Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
File: OjLwwcjLEx0TZbOPCKTltYLiW0E.mft (raw, json)
Hash identifier: lj3YH8e2BDGP7mYb+x+t3QbZD3sVSJYf5nDQxVeMEWc=
Subject key identifier: BF:AA:42:6B:F8:BE:70:96:15:16:EA:FD:83:D9:DE:B9:35:59:7F:CE
Authority key identifier: 3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
Certificate issuer: /CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Certificate serial: 01A0CE23A31F59249F039D74AAD2344E376B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:00:37 +0000
Manifest this update: Wed 23 Sep 2026 12:00:37 +0000
Manifest next update: Thu 24 Sep 2026 12:00:37 +0000
Files and hashes: 1: OjLwwcjLEx0TZbOPCKTltYLiW0E.crl (hash: 3WuaB61BSmnUiHXtaIjDrg+pHSZ0kh9NbmlWRG1VvPg=)
2: SyE1IAlXPkJZ9_iqXKQIoEOXgAs.roa (hash: s6NzmaozxO+4w9NIyythzaRrJ0Zd5+4CkcBBGqgurQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:a3:1f:59:24:9f:03:9d:74:aa:d2:34:4e:37:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Validity
Not Before: Sep 23 12:00:37 2026 GMT
Not After : Sep 24 12:00:37 2026 GMT
Subject: CN=bfaa426bf8be70961516eafd83d9deb935597fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1d:21:94:d5:ad:cd:7c:1f:3e:b0:5c:2b:f7:
61:15:74:e1:ed:32:81:d1:f6:c5:cf:7b:f4:ee:84:
61:89:7b:e8:4e:39:af:b1:f6:f1:53:43:5e:ca:f5:
fe:85:82:88:25:f2:3b:56:a1:2a:01:d4:f7:eb:75:
7f:ec:4e:77:f0:03:e4:81:0d:6c:63:fc:9a:56:be:
d1:47:c8:76:b3:3a:94:c1:4f:d4:53:62:7b:6f:d9:
74:c4:2d:03:db:59:f1:be:84:34:32:30:5c:2c:6f:
c5:59:6d:8f:9e:e3:98:40:e8:77:f0:6d:b1:97:65:
75:9e:93:75:49:b9:11:6b:2f:41:11:92:a9:9c:b5:
c0:e3:52:bf:4d:19:cc:2b:ee:bb:f8:84:22:10:17:
e4:95:af:6c:05:d2:02:74:e4:7c:65:67:22:0c:bd:
59:0e:9f:dc:f9:68:30:be:1d:97:8b:a3:2d:1b:3b:
af:f0:38:9c:3c:76:fc:0b:e2:2c:81:eb:bd:42:c8:
92:14:18:cd:ed:aa:81:33:2b:4d:cd:46:0d:19:f1:
7d:be:65:61:e5:c7:57:fb:3d:01:da:d2:b8:04:27:
2a:7b:15:0b:be:0e:07:61:5e:20:e8:81:63:2a:f5:
66:84:c9:99:b6:13:0a:a5:2b:e0:09:21:be:b3:cb:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AA:42:6B:F8:BE:70:96:15:16:EA:FD:83:D9:DE:B9:35:59:7F:CE
X509v3 Authority Key Identifier:
keyid:3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b9:3f:8e:76:64:4f:8f:48:e2:ef:e7:1f:c6:8c:fe:90:4c:
a9:66:d3:f4:92:40:14:d6:67:d6:56:98:02:7b:28:0d:e4:e9:
57:1c:c9:f3:81:fa:9b:2d:be:71:e4:e6:a3:ee:fa:a4:8f:00:
cb:62:5a:e6:29:3f:5c:b9:cb:5b:d9:ff:c6:3b:10:8a:5e:4d:
3a:0a:71:d8:fa:9e:46:8d:d4:2b:7b:07:db:43:a6:23:cb:7c:
0a:c5:85:14:4c:42:f1:c2:15:c7:68:f2:7c:57:e6:fe:c0:37:
5c:e4:e5:ec:81:67:1a:2b:e6:70:21:22:98:0b:1f:b8:20:62:
55:39:c2:09:e3:e5:61:01:64:d5:3e:05:18:85:df:23:b2:ec:
4e:2a:f8:06:36:c3:7e:23:1e:fc:12:ec:27:53:3a:82:24:88:
47:f4:4b:77:b2:2c:51:7a:25:12:60:54:f0:22:fe:97:06:4b:
c4:99:5b:34:81:84:f5:9c:0e:04:1b:d7:ea:31:e9:d8:16:85:
9b:5f:fe:1d:cb:a4:e2:32:d1:bf:52:0c:51:b5:65:73:88:3f:
50:a0:31:82:02:51:a7:88:ec:9c:14:07:52:21:34:31:b2:48:
59:aa:09:51:b8:f5:59:b2:32:35:e1:f1:f5:70:9e:8c:aa:3c:
96:ba:98:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:33:48 2026 by rpki-client