Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
File: OJwDADZ1arjNrJIrGvI3vOE2fOA.mft (raw, json)
Hash identifier: Gbplu5il5yHyzycbZEc5e4A0Mjm3JHR57sJ21TaQotA=
Subject key identifier: D1:A9:B7:27:89:4C:BC:3D:4B:CF:B2:D4:AD:1C:8F:0B:E3:66:BA:51
Authority key identifier: 38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
Certificate issuer: /CN=389c030036756ab8cdac922b1af237bce1367ce0
Certificate serial: 01A0C5C513269B3F78D4AA83AEE67F45CBB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 21:00:22 +0000
Manifest this update: Mon 21 Sep 2026 21:00:22 +0000
Manifest next update: Tue 22 Sep 2026 21:00:22 +0000
Files and hashes: 1: OJwDADZ1arjNrJIrGvI3vOE2fOA.crl (hash: is3vrTinCAwuuWZeHzkLydS+BvrRRmYbMClL4Y5qKgc=)
2: UDNnbwScWIceduT3mK8HBVvLzOg.roa (hash: vhtxGUgVNJ9daTmq66lTJXKGFzwiSTw9nac1gcWaxBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:13:26:9b:3f:78:d4:aa:83:ae:e6:7f:45:cb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c030036756ab8cdac922b1af237bce1367ce0
Validity
Not Before: Sep 21 21:00:22 2026 GMT
Not After : Sep 22 21:00:22 2026 GMT
Subject: CN=d1a9b727894cbc3d4bcfb2d4ad1c8f0be366ba51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:d5:c8:ae:ac:8c:55:89:ad:8f:e5:0f:02:
e7:71:bd:01:64:fa:8a:58:61:ae:79:83:70:e7:0a:
9d:e6:77:dd:15:c7:9b:aa:82:ad:92:21:5d:ef:5e:
05:0c:06:54:83:6c:0a:0e:0d:1f:52:96:fb:a2:fd:
9d:b5:6d:51:96:3b:90:a1:43:7c:37:d0:ee:17:36:
82:61:89:7b:d1:7e:1a:2d:2d:3c:64:85:72:ac:2e:
7c:2d:59:e5:42:80:ee:e1:0d:1d:eb:67:35:22:3f:
b0:21:73:0a:59:5c:54:b3:a6:a2:a1:da:dd:ea:40:
b5:e8:a5:43:3a:8a:d9:7f:e6:fb:13:88:b8:db:9d:
85:25:bd:8d:6f:cc:89:d0:8e:83:1e:dc:44:ab:0a:
cf:da:58:a1:16:21:f7:1d:04:3c:92:95:1d:80:74:
a2:db:0d:a1:d4:8d:ed:20:59:05:8d:47:0a:84:0c:
88:91:06:42:29:ee:c6:87:d4:25:1f:39:50:e4:65:
97:2c:29:52:12:39:5a:87:ca:59:8d:75:81:cd:ee:
51:5c:02:aa:34:81:3b:fa:5e:2a:bd:37:83:f6:9e:
54:08:48:ee:73:91:15:84:c1:77:ff:5d:8b:6c:9a:
84:65:a7:f0:96:ab:ed:fc:23:e3:c4:8a:28:73:0c:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A9:B7:27:89:4C:BC:3D:4B:CF:B2:D4:AD:1C:8F:0B:E3:66:BA:51
X509v3 Authority Key Identifier:
keyid:38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b1:e3:ea:09:d2:d3:b0:ed:a4:98:ca:90:a1:33:09:7e:20:
4f:68:db:d5:55:c3:62:8e:bc:7c:29:dd:21:ed:53:3b:39:81:
d3:2a:f4:1a:c7:ab:56:3b:7c:2b:25:9a:cf:17:1f:de:05:82:
3b:d0:fd:7a:71:a6:b3:87:31:e8:ba:5c:f7:b9:c9:4b:cd:75:
dd:83:51:d8:72:9d:02:8a:26:bb:1e:ab:ef:59:b0:69:85:5a:
2f:c3:c4:45:40:3d:bd:e5:6d:1a:d7:b2:54:d6:47:4c:7d:2b:
4a:a3:0b:1d:97:cc:9f:50:85:28:da:20:aa:90:9e:d1:be:a8:
fe:34:ae:5c:2e:c8:31:cd:7a:71:a8:f6:2a:8d:7b:86:c4:27:
a2:40:bb:0b:a1:b4:2c:83:75:53:86:e8:27:a4:76:bc:64:88:
3b:a9:ec:2a:d9:29:7c:c6:06:5c:06:85:94:45:9b:04:a0:24:
f2:45:3c:2a:b5:f7:45:ef:6f:4a:2a:4b:c1:4f:e3:46:a7:01:
45:48:e4:73:ba:67:31:74:d7:44:7f:3f:2d:e2:2a:d6:eb:dd:
79:25:bf:2d:4c:5c:e5:b2:d2:10:ad:82:02:95:4b:48:41:50:
74:46:c3:b0:35:e8:2b:82:46:44:cc:3b:c7:5e:2c:a0:01:04:
84:02:02:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:03:49 2026 by rpki-client