Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: 0SOkXx7sHgP4xhWrFLB2aQIyrToO2QqaQD3GNnNSbOQ=
Subject key identifier: BA:6F:06:0B:E5:5C:89:DE:5B:2B:E0:65:4A:A1:74:1E:3B:04:67:C4
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 01A12DD7B879B5E4E5BBF360F14583727A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 1A9E
Signing time: Mon 12 Oct 2026 02:01:14 +0000
Manifest this update: Mon 12 Oct 2026 02:01:14 +0000
Manifest next update: Tue 13 Oct 2026 02:01:14 +0000
Files and hashes: 1: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: OX6UzCmqXQGfLUysfvhkpwDJJbHDyIAcrXh/NRpScDo=)
2: XY5E_RelyGQ_x471R3yDmTVoDTk.roa (hash: eROWL67g5W2cGW9pnAdECfpL0HCLybLp8h6TDlEvGJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:d7:b8:79:b5:e4:e5:bb:f3:60:f1:45:83:72:7a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Oct 12 02:01:14 2026 GMT
Not After : Oct 13 02:01:14 2026 GMT
Subject: CN=ba6f060be55c89de5b2be0654aa1741e3b0467c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:67:cc:c7:14:84:8c:4c:1b:63:a0:04:6e:
04:c3:65:6b:b3:da:04:37:20:5b:ee:df:63:8a:ce:
70:a5:07:00:21:0d:7a:c8:d6:f4:0f:a0:c8:ae:cd:
fa:df:dc:48:23:76:35:6e:d3:8b:a9:b5:ba:2e:7c:
75:f3:95:70:70:51:d3:87:71:6d:09:64:31:d8:ae:
57:e0:3d:07:03:35:ce:b4:10:27:72:2d:2c:01:85:
c9:91:46:e5:49:9c:cf:27:65:fe:3a:f7:7f:09:c6:
5f:17:b2:9c:cc:df:e1:3f:f3:de:a9:83:65:63:00:
ec:e1:77:d4:d0:30:9c:31:96:8a:dc:54:fa:cf:6f:
62:a8:b0:68:27:7a:0c:b2:c6:79:2e:8d:9a:4a:54:
77:00:4f:a7:d8:5f:e6:43:75:f3:40:4f:ef:f4:9c:
e3:ce:75:bc:83:68:2b:51:1d:46:cf:98:b6:03:3f:
12:84:e4:7c:77:62:0e:a0:79:c4:45:f3:bd:52:73:
b2:f4:cb:7a:33:29:5b:54:99:d9:6d:08:f1:60:c1:
ee:c0:81:d2:ab:e1:8a:67:09:85:a7:f9:c0:87:34:
8e:d4:0a:90:25:b4:93:f6:0f:8b:90:0a:b8:6d:f1:
4d:a1:98:2c:87:dd:a8:df:fc:fb:25:44:64:c6:0c:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6F:06:0B:E5:5C:89:DE:5B:2B:E0:65:4A:A1:74:1E:3B:04:67:C4
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ac:40:43:66:47:26:49:6d:b9:4d:8a:b5:05:3b:00:d0:cb:
6a:fe:a5:33:35:08:05:2d:65:72:b4:7d:40:cc:fa:27:bc:17:
e9:2e:ad:79:e9:b4:14:c8:dc:b0:68:7d:49:60:9b:38:2e:8f:
6e:8d:62:c5:96:84:54:d5:00:9d:82:e0:c5:62:cb:85:13:2b:
3c:3d:b0:d3:47:7d:14:99:61:0f:38:92:04:e2:67:3e:52:62:
ca:64:09:8d:86:3a:8d:bf:71:e6:fe:89:e4:ac:91:4b:3d:7f:
d7:fa:b3:68:86:f5:6c:2c:42:8c:fd:bd:1e:00:ec:e6:38:40:
33:8f:17:f9:78:c7:7b:16:d1:88:6a:72:56:9c:0b:98:e3:16:
00:89:8c:93:e6:bb:7e:a9:48:e4:87:ff:2c:22:ee:41:93:d5:
35:15:7d:02:bd:3d:8e:3f:2e:16:e1:a9:4f:17:3a:93:62:68:
3a:5f:3a:81:09:6f:11:b9:3a:b7:05:88:b2:3c:8c:8e:a8:2e:
0f:93:c0:4b:9e:a3:e9:ed:72:eb:bc:d5:4d:c8:fb:0a:8c:e8:
04:ef:e2:67:8d:ac:95:5f:44:d1:3b:f9:9f:82:14:c1:6f:92:
d8:7b:f8:a8:8b:f5:f8:2b:3d:7d:3b:77:ce:f5:34:87:8c:0e:
e3:26:3d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 05:26:27 2026 by rpki-client