Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier: Cd8c/H+ArS82vWeQyxGCSdDLEsx/oSaDsc53STfNT28=
Subject key identifier: C8:E6:E0:4C:0D:03:B1:4D:1C:00:4F:94:2C:78:26:31:D9:05:AF:5B
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial: 01A0DD2A73220AEA0BE1CF0CD4C9DE8E3CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number: 0DCD
Signing time: Sat 26 Sep 2026 10:02:21 +0000
Manifest this update: Sat 26 Sep 2026 10:02:21 +0000
Manifest next update: Sun 27 Sep 2026 10:02:21 +0000
Files and hashes: 1: GWIPuzYrr1ZkVb6zUh724dGRI1w.roa (hash: 8ZDylGUDk0rJ7fPM3ZJJKDsoUpKFNi+95rGt5nvLIKg=)
2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: 5MuINiqLlnh8RfQeSNYAcNckttWM3DXcIkifK1sRuxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:2a:73:22:0a:ea:0b:e1:cf:0c:d4:c9:de:8e:3c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Validity
Not Before: Sep 26 10:02:21 2026 GMT
Not After : Sep 27 10:02:21 2026 GMT
Subject: CN=c8e6e04c0d03b14d1c004f942c782631d905af5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:3f:b8:f1:8f:20:67:34:fe:8c:2e:e1:68:
8a:2f:8a:51:27:a1:e1:fe:73:17:8e:a4:e5:af:f2:
d2:61:d9:35:fa:90:2f:82:d8:d4:1e:15:d8:26:ef:
cc:01:d5:61:fd:1c:16:bd:98:8f:e1:d0:0e:9f:a5:
fc:d1:ca:17:ea:9c:a3:4d:42:41:20:2d:08:ee:1e:
0f:dd:42:91:12:a1:f3:94:80:42:26:ea:ff:21:b5:
a8:c8:e3:9b:7c:18:21:c7:ed:ce:b5:34:57:00:95:
8d:7b:7b:63:62:43:7e:78:87:14:0a:1b:64:9c:b3:
cd:02:b9:1f:2f:34:56:9c:28:33:e6:b5:52:e9:e6:
b3:b2:8e:36:62:9a:82:e8:a0:ff:aa:e9:b6:1b:a1:
c5:4a:3d:7e:40:a1:f8:bb:2e:e1:79:6b:10:57:6c:
89:79:f1:e4:6a:17:e6:01:c7:65:0f:af:9e:31:36:
09:f6:88:51:fd:6c:55:48:0e:82:1b:f7:80:da:ec:
89:1e:08:77:ce:0e:24:7f:9e:20:b9:99:3c:2b:d7:
91:db:d1:03:ba:d3:8c:a9:e5:ab:11:43:fb:1a:75:
28:b0:c8:41:b6:11:48:2e:69:ad:75:09:1f:62:73:
6d:3d:b4:95:b0:9c:db:b6:b3:e6:58:59:4f:d1:6e:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E6:E0:4C:0D:03:B1:4D:1C:00:4F:94:2C:78:26:31:D9:05:AF:5B
X509v3 Authority Key Identifier:
keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9c:a2:74:7c:b9:59:78:99:37:64:47:31:eb:20:8e:8c:8d:
12:d0:6c:f4:ba:4d:a2:8a:3a:5f:01:bf:6b:b9:bb:cc:be:d2:
14:52:95:42:ed:6f:51:6e:f1:b6:d6:f4:c9:78:6f:3f:8e:fc:
fe:7d:20:e5:c9:95:88:8c:d1:2c:61:d3:a4:1d:ee:81:3e:09:
38:66:a3:d3:c9:58:16:fa:4b:d0:ce:f8:d0:e7:db:13:5e:5e:
c1:5e:cc:17:ff:c9:c8:45:98:38:f8:7c:6e:bb:24:64:e4:f5:
00:29:4c:2b:18:db:c0:83:56:2a:b1:5d:39:c0:e3:17:2a:39:
00:74:82:17:4e:4b:05:7c:e8:8a:d2:0d:36:54:16:96:4d:02:
3a:9c:89:45:35:57:30:e6:38:b1:44:23:d9:42:71:55:d6:8b:
fd:7f:a3:84:20:2e:3c:7a:f9:c3:7a:16:8a:fe:4e:0b:f2:39:
0c:05:95:84:51:ce:48:de:d4:11:94:27:05:46:fe:be:8c:cc:
e8:0f:ec:fb:15:60:ad:c4:cb:2b:31:fb:39:30:17:e4:67:f4:
f9:3b:0a:ba:59:c5:84:0e:b0:38:2f:38:57:05:dd:f8:76:12:
b8:e1:46:fd:54:f6:ad:57:b4:c7:2a:0f:57:c5:49:a5:f7:20:
b2:0b:3b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:00:31 2026 by rpki-client