Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: WUepM/DGpq40ggGky8+9wwbErOJqoucmwNBqIeBf57M=
Subject key identifier: 7B:BE:82:CA:23:BC:08:56:85:01:00:51:D1:86:0D:37:4B:F0:87:B4
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 01A0C067BE27FEFE712A2368A1F56ADEDB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 071A
Signing time: Sun 20 Sep 2026 20:00:19 +0000
Manifest this update: Sun 20 Sep 2026 20:00:19 +0000
Manifest next update: Mon 21 Sep 2026 20:00:19 +0000
Files and hashes: 1: AgJDjffcx13iFGg7O-6BTWa5Mi8.roa (hash: F0nKF0WSY8oAZJYmoA/vzmlCpRXcrLqKk16YPUwPz6o=)
2: CUqZc8hec0Ms-egOcTLYoCv3kIM.roa (hash: ZlTiAUnMG4BkW/1TEjOoZRHb8X1Pe28FH9YpKcWqV/8=)
3: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: T7+7Rrmeoeov3tghYfuyJVr5y/a0wqybvJWx0o257TQ=)
4: hiaLRXvZEWJHbVSfrWH639IpyGY.asa (hash: NEonAO1XE9fHfE9rdEUMWD5j05luJAvYlzVQQMAchnY=)
5: xiMdBnBAVbzMONM7bWyZSTHXags.roa (hash: R9sPzPBlp0RJe+m5WxmViRNBW2hNOa0kbVaZ9zt/4VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:67:be:27:fe:fe:71:2a:23:68:a1:f5:6a:de:db:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Sep 20 20:00:19 2026 GMT
Not After : Sep 21 20:00:19 2026 GMT
Subject: CN=7bbe82ca23bc085685010051d1860d374bf087b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:34:b7:38:62:a0:ff:a1:5a:e5:5f:27:9e:
f0:3a:40:82:85:19:48:bc:b6:17:a5:75:3e:0b:ad:
3e:64:7a:69:10:49:4d:39:77:46:06:6a:87:cc:b6:
f6:0f:2c:39:87:cf:2b:a3:59:c6:61:c3:c5:1c:e8:
f5:63:c6:94:90:0e:4c:60:69:22:99:9a:4a:20:fe:
7d:d6:09:5e:2c:15:29:d0:2b:1f:f9:0e:c1:bc:f4:
d1:d0:9d:7e:31:f6:aa:cc:af:0b:1d:94:3d:8e:5e:
b7:b5:cb:7c:7c:12:5f:eb:be:07:a0:7c:3d:f6:c3:
35:62:f6:46:85:fa:66:70:c2:c1:30:51:12:8c:93:
68:6d:02:de:34:0b:4d:33:ec:4b:bc:23:be:b2:38:
06:8c:59:ac:25:58:05:35:1d:99:9d:63:10:22:de:
02:ab:89:4b:0e:4f:03:17:68:13:d7:87:49:fb:88:
af:bf:36:2a:5f:0c:d2:a9:5b:52:55:35:81:c4:41:
ed:1b:95:2c:b2:22:41:bd:88:9f:ee:52:32:58:98:
0b:e3:b6:6c:c7:68:83:61:b5:be:b6:5c:46:7b:22:
af:de:35:d8:bd:46:0a:bf:69:09:56:c8:19:63:0a:
61:d3:e2:7c:9a:98:c2:70:a5:91:f7:27:dd:0e:2b:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BE:82:CA:23:BC:08:56:85:01:00:51:D1:86:0D:37:4B:F0:87:B4
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0d:9d:90:76:1c:40:7a:68:ff:09:42:4d:1e:88:23:45:ad:
17:ff:42:08:a8:e4:6a:95:fe:1a:60:98:2e:30:a8:60:43:4f:
aa:46:80:b2:d9:8f:6f:4c:dd:eb:b1:9c:79:67:6f:89:59:ee:
2d:de:d3:9d:0e:a4:24:dd:3d:6b:77:eb:a5:fb:c2:7e:8c:cf:
3e:20:0d:31:60:dd:61:4d:3f:7c:75:48:05:cd:3e:0d:a6:ee:
7f:aa:a6:fd:3e:7a:3d:49:e8:6f:7e:a0:d8:d3:ad:bc:8d:92:
14:c3:84:5c:f9:2f:38:01:6f:ab:6f:e6:1a:db:4f:74:ce:4c:
20:f3:b4:c9:cf:d1:ad:60:3a:a7:84:c0:7a:8c:6a:ca:6c:05:
23:84:d3:33:5a:ed:60:b2:93:2f:4e:6c:b1:65:a4:64:7e:c6:
08:38:82:28:2d:9c:50:c6:f6:c4:ec:cd:2c:a7:cc:27:c2:b5:
d9:d6:c5:ee:4d:b7:e2:45:0c:4a:c6:25:85:c3:0d:cc:53:1b:
cf:55:13:0e:7d:e9:33:57:84:37:a9:dc:96:f8:3d:e3:ee:d2:
8e:60:8e:4d:3d:dd:af:e9:0c:d3:a0:0d:72:2b:21:19:67:76:
09:b1:7b:c5:fe:ff:63:c8:82:84:dc:d9:2c:49:a2:f5:5c:26:
7e:07:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:44:51 2026 by rpki-client