Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
File: OJwDADZ1arjNrJIrGvI3vOE2fOA.mft (raw, json)
Hash identifier: SToEZC6hGS0tTOEv549Rz2gojtakcZYSq8WCah8e71U=
Subject key identifier: 78:F5:42:FA:44:9E:12:B6:AC:29:79:36:0F:E1:E1:00:98:38:EB:43
Authority key identifier: 38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
Certificate issuer: /CN=389c030036756ab8cdac922b1af237bce1367ce0
Certificate serial: 01A1DDCC327B69740842992F72E052250CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
Manifest number: 1AF5
Signing time: Sun 15 Nov 2026 06:01:49 +0000
Manifest this update: Sun 15 Nov 2026 06:01:49 +0000
Manifest next update: Mon 16 Nov 2026 06:01:49 +0000
Files and hashes: 1: OJwDADZ1arjNrJIrGvI3vOE2fOA.crl (hash: +REBrtCsKA8QZ4YJW2Vle3StfCwuJ/3ig/nnNic57XA=)
2: UDNnbwScWIceduT3mK8HBVvLzOg.roa (hash: vhtxGUgVNJ9daTmq66lTJXKGFzwiSTw9nac1gcWaxBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:32:7b:69:74:08:42:99:2f:72:e0:52:25:0c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c030036756ab8cdac922b1af237bce1367ce0
Validity
Not Before: Nov 15 06:01:49 2026 GMT
Not After : Nov 16 06:01:49 2026 GMT
Subject: CN=78f542fa449e12b6ac2979360fe1e1009838eb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:ea:76:d6:ad:3d:eb:6b:65:da:f6:a0:f3:
12:89:14:7f:f6:07:1c:d6:e1:1d:93:7d:66:6f:d1:
6d:5c:ae:73:6a:15:da:7b:f1:88:7f:75:48:c9:b8:
a5:31:d8:57:8f:b4:3b:ca:86:63:4d:27:ea:fd:9b:
35:f1:c7:2b:90:c8:14:fd:86:ec:46:f5:da:67:5a:
d6:9f:4a:c6:d8:c2:b4:7d:df:93:40:52:a8:0a:e3:
a9:ad:88:e9:2b:4e:54:52:42:8b:e5:1a:3a:1e:9c:
31:91:f9:28:37:c2:d7:ca:bb:dd:e7:1c:96:ba:05:
5f:0e:bb:ec:4d:5e:3b:1d:fb:a5:54:c9:00:d6:7a:
87:fe:73:55:2b:0f:31:93:79:fe:bf:63:8d:c4:cf:
37:0f:44:33:56:40:df:b8:f8:40:37:03:51:6f:0a:
6d:23:22:4d:35:a8:bd:b9:05:1c:98:05:9a:56:68:
88:c4:f9:3e:b4:ac:46:fa:89:1c:0d:4e:0a:84:0e:
dc:30:6d:d8:48:ac:4a:14:39:e3:22:e4:06:09:de:
0c:9c:cc:b7:2f:1a:b8:3a:24:65:b2:75:68:c4:aa:
c2:08:8d:0f:89:34:4a:27:57:e4:7f:b8:1e:c6:1a:
37:82:cc:75:52:8d:e2:38:01:1e:93:02:97:eb:90:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F5:42:FA:44:9E:12:B6:AC:29:79:36:0F:E1:E1:00:98:38:EB:43
X509v3 Authority Key Identifier:
keyid:38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b2:b1:f9:01:31:0b:53:ff:14:69:fb:cc:68:66:73:cb:14:
76:02:6d:0e:2b:96:99:80:bf:79:22:4b:21:40:b6:f4:60:67:
35:bb:cf:0a:0b:52:46:79:18:27:18:1d:db:f8:4d:8e:6c:05:
cb:0d:d3:50:3f:97:71:e4:04:6e:d1:c9:d1:05:7c:9f:07:3d:
a6:cf:f1:05:05:e0:f2:3a:61:cd:18:58:50:d0:79:01:e4:12:
de:5e:4c:80:7f:20:6f:37:7e:e1:f1:05:33:53:ca:15:b1:4e:
cb:2c:66:c2:74:68:43:77:7e:e0:d2:26:50:e2:09:37:1e:02:
83:33:88:e2:77:ec:6c:04:c9:7c:b6:15:70:6c:c4:f9:0f:73:
e8:62:56:fe:55:67:be:25:0d:ee:1f:25:e2:88:19:76:66:44:
8f:d7:cc:24:65:ee:7c:1d:06:42:2b:20:0c:71:94:ad:46:56:
c4:ad:49:43:9a:02:e4:ca:05:b9:77:0e:cf:74:07:0f:52:f4:
c7:46:e3:88:1e:8e:7a:8c:33:68:77:16:78:3f:ac:e2:f9:50:
11:8b:ae:9d:50:bf:63:ed:67:24:3b:a1:10:ef:b9:60:80:67:
e5:7b:e7:4f:1e:77:26:9e:cc:8f:a3:fd:07:68:25:b0:82:53:
0e:c7:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:58:19 2026 by rpki-client