Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
File: OjLwwcjLEx0TZbOPCKTltYLiW0E.mft (raw, json)
Hash identifier: nczNDiCBuB8mJJguONClAVGYYSeEzPYrhFeq1nbC9p0=
Subject key identifier: 9F:C6:AE:AE:78:64:D0:C3:90:CE:63:11:D2:D4:60:4C:CA:A4:75:6D
Authority key identifier: 3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
Certificate issuer: /CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Certificate serial: 01A0C66A5C6E0FC19DFBFD32A8B9CA80C217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:00:53 +0000
Manifest this update: Tue 22 Sep 2026 00:00:53 +0000
Manifest next update: Wed 23 Sep 2026 00:00:53 +0000
Files and hashes: 1: OjLwwcjLEx0TZbOPCKTltYLiW0E.crl (hash: BTowqmXwvRidjA6oc6QY3BZ1+mJOhdDOpJgZNaZ0Veg=)
2: SyE1IAlXPkJZ9_iqXKQIoEOXgAs.roa (hash: s6NzmaozxO+4w9NIyythzaRrJ0Zd5+4CkcBBGqgurQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:5c:6e:0f:c1:9d:fb:fd:32:a8:b9:ca:80:c2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Validity
Not Before: Sep 22 00:00:53 2026 GMT
Not After : Sep 23 00:00:53 2026 GMT
Subject: CN=9fc6aeae7864d0c390ce6311d2d4604ccaa4756d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:37:22:00:56:3c:c8:4c:47:eb:27:c9:bc:
85:7e:2b:9f:43:46:3d:4e:ae:5f:38:48:94:6c:03:
95:10:bb:38:2a:73:dd:b3:fe:5f:80:a9:1f:8f:f9:
97:91:27:c1:1d:c5:78:cb:07:56:89:41:23:02:ec:
94:8c:1a:eb:2c:f2:b5:fa:4c:97:b2:76:55:62:09:
f7:3e:eb:c5:9a:c8:26:f7:92:8c:77:99:16:78:6a:
40:60:2a:03:77:69:bf:f2:46:51:ae:70:d1:08:8b:
d1:76:e9:05:45:46:b0:f5:6e:1c:32:dd:92:2d:cb:
f2:e9:28:e9:ad:bf:fb:8b:ca:cc:2b:a5:4e:e2:2e:
4d:95:a6:4c:83:9d:a0:ab:40:ca:b6:e8:89:af:fc:
79:48:31:53:c8:2b:29:2a:4e:2e:8c:c0:73:ab:77:
4a:80:cd:5e:f6:47:cb:71:1d:be:f2:cf:f8:80:2b:
2e:54:51:46:de:03:26:82:cf:2e:60:fb:dd:de:c0:
34:c0:1f:ec:38:78:0c:7d:41:8c:20:3b:51:3f:c7:
0a:72:7a:71:a4:0f:65:56:41:8b:28:ef:65:f0:36:
93:0d:73:7d:c7:f0:27:af:8b:60:fd:16:96:d6:bf:
37:1e:67:02:30:c1:e9:b4:3d:a0:b4:ca:32:db:9b:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C6:AE:AE:78:64:D0:C3:90:CE:63:11:D2:D4:60:4C:CA:A4:75:6D
X509v3 Authority Key Identifier:
keyid:3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:81:92:da:29:3f:5a:49:65:06:b0:71:54:d4:4b:96:72:55:
9d:c3:aa:df:76:9e:29:ba:f4:24:1b:ef:d4:04:f6:ee:12:44:
40:fa:d9:4f:58:06:4d:d8:06:01:9e:14:79:c6:b1:3a:ac:0b:
a6:97:6d:7c:b2:f2:9d:14:a7:87:a4:c6:d3:ae:29:0f:7c:d4:
ef:ed:53:e7:49:db:f1:9d:13:09:21:a4:47:fe:75:cc:1c:0b:
63:f2:42:4e:45:d1:94:37:41:90:70:19:b7:a7:d4:43:a2:90:
f0:e1:bd:2c:22:4a:15:ae:f0:f1:b0:fb:3e:95:e9:64:0b:e6:
64:4b:8b:21:e3:a9:b8:07:21:0b:a7:a1:ea:ff:7c:56:4a:9e:
1d:5d:c3:18:b4:a2:7c:79:91:38:39:f2:31:2d:fc:35:5b:75:
96:8f:21:e3:9e:f2:a4:d2:bf:f4:69:68:7f:9b:e0:f8:a5:2d:
ae:c5:36:cb:78:54:7a:07:78:2a:06:b6:32:71:63:4f:69:33:
1d:f7:ae:d5:d6:6b:1f:15:5e:56:8a:58:f9:4f:de:ea:11:0c:
84:12:47:8c:2b:7b:26:51:d4:72:6b:5e:de:97:25:9a:46:e9:
05:d8:6d:64:61:e8:13:af:73:4c:93:90:a2:a8:dd:d6:c8:92:
d1:4d:b0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:37:27 2026 by rpki-client