Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
File: OXxQHi_zsKtTS0hMOpKNHwk10bE.mft (raw, json)
Hash identifier: o0GFak8JJk+38ZGAWGGgsf7Ek7aMh6m4QiAZtXhHA8c=
Subject key identifier: 08:FB:CD:D2:6A:49:23:73:77:4E:6F:C4:5A:C9:E5:15:AE:90:64:71
Authority key identifier: 39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
Certificate issuer: /CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Certificate serial: 019E205A6C9EA0C69405FC4C617000B4B5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
Manifest number: 014F
Signing time: Wed 13 May 2026 08:00:57 +0000
Manifest this update: Wed 13 May 2026 08:00:57 +0000
Manifest next update: Thu 14 May 2026 08:00:57 +0000
Files and hashes: 1: OXxQHi_zsKtTS0hMOpKNHwk10bE.crl (hash: 2kCn/DuZdR8+8n1XS0bGmvLmbV9mFZ2bSLdY9u5stng=)
2: gLMnpAvJYDZgw8CMi1ywBPu8HKA.roa (hash: HfvKqfxiDqSfDMKCc4gBb3RHAJZd+tjrpFoCaU5J9O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:6c:9e:a0:c6:94:05:fc:4c:61:70:00:b4:b5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Validity
Not Before: May 13 08:00:57 2026 GMT
Not After : May 14 08:00:57 2026 GMT
Subject: CN=08fbcdd26a492373774e6fc45ac9e515ae906471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:4e:b6:a8:d9:55:39:06:e5:c1:28:5d:c3:
e8:aa:e4:d4:10:68:a1:30:2a:78:7c:55:58:b0:4f:
d9:db:fa:0c:08:60:a2:c8:87:6a:8d:91:6a:89:68:
b9:52:4b:1c:18:12:0a:da:66:40:5e:66:8d:d6:96:
03:7f:0c:a6:0f:27:18:74:eb:38:30:f1:74:16:41:
94:c8:c9:c7:fc:bf:6a:8d:fd:75:5e:5a:a6:25:a8:
f2:b6:3f:5f:2f:c4:a4:4a:e8:69:37:fe:1d:4f:00:
02:1a:e6:6b:b1:14:9c:f6:0e:85:f7:b5:24:56:ed:
ae:32:8f:7e:2a:33:e3:d1:17:51:ed:31:81:f5:90:
3e:f7:32:c8:e9:ae:e2:29:7b:8c:ac:81:69:2e:eb:
e3:ea:c2:2e:b9:61:f3:4f:f0:1c:d8:3c:44:38:1a:
c9:f1:f1:4d:3a:8f:13:f1:e6:a1:f0:0a:68:c6:54:
9b:03:be:5f:c0:81:e1:8c:e1:94:30:df:75:9f:3b:
2b:94:73:b0:8d:9d:fb:04:68:6a:be:ec:61:b7:8e:
83:68:41:38:03:65:1a:12:41:bd:08:47:38:48:ce:
e6:15:5a:6a:74:c9:91:5c:2b:73:40:f7:2e:2f:1f:
04:57:7a:7e:96:fd:0b:cc:09:42:d3:0f:81:c3:a5:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FB:CD:D2:6A:49:23:73:77:4E:6F:C4:5A:C9:E5:15:AE:90:64:71
X509v3 Authority Key Identifier:
keyid:39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5a:f9:e3:b3:8e:7c:f6:9b:4b:6d:fd:6e:43:6c:a8:b3:5e:
87:93:d2:80:02:1d:56:8a:3a:39:4e:29:55:eb:05:ff:2b:8d:
c7:9b:0f:ab:5e:bc:dd:78:5c:d2:f4:0e:02:53:cc:98:87:58:
ef:0e:f5:cd:c7:3b:5d:e2:02:59:3b:0d:99:89:54:e4:d6:7b:
fb:be:c1:31:69:55:79:e5:ba:de:6a:a0:fa:51:e0:e2:9b:72:
d1:b4:9a:5c:20:70:8e:f8:a0:8e:99:b4:f7:ce:88:3a:a0:45:
53:30:c2:ac:d3:28:1c:80:ac:a5:7a:65:0c:02:39:4e:8d:3d:
20:77:df:9a:d2:7d:b7:17:c4:de:a3:e4:10:32:a2:45:39:a3:
c1:a8:60:2f:93:f9:36:a3:07:4b:8a:8e:04:03:c5:63:0b:f0:
f4:a4:33:95:60:ec:d8:08:49:5f:9f:a5:91:fb:87:e0:af:81:
42:3f:1f:99:32:19:3e:27:1d:aa:ed:a0:9a:9e:e2:5b:7b:90:
58:67:71:c0:9f:7b:e2:e4:ab:35:d3:33:79:af:5b:ce:dd:e5:
7c:ba:51:64:e8:b7:68:fe:4f:1a:c3:df:98:d4:66:b4:b2:db:
08:25:34:eb:4d:71:31:77:8a:90:f4:eb:ba:91:dd:de:9f:4e:
74:06:e0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:14:30 2026 by rpki-client