Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File: OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier: kvVwuQv0LKM9MM/DvsPFcwIrwIAINq0eg7No8oNG9mk=
Subject key identifier: CF:4C:86:91:49:DF:F2:37:86:A3:27:6A:57:10:F7:64:B2:D1:92:4E
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 01A13F396BF3638415B4E7F402946F500A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number: 1242
Signing time: Thu 15 Oct 2026 11:01:29 +0000
Manifest this update: Thu 15 Oct 2026 11:01:29 +0000
Manifest next update: Fri 16 Oct 2026 11:01:29 +0000
Files and hashes: 1: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: fKMp5Y5mv2GYnVdN0CKWS2XWO68VN6g6u7+QX28uDq0=)
2: TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa (hash: w2y72ko+lJjiVlRbZd4qD2G3W4qa+BLqf6Sn4G+/dow=)
3: XWcYfudW_fCjYcND3H407xe959o.roa (hash: hWyo7JRjc5zRnP54qNBVfiEpztNdLDDxrtX9abLg7Ps=)
4: rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa (hash: ng9lqabxlxHQ1G6hpIjPJfi43vHsrt3ed7Cyb0T70ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:6b:f3:63:84:15:b4:e7:f4:02:94:6f:50:0a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Oct 15 11:01:29 2026 GMT
Not After : Oct 16 11:01:29 2026 GMT
Subject: CN=cf4c869149dff23786a3276a5710f764b2d1924e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:b6:e1:bc:7e:01:f9:03:f1:d3:e3:68:c2:
66:8a:b2:2a:0f:ae:85:98:04:f0:17:68:02:2c:95:
86:55:32:cb:7b:ef:7c:ef:d6:1c:bb:90:07:f8:29:
49:cb:aa:c7:63:d8:95:17:c9:1f:65:b6:e1:20:e9:
38:8e:0b:56:e7:43:21:0e:1e:09:3b:70:12:af:f3:
2c:72:56:b3:0e:1e:cd:4b:89:d0:88:ce:c5:39:ea:
90:1b:d1:3f:69:80:ee:a6:3d:9f:68:49:a1:4d:4f:
c1:fa:74:3e:02:8d:95:05:1b:49:ad:71:8f:65:4b:
5c:17:04:1f:5f:ae:0b:68:0a:da:08:60:75:fc:58:
16:7a:22:b5:3c:26:58:92:96:a4:bd:ab:3c:7b:42:
34:77:ea:93:41:25:b5:05:49:2e:7c:d6:83:45:a9:
49:8e:10:84:06:b9:96:90:bc:77:b8:38:df:23:d0:
c8:5f:c0:f0:19:5d:8c:90:a2:98:56:c7:bf:f6:9d:
d8:04:b0:c6:df:f1:6f:3d:8f:ad:97:88:7c:91:88:
39:b2:76:21:f1:a5:05:11:5e:af:a7:b2:1c:48:84:
9c:a6:9c:cb:90:f8:62:53:20:ae:fe:7f:66:01:21:
9d:23:65:54:4d:be:aa:a7:51:80:69:80:dc:31:a0:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4C:86:91:49:DF:F2:37:86:A3:27:6A:57:10:F7:64:B2:D1:92:4E
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:df:7f:8f:a4:23:d9:f0:ed:7d:94:d4:7e:3b:89:48:58:51:
e6:be:d7:3c:5c:df:c2:c4:d2:02:32:6f:e5:e7:fa:bf:82:dc:
0f:0a:06:bf:1a:57:b2:30:d5:d6:e5:36:cb:35:d7:f7:f9:4d:
e5:ef:73:f6:2f:c7:00:82:28:9b:24:cb:16:ae:ce:f9:d3:ad:
f4:2e:98:ea:83:d0:8e:39:2a:40:9c:0e:0d:7b:0b:d8:70:52:
46:d1:9c:58:d9:02:9b:34:9d:f6:ae:db:8b:14:27:59:cf:1e:
23:8d:55:a9:0b:ac:0c:93:42:56:05:89:ed:67:5e:d2:b6:ae:
fd:d6:58:e7:06:de:fd:33:8c:9b:f9:14:ea:06:ec:8f:9d:1f:
ee:3d:52:95:dc:d2:0a:9c:8b:4c:5f:83:53:a3:13:7d:24:62:
18:2e:d6:ef:79:33:4d:d2:73:88:74:10:39:bb:b5:12:b4:30:
e2:09:28:7a:61:cd:39:a3:0e:8b:a7:83:bd:92:6f:26:3d:37:
dd:f5:aa:87:f1:54:74:41:5a:b0:fb:f5:43:16:4e:73:c2:c6:
a0:29:10:ee:33:1e:b0:b2:ff:6d:80:c4:85:54:7a:e1:6e:49:
d7:2c:17:d4:76:86:4f:39:58:ec:8e:b2:74:bf:69:17:7a:59:
1f:b0:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:53:26 2026 by rpki-client