Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
File: OXxQHi_zsKtTS0hMOpKNHwk10bE.mft (raw, json)
Hash identifier: cjWLMBboUcDzYT3nbxXnbEffmFQTp7FkG89L6xwXhp4=
Subject key identifier: EB:CD:DB:50:D9:5B:50:9E:0C:46:9F:4B:89:94:86:E1:4B:0C:41:7F
Authority key identifier: 39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
Certificate issuer: /CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Certificate serial: 01A0ECD3B0E82F315E81F583BE5362C00A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
Manifest number: 02C2
Signing time: Tue 29 Sep 2026 11:01:31 +0000
Manifest this update: Tue 29 Sep 2026 11:01:31 +0000
Manifest next update: Wed 30 Sep 2026 11:01:31 +0000
Files and hashes: 1: OXxQHi_zsKtTS0hMOpKNHwk10bE.crl (hash: /RN7FqxhJlgNOKMBHxfkFkbrWgW4PQyKQW2QGU8rzJw=)
2: gLMnpAvJYDZgw8CMi1ywBPu8HKA.roa (hash: HfvKqfxiDqSfDMKCc4gBb3RHAJZd+tjrpFoCaU5J9O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:b0:e8:2f:31:5e:81:f5:83:be:53:62:c0:0a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Validity
Not Before: Sep 29 11:01:31 2026 GMT
Not After : Sep 30 11:01:31 2026 GMT
Subject: CN=ebcddb50d95b509e0c469f4b899486e14b0c417f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:11:9c:62:88:c8:2d:98:d1:e5:70:27:82:
64:52:88:66:59:9c:ef:bd:2f:a9:bd:1d:8a:ea:31:
a2:a6:b4:59:7d:c5:11:aa:f4:d1:b1:ee:50:3c:31:
d3:88:1d:bf:36:97:32:27:a4:27:87:c3:6f:bb:ef:
2a:67:5b:5a:97:7d:86:21:ed:c2:71:69:aa:34:09:
57:5e:18:13:8d:10:99:ab:d7:dc:ce:93:b9:cf:59:
1c:32:3a:01:04:c3:10:31:dc:36:74:73:08:7e:a9:
f2:55:fb:87:a1:ca:d4:cc:8b:88:70:83:22:88:40:
db:58:fc:60:56:07:78:71:28:44:00:c8:c2:a2:e9:
04:aa:0b:cc:a1:8d:d4:72:74:e1:b1:9b:b5:7c:00:
08:94:5d:89:c7:dc:5d:00:26:15:6c:00:19:85:df:
2f:4d:07:70:cb:79:dd:4d:c3:62:0b:82:16:8a:8b:
c7:9a:bb:de:1f:a7:f8:30:99:bd:a3:f4:27:88:4a:
09:98:f9:0f:9c:b4:9d:21:2c:b0:a9:22:21:9a:cd:
62:28:10:c1:cc:ff:69:86:88:6f:88:bd:f4:6b:ca:
ee:7b:ab:ba:7b:9c:ec:f3:3e:5a:0e:53:91:d9:9b:
e3:e1:63:9f:ab:a7:22:db:da:20:5b:de:a4:05:62:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CD:DB:50:D9:5B:50:9E:0C:46:9F:4B:89:94:86:E1:4B:0C:41:7F
X509v3 Authority Key Identifier:
keyid:39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2b:64:08:46:73:54:1e:1c:23:6a:f2:40:1f:b9:1f:e9:0c:
dc:45:4f:86:c8:88:52:28:1d:cc:8d:1d:db:20:07:4d:81:6e:
b2:81:47:bf:3a:0a:96:96:ab:2e:e7:60:a7:9f:69:34:5e:2e:
87:a8:2a:75:da:2a:ed:59:c5:36:69:b2:e3:20:1b:0e:70:0a:
ed:f2:28:c7:86:10:f9:dc:c6:05:4b:30:0d:4c:b6:ee:e2:68:
8a:1e:b0:ad:0f:24:ab:ff:99:9f:41:4f:e9:00:c3:06:e7:9d:
85:19:d1:ae:49:97:6d:47:db:72:7f:36:d1:71:e7:cd:a2:90:
fa:88:9c:ca:6f:e0:bf:b6:9c:49:9f:f6:66:90:ef:8b:af:fe:
df:02:06:28:38:f0:d3:40:67:89:4f:35:10:94:0a:d4:cd:da:
b9:b8:33:e7:4f:9d:e3:66:b0:76:1c:b3:dd:f8:19:32:36:c9:
53:ea:8c:2e:69:52:b8:78:80:a2:7c:81:38:64:2b:5c:d1:49:
ab:a8:5b:a9:8c:5b:71:33:17:0f:5b:35:4e:a7:6b:78:5d:49:
b7:bb:d5:21:da:e0:1d:5a:dc:4a:1f:74:d9:12:1f:49:ae:da:
e4:15:0e:1f:08:4d:ec:cc:3b:55:ee:e2:9f:6a:f3:9a:e8:ef:
7a:cb:5d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:30:21 2026 by rpki-client