Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: 6Cl+xdJxBc5Pm5Nm0a2UkA+cc/Y168PMvCC7joWGhAI=
Subject key identifier: FD:F8:A1:B1:1E:92:CE:EA:AE:1B:9C:AF:82:24:19:8A:A4:4D:D8:6C
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 01A0C70ED3E40BDEB609793F39DDD8D313FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 117D
Signing time: Tue 22 Sep 2026 03:00:32 +0000
Manifest this update: Tue 22 Sep 2026 03:00:32 +0000
Manifest next update: Wed 23 Sep 2026 03:00:32 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: BrrT93vN3JuoXlKitqBeS5mw1MrPGjvAjoP5qUbl/o8=)
2: cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa (hash: kFvba9VnGvbidEsHHI8Wcjcp/+eUykc2W3uRbNK02kM=)
3: s148UHmTyL2I6MjySz-GFW3mNYI.asa (hash: a59MaIiFr2fa8TsMCT5CNyhH5jJOVRe6D3jxY/4FIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:d3:e4:0b:de:b6:09:79:3f:39:dd:d8:d3:13:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Sep 22 03:00:32 2026 GMT
Not After : Sep 23 03:00:32 2026 GMT
Subject: CN=fdf8a1b11e92ceeaae1b9caf8224198aa44dd86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:bc:ee:ea:a6:8b:2a:e5:84:df:8a:bb:66:
e7:91:c2:43:a4:bc:7d:e7:a1:b4:b4:d9:55:10:21:
4b:45:34:25:ea:e2:ae:7b:97:dc:6d:9e:10:f4:10:
16:e1:ff:57:46:db:03:52:96:4d:4a:de:38:53:12:
b3:54:6a:76:d9:af:6b:38:48:a8:dd:96:77:58:b6:
05:49:4e:36:12:81:c6:54:f2:c6:15:53:a4:d4:30:
03:f9:0c:cf:ea:28:58:11:4a:f4:d8:c3:63:d3:02:
3f:4d:23:58:0c:e6:f0:3f:3e:6e:9b:ad:c1:36:1f:
17:96:59:8f:fb:1c:d9:35:04:b0:2a:0a:58:c7:09:
89:a5:c0:08:3f:b4:7d:3f:ed:5c:d5:47:ad:57:b8:
3d:24:0c:dc:fc:fe:97:14:e2:c1:18:55:6d:80:f1:
80:87:a4:ca:64:7c:0f:61:ce:70:59:9d:81:44:c8:
05:20:91:08:5e:24:ef:09:26:13:86:e0:66:43:9e:
a3:62:3f:98:c2:2f:80:84:25:ec:56:ad:9c:a2:c4:
0b:7a:1e:61:b7:8e:61:4b:e5:76:dc:f7:b6:0e:bb:
9b:a6:5c:b1:fa:b8:41:a2:cd:91:3a:d7:68:0b:7b:
3d:cb:a4:16:6c:4e:57:6d:0f:22:f2:6e:8d:d6:0b:
19:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F8:A1:B1:1E:92:CE:EA:AE:1B:9C:AF:82:24:19:8A:A4:4D:D8:6C
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:19:6e:1e:fb:9a:08:ac:61:58:83:77:f0:75:bb:fa:df:5c:
14:99:41:43:d2:63:b0:28:c3:4c:45:a6:36:02:56:39:f7:c2:
ae:5d:4b:4b:44:8d:6a:c9:c8:b0:3b:00:db:84:1f:47:27:5f:
aa:6c:c3:56:81:78:d7:7b:1c:fc:f7:b0:98:82:92:eb:f4:82:
37:11:2e:92:ef:aa:8a:01:f1:63:b0:ca:96:05:15:f9:9a:7e:
66:3f:25:51:5d:c3:eb:d0:b2:44:b6:c7:e8:ec:37:7f:60:2a:
28:30:02:15:e0:85:57:03:bb:2e:88:fb:74:c1:10:5f:f6:d5:
ed:e3:c8:a9:33:40:c1:f5:fe:48:4f:15:7c:eb:d2:70:fb:fb:
be:53:2b:75:60:ce:50:91:d9:f0:77:b3:39:e0:b5:53:25:a9:
cf:ed:a1:9f:cd:4b:aa:02:92:6d:eb:ee:7f:67:46:9d:84:ed:
85:3b:85:60:75:d6:72:49:f2:4f:79:d1:fd:68:a8:2b:2b:36:
55:fa:c8:da:9e:0b:28:a5:09:55:56:54:a1:b4:ef:96:ac:f9:
43:3a:f1:0e:27:2f:99:db:32:0c:53:c6:f1:68:e4:bd:b2:87:
99:cf:e2:b6:3a:ff:5f:7a:6a:37:0c:2b:2d:9e:3f:02:38:25:
c1:1a:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:24:59 2026 by rpki-client