Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier: kpB7VsxpU4VWRb0VrxLv/CJiI/awS4/nqJHzcHAh8uk=
Subject key identifier: 43:FF:75:65:83:64:F9:D9:EE:61:1E:DE:62:F6:20:73:55:2C:68:0A
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial: 01A0DA966B77AB5289D89127512A66FDCD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number: 10AE
Signing time: Fri 25 Sep 2026 22:01:25 +0000
Manifest this update: Fri 25 Sep 2026 22:01:25 +0000
Manifest next update: Sat 26 Sep 2026 22:01:25 +0000
Files and hashes: 1: O4mhqRGKIoCKcIMKacGidJQTeig.roa (hash: o44fh95pYU44LJ84noRE8s+3KorVfsnK8XoKEFDXt+c=)
2: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: o0flQjR4uElOvOU282Rny7dm+1SfPwH6ejL9fkVIFgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:6b:77:ab:52:89:d8:91:27:51:2a:66:fd:cd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Validity
Not Before: Sep 25 22:01:25 2026 GMT
Not After : Sep 26 22:01:25 2026 GMT
Subject: CN=43ff75658364f9d9ee611ede62f62073552c680a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8c:c4:63:90:2e:fb:03:4b:35:7f:77:28:d8:
e4:08:4a:75:4a:6a:c5:a4:2e:ff:58:65:94:db:ad:
8b:81:c3:52:bb:8a:9b:00:b0:b0:ef:3f:b6:99:dd:
d0:28:62:f1:08:08:04:ad:52:82:0a:96:57:22:75:
0f:b3:19:de:13:ea:37:f8:18:9d:88:79:55:52:cf:
b9:48:ff:27:e7:39:d4:e3:64:76:b4:87:5a:71:1b:
ad:39:72:8d:0d:72:f1:9b:b1:18:17:b0:98:93:7f:
f4:e7:3a:d0:d0:c0:89:80:5c:a2:4f:a5:13:a0:12:
b0:45:ec:c5:26:62:0d:06:e3:ff:b6:79:b9:bb:8f:
ec:e4:80:56:c0:c9:59:62:f0:61:20:c6:e7:e9:f5:
25:96:0b:0a:de:3f:13:53:e6:29:a3:79:5c:b0:fd:
09:5d:2a:6b:c7:42:15:35:60:a6:46:57:4f:6f:30:
47:bc:0c:0a:51:51:0e:f7:54:2f:bb:f6:54:a5:fd:
0a:f8:cc:68:ab:35:c2:e5:d0:e3:b4:d4:ba:a0:93:
35:b4:6e:2c:04:f3:88:a8:e6:17:36:5b:98:b4:76:
44:83:a2:f3:ba:0c:b8:92:47:0c:24:88:67:b2:22:
45:18:42:22:89:6f:c5:08:0e:e1:10:44:41:08:83:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FF:75:65:83:64:F9:D9:EE:61:1E:DE:62:F6:20:73:55:2C:68:0A
X509v3 Authority Key Identifier:
keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:95:19:15:de:27:49:3a:34:b1:d9:03:a6:29:ce:dd:76:b0:
08:b4:08:4f:5e:e6:da:79:d3:5a:7f:51:da:e3:48:c9:e7:4a:
6a:74:01:3a:53:7b:e9:92:21:21:1b:15:55:70:76:e1:a4:b5:
9f:3b:8f:43:87:16:fb:94:77:01:ef:ad:a4:08:f5:63:99:6c:
8d:fb:20:9f:19:42:eb:4e:38:27:09:96:35:6a:f1:d8:26:5c:
de:77:2d:58:cb:00:0d:40:a3:7c:af:a8:9f:b1:93:33:26:bf:
e4:d2:99:82:05:48:08:13:7d:84:66:37:22:f6:3b:58:bc:df:
d3:d3:e7:86:2a:46:bc:f3:5e:b5:30:43:69:ce:da:51:c9:9e:
0e:f3:36:28:5a:25:8d:7c:d3:80:c3:b0:be:c8:50:66:bc:fe:
7b:16:db:4d:52:7f:6d:88:bc:9a:7b:9f:6c:41:44:06:cb:68:
a5:25:3a:f0:23:e1:8c:d1:ba:7a:9d:b8:cf:af:8b:5b:0c:d1:
b9:c7:2f:a2:bb:08:42:ec:71:2c:4e:ed:65:2f:f1:cd:79:d2:
eb:0b:88:43:5a:4c:2b:62:e9:17:d9:3f:a1:0b:e0:14:e9:55:
c6:1e:bc:4c:18:ae:4b:6e:4a:bc:81:89:b3:f4:44:f8:e4:57:
33:1d:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:31:59 2026 by rpki-client