Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
File: OoOZNq7v8ohnjncmMwIPolm9nPI.mft (raw, json)
Hash identifier: 4b6B90Rq5hFjf/EFQQ9YZJT5RDR2awdRu9O8FIvryFg=
Subject key identifier: C3:BE:AF:C4:CD:40:55:07:87:1F:C4:22:9B:45:64:E1:BF:32:13:E0
Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
Certificate issuer: /CN=3a839936aeeff288678e772633020fa259bd9cf2
Certificate serial: 01A0E1E1A8E7F3B136FF94A8B2EF2E4DCECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
Manifest number: 0A3F
Signing time: Sun 27 Sep 2026 08:00:57 +0000
Manifest this update: Sun 27 Sep 2026 08:00:57 +0000
Manifest next update: Mon 28 Sep 2026 08:00:57 +0000
Files and hashes: 1: OoOZNq7v8ohnjncmMwIPolm9nPI.crl (hash: tyLZoKnYc3ShlfkKAxKmOrwSsClzs3EmcC2CJB9v05Y=)
2: PMdpUUy3N8aucFQis2EHtpFZuIY.roa (hash: 4gf7AvqhQ7Z0YpFJcEQijaezm8f7LNn2p+OXg9bnpFY=)
3: y2_r5sbY9Lv_uRDh7BVz6TP_Rqk.roa (hash: elggw6C3t4Wz+4yMu7U0O34nBVY/GyhPWM7xDo4hWNU=)
4: z1DkqtK6bhv2xKbEFbpfSZsh_Yg.roa (hash: x3T0qFMVxxd2FdR3A4LaLQ4+c2t85rP2XyfqD4Q6wxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e1:a8:e7:f3:b1:36:ff:94:a8:b2:ef:2e:4d:ce:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2
Validity
Not Before: Sep 27 08:00:57 2026 GMT
Not After : Sep 28 08:00:57 2026 GMT
Subject: CN=c3beafc4cd405507871fc4229b4564e1bf3213e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:52:c4:f6:30:bb:48:92:b5:63:8d:2c:cc:
16:e3:b2:a5:95:d0:56:10:ab:f4:32:48:6b:8a:51:
a3:8e:74:98:b4:e8:65:e8:7f:1e:43:8c:2e:b8:38:
45:02:2c:c0:73:6f:e9:61:09:bc:28:ff:34:ab:71:
64:38:7d:4c:f5:55:76:fc:bf:82:83:a2:e8:be:0a:
a6:70:e0:0c:26:f1:4a:28:29:5c:fa:ca:3c:44:5f:
f6:27:09:52:ef:46:be:3a:d4:a8:3b:51:89:b9:44:
e4:b4:09:e8:0c:c9:2e:02:8c:9f:a8:de:9e:f6:21:
b7:76:a8:62:53:b7:91:09:f5:ec:a0:2e:3f:73:ce:
6d:e8:4d:34:68:c4:b2:74:ee:73:a2:46:53:47:8b:
83:27:59:1b:f8:89:65:a5:54:16:4b:13:19:13:cd:
b1:a5:e3:ed:c6:73:b8:d6:ea:f8:78:b1:02:1b:50:
42:98:80:d5:92:7a:a4:8d:f9:8d:24:b6:9a:d9:21:
a7:c7:53:41:62:8c:4d:84:1c:c6:d6:95:8b:68:33:
40:f9:4c:92:e6:d2:93:ee:38:80:d4:f7:07:ed:30:
ba:85:c5:e0:f1:ef:15:aa:07:90:0c:56:32:29:83:
33:96:0c:be:66:83:01:0b:a8:f2:9d:15:b3:5f:9b:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BE:AF:C4:CD:40:55:07:87:1F:C4:22:9B:45:64:E1:BF:32:13:E0
X509v3 Authority Key Identifier:
keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:04:2c:49:dc:d4:86:28:f4:e6:aa:9e:08:1f:b7:a5:2e:63:
29:33:fa:a4:1f:b8:aa:a7:b9:f8:2e:3d:ad:fb:0c:78:37:86:
9e:c1:2e:3e:6d:42:5c:5e:d5:a7:f9:3e:a3:00:6a:8c:9f:37:
19:14:6d:ca:ae:53:0b:a7:bb:10:a1:c8:af:6e:f3:97:be:68:
ef:83:28:8b:5c:4a:ff:56:90:bd:39:d8:22:10:4a:8f:95:a6:
82:f6:69:dc:e4:c4:3d:d2:25:db:ba:3d:c6:ce:02:7e:1a:db:
4d:07:4d:9e:ae:3a:60:81:a1:db:da:d7:fc:ab:03:fa:55:87:
4c:ab:37:5b:59:79:c9:be:15:ab:a2:d9:c6:6e:7c:df:69:26:
40:df:79:d7:c6:af:25:b6:39:b1:36:49:33:be:98:2a:54:73:
af:bb:e4:75:67:66:6b:af:ee:a1:bd:0c:f4:21:09:e4:0c:21:
76:ee:81:f4:eb:25:a4:e2:85:f6:8e:bc:4b:19:da:64:c3:ee:
86:da:12:c3:f1:35:80:b0:28:a7:7c:26:e4:eb:00:cb:dc:8d:
d6:80:b9:ed:39:37:2f:c8:af:80:cc:55:ae:00:bf:56:83:38:
77:04:66:38:0f:09:37:e4:04:4d:05:25:b3:75:74:0e:3c:6c:
11:c7:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:08:07 2026 by rpki-client