd:4d:bd:dc:ad:76:b1:60:
66:99:f5:55:73:6b:c3:72:48:a3:f5:a1:5a:e0:4d:
a9:b4:8f:a9:27:63:15:e2:80:86:87:ca:f1:ca:8d:
82:30:f2:4f:50:c5:79:cc:4e:cf:e1:1f:74:07:d9:
79:7f:cb:1a:13:85:5c:3b:7f:b3:1b:d6:4d:c5:3a:
14:47:c0:29:29:62:5e:e5:05:75:50:20:a0:22:dc:
ff:4e:7a:e6:77:3f:fc:93:58:9c:f1:74:dd:c3:2c:
45:ea:a2:1b:3d:a8:c0:83:95:04:b0:04:26:d9:47:
0d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:06:29:F1:53:4B:33:C1:CF:A4:01:34:13:40:FB:07:94:B5:C1:6C
X509v3 Authority Key Identifier:
keyid:A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:31:0c:67:92:c2:95:21:c8:eb:ea:17:f7:80:34:d6:06:0e:
fc:48:5a:9e:b3:2c:7e:83:e4:22:10:81:8a:44:e2:25:ca:95:
d2:ea:47:02:14:29:b8:2e:f6:3b:e3:19:cd:65:cc:8f:ce:25:
c3:c1:4e:e1:93:b0:16:c2:69:86:5a:02:19:b9:17:48:46:05:
e3:94:0a:98:b0:b2:f7:e0:d4:0c:fd:d0:7c:c1:ee:83:f2:28:
46:c6:84:25:37:79:1c:8e:bf:dc:da:67:a2:c7:74:83:22:99:
48:c3:aa:e3:0d:e6:77:cb:e3:5b:a9:9a:c0:5d:35:54:89:62:
de:1d:a2:e0:7c:d9:6a:ce:30:fe:a9:e2:f5:7a:e6:48:0c:2a:
9f:0b:62:57:a6:03:ea:f6:32:c9:53:16:68:f8:a6:d4:9d:54:
7c:d7:b8:44:cb:c1:0f:bc:78:c1:ce:49:5a:71:72:c6:e3:be:
4d:d2:03:a3:48:c3:87:f7:ec:27:5c:00:5e:c6:ef:49:da:42:
f6:6d:c1:70:65:41:a9:75:ae:1a:30:64:e3:9f:86:8f:4e:69:
5d:7d:3b:9b:6f:b7:91:c1:c4:54:b1:3d:a0:ad:ac:0d:1d:9f:
6d:78:23:b9:c7:ee:41:0f:16:56:10:15:6e:9b:a0:36:88:83:
27:b2:59:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:32:38 2026 by rpki-client