Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
File: OxJehmsjfJZ06em3qavRi1fXHxA.mft (raw, json)
Hash identifier: UytFA1KQeLR1y91ut2es76o2iSeBxPS7DIFw4AjCCYk=
Subject key identifier: 2B:AF:81:6F:D9:8B:6E:AE:67:A5:F8:08:2F:41:CF:5B:96:F4:DC:E2
Authority key identifier: 3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
Certificate issuer: /CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Certificate serial: 01A0BE42DA3DD620B769C5A1BD0ED8D263CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 10:00:47 +0000
Manifest this update: Sun 20 Sep 2026 10:00:47 +0000
Manifest next update: Mon 21 Sep 2026 10:00:47 +0000
Files and hashes: 1: OxJehmsjfJZ06em3qavRi1fXHxA.crl (hash: 4vmiw7cwP4vHf/tLTPRtFljMBmsWRhZ87HC87HjP1PM=)
2: Xhri0AVup-iOcfJupA4s7w3cpYc.asa (hash: 4eaUl5vtgL4q0oqF8vNtbDWxyFZPR38UGBwc1PJc8Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:42:da:3d:d6:20:b7:69:c5:a1:bd:0e:d8:d2:63:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Validity
Not Before: Sep 20 10:00:47 2026 GMT
Not After : Sep 21 10:00:47 2026 GMT
Subject: CN=2baf816fd98b6eae67a5f8082f41cf5b96f4dce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:41:51:90:a1:74:eb:69:71:3e:98:03:0c:
2b:5b:05:87:8c:64:b2:9d:44:b2:0b:58:2b:6d:3c:
ea:73:12:7c:ff:2e:10:17:6f:a6:7f:6a:b3:be:f0:
da:f6:a2:4d:cc:e3:82:f8:1a:53:13:4a:d9:61:51:
20:87:a2:ff:c1:e3:8b:c8:04:d6:5d:a0:be:af:e9:
11:b9:83:fa:3a:d7:bb:4d:d1:79:c7:bd:8e:cc:fe:
0f:a1:10:c4:3f:c6:bd:4f:39:e6:db:a0:a0:90:86:
09:54:81:92:60:f5:7e:64:85:b3:cd:90:63:0c:ba:
bb:48:99:9f:6b:a4:0f:a5:8e:f9:d4:1b:c4:29:8d:
6a:3b:29:9a:5d:1e:5c:ca:09:55:84:47:25:22:1c:
96:25:e4:80:d1:d0:ad:d2:08:1a:b4:c4:62:9f:59:
bb:92:98:45:22:d5:8d:6f:a9:b2:62:2a:6e:cf:5f:
96:d9:f9:b1:21:d6:ae:97:b0:07:53:12:31:1e:ac:
fb:c1:39:33:3d:b3:39:bb:c6:18:80:3c:58:ea:76:
35:af:54:f7:07:b3:21:c3:09:28:3d:d8:2a:b6:37:
5a:4c:44:fa:af:60:f7:44:fb:7f:ee:69:4e:9f:11:
7c:32:60:dd:90:68:be:24:f2:4c:46:76:e6:21:c2:
1b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AF:81:6F:D9:8B:6E:AE:67:A5:F8:08:2F:41:CF:5B:96:F4:DC:E2
X509v3 Authority Key Identifier:
keyid:3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c2:d8:8d:e9:ba:cd:c3:00:4e:fd:35:d1:0f:2d:54:72:15:
96:47:46:36:97:ef:28:c0:70:67:ff:62:a2:f9:40:bf:eb:cb:
b4:c5:b6:76:83:73:8a:43:a8:40:f3:95:fc:0c:35:ab:9d:2b:
a6:38:12:4d:c6:74:c1:e5:a9:c0:2c:75:01:bb:29:8d:17:41:
8b:88:be:d4:e9:e7:43:7e:2c:b0:09:e5:0a:bc:80:ee:61:75:
4a:4e:d1:be:e4:8f:95:91:96:b7:d7:a5:5a:ad:de:55:2c:9e:
f4:3d:40:d8:4e:ae:66:78:51:f5:f9:f9:ff:91:ab:5d:33:5b:
b9:fd:eb:28:df:e3:fe:3d:e7:52:76:d8:1a:28:dd:65:9c:8e:
b3:91:e2:cf:62:97:1f:26:8c:d4:96:6f:03:e8:db:13:f6:b8:
ef:3d:9b:d7:bb:3c:b9:7d:f1:b5:57:24:88:dc:a3:7d:23:b2:
9c:55:cb:f0:46:c3:2b:1a:2f:11:9d:0b:3f:f5:58:f9:da:f0:
a3:02:30:24:46:e0:d6:19:99:ef:12:8d:52:fa:6c:76:2c:04:
d0:25:e0:3d:37:33:be:79:f0:48:7c:a2:11:2a:a4:27:d8:f7:
0f:ec:08:fe:c5:08:10:81:a6:e7:1b:79:7d:a9:2a:52:19:c3:
f2:f7:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:54:19 2026 by rpki-client