Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: 3p/h++L80DIIOHqq5mKWgtL7Ac069PdmySgu+Q2X3Wo=
Subject key identifier: F9:8D:6F:E6:4E:4E:BC:18:90:EB:76:33:FB:3A:86:E5:58:61:6B:B0
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 01A0DBDFE45C13B92FCBB913DD4A7713F0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 0B8E
Signing time: Sat 26 Sep 2026 04:01:18 +0000
Manifest this update: Sat 26 Sep 2026 04:01:18 +0000
Manifest next update: Sun 27 Sep 2026 04:01:18 +0000
Files and hashes: 1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: GBciBg0JaSL/z4r7A6Qk+/6KjkPCaNAnQ0zCjHL3z6Y=)
2: futCv-J21MxYYna1NlT0XMLEUxQ.roa (hash: Nuw/WTHENdY0hVuqEP9gOdFLaQ350WDyvFQ78Xtrdks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:e4:5c:13:b9:2f:cb:b9:13:dd:4a:77:13:f0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Sep 26 04:01:18 2026 GMT
Not After : Sep 27 04:01:18 2026 GMT
Subject: CN=f98d6fe64e4ebc1890eb7633fb3a86e558616bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:af:d1:1f:cc:b5:27:ca:bd:c4:85:6d:ce:
05:5d:ca:a1:ec:d3:39:bd:50:c9:68:e5:c9:a8:67:
23:17:96:82:63:c2:f1:87:1a:ed:4c:a9:b7:0e:b9:
45:5b:96:b4:9e:82:1e:3f:b5:27:3d:38:1c:90:92:
b1:ae:61:77:dc:a3:af:c1:db:b3:20:b5:28:da:5c:
7b:16:66:43:bc:e3:ea:98:d4:b9:01:40:20:a3:b3:
0b:59:d9:1d:b0:d0:c1:7c:e7:84:ce:31:e6:58:ad:
2d:a1:d6:43:eb:65:6f:5b:8f:1f:96:3d:ad:3e:ec:
99:4f:f6:a7:2f:36:c3:dd:2f:cf:aa:b7:24:28:b5:
10:5d:3b:7f:92:77:b1:fa:43:8b:b4:69:6f:21:6b:
5d:36:6f:97:d7:5d:46:4f:53:cf:2a:18:97:51:36:
09:a0:89:bf:01:e0:2d:60:06:20:9d:f0:cb:9b:91:
3b:f6:99:64:92:56:fb:c1:02:62:1c:45:4e:5a:37:
a5:75:9f:6c:bb:51:d9:bf:3e:67:41:3b:df:fa:33:
6d:8a:0b:7d:00:53:17:88:8f:6f:6c:43:17:35:70:
88:61:e5:fb:ad:54:07:36:69:af:ad:49:12:f1:29:
4e:36:d8:4d:b5:63:8f:fb:76:ff:73:80:6d:ee:d8:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8D:6F:E6:4E:4E:BC:18:90:EB:76:33:FB:3A:86:E5:58:61:6B:B0
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:06:26:b7:3d:f4:1a:b7:31:ee:c4:51:dc:05:60:5d:88:21:
b0:6a:2b:71:e2:89:34:e8:9d:49:f8:14:b5:00:13:1f:4f:b9:
cf:86:7a:93:33:91:5e:cc:71:30:b1:23:05:92:af:78:a3:7b:
fb:83:b0:3b:b6:36:e3:66:fa:93:4c:68:c5:a9:66:5d:d5:1c:
e6:56:19:48:af:ab:3e:fa:45:de:1b:e2:24:87:6a:60:d9:e2:
5a:b6:8a:89:c7:55:dc:ad:b9:63:ed:c4:10:7e:f6:44:91:18:
51:2c:e3:6c:fa:e0:c0:ec:df:9b:52:52:20:26:d2:57:32:70:
1c:82:74:32:6f:c9:29:af:44:0a:47:80:12:bf:65:0b:82:8a:
9e:bb:ed:2a:49:c9:fa:6f:d7:12:91:e9:56:77:95:61:56:4c:
c1:ea:f5:b4:59:ed:6b:be:6b:75:15:d7:11:28:f3:9d:ff:f8:
a8:3d:e3:0d:37:69:ef:60:3d:29:0f:49:d6:85:cf:ca:be:5e:
a7:d0:fa:78:91:f2:26:4f:77:f9:bf:ba:8d:35:ab:2c:0a:44:
af:76:69:66:a3:30:c7:74:f2:c0:b1:56:56:d5:3e:ff:19:3b:
66:2e:69:f0:90:46:9e:35:84:d2:f7:77:eb:c1:07:87:f7:07:
3d:1d:e0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:20:13 2026 by rpki-client