Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: hZaUFMr+Ze/VEqR8q34qyJq3+5M1o51AlltX+cHf+1o=
Subject key identifier: 36:DA:94:49:B2:EA:2B:D5:C7:36:71:EF:DC:EF:EF:6C:AC:32:99:96
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 01A1C5FA231D5EFF230E3922EBD4904B7997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 07A3
Signing time: Tue 10 Nov 2026 15:01:06 +0000
Manifest this update: Tue 10 Nov 2026 15:01:06 +0000
Manifest next update: Wed 11 Nov 2026 15:01:06 +0000
Files and hashes: 1: AgJDjffcx13iFGg7O-6BTWa5Mi8.roa (hash: F0nKF0WSY8oAZJYmoA/vzmlCpRXcrLqKk16YPUwPz6o=)
2: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: wXPsujbITPLJzNk4f8sg86AA9Zpw0XorDUw5D9WRnYk=)
3: hiaLRXvZEWJHbVSfrWH639IpyGY.asa (hash: NEonAO1XE9fHfE9rdEUMWD5j05luJAvYlzVQQMAchnY=)
4: iOIsGM1prEuZUKH2cM7CUq3g5Is.roa (hash: igmbQzjudKovyj6MAKOgXMXBnsmnwoI5fJogJVcvX14=)
5: lINPWdgeXogkwbJ0wzJ7U2mJtc0.roa (hash: gV2ck8EeAb/tXZS6FJRF8q/lSS14/k4pPK+HFVJcJ50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:fa:23:1d:5e:ff:23:0e:39:22:eb:d4:90:4b:79:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Nov 10 15:01:06 2026 GMT
Not After : Nov 11 15:01:06 2026 GMT
Subject: CN=36da9449b2ea2bd5c73671efdcefef6cac329996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:fb:a4:33:06:ac:1b:6b:55:6b:82:63:ec:
ca:31:f3:41:36:3d:f1:35:f8:46:1e:44:24:1f:88:
12:01:71:e7:12:11:35:6d:30:ef:cd:70:c4:eb:41:
fd:25:ed:c0:d1:1e:90:20:80:8b:ea:51:7a:5c:3a:
60:a2:a1:48:6a:c1:6e:fc:0d:32:c6:38:03:8a:99:
53:20:20:47:05:b6:72:bb:f2:bf:08:42:19:55:16:
c1:71:3a:00:2c:ef:db:fd:06:95:0f:e3:2c:ee:5c:
c7:af:08:a9:fd:2f:7f:27:67:ac:74:8a:b4:e5:9e:
b3:81:b5:02:78:b0:da:9a:f0:23:2b:a0:77:62:0a:
c0:6c:8d:19:c1:24:ed:d1:24:bf:e4:d1:98:67:cd:
6c:c1:cf:2f:1f:00:e5:d3:14:b6:32:9f:80:e8:c0:
0f:64:92:48:4b:c6:82:47:c9:e2:4a:11:ea:38:68:
3b:26:58:6f:bf:a7:02:06:42:ba:49:27:22:7e:40:
44:4f:45:24:90:01:08:7e:a8:cd:72:25:c3:71:ef:
75:6d:ba:13:36:94:2e:58:34:3c:4f:c4:8a:51:cb:
67:52:b7:a9:a2:d1:26:bb:3d:5f:4b:39:9e:28:21:
57:8c:b9:97:de:d4:3d:12:18:22:93:b7:51:1b:84:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DA:94:49:B2:EA:2B:D5:C7:36:71:EF:DC:EF:EF:6C:AC:32:99:96
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0c:53:44:9e:b9:37:b7:17:f7:e1:66:b5:b2:0a:e9:cd:91:
ac:97:03:19:83:b9:2b:ec:91:c7:6d:2d:b6:dc:da:9e:31:26:
53:89:8d:6d:8b:42:b8:f4:3c:29:84:2a:7d:e4:9a:7d:7c:a6:
70:0a:3c:c4:86:b4:4e:29:ef:b1:22:5f:df:e6:b7:67:05:d7:
6e:6a:82:e9:47:a2:4b:f3:3d:be:78:f2:04:2a:f8:a3:34:a1:
5b:e3:a9:73:a9:1f:a0:0f:e3:c7:b9:3e:e6:4d:15:ac:f0:9c:
13:79:e9:43:51:21:12:65:f6:31:26:b4:e0:fb:0d:a0:27:7b:
3a:42:8b:d1:03:ba:be:9a:ab:c4:de:49:1e:65:34:7a:ac:a7:
49:da:ca:9f:cc:d9:a3:4c:cc:97:56:20:be:a0:50:2c:d4:9a:
66:20:3a:f1:46:20:99:b9:ab:50:c1:b5:e5:2d:45:dc:4f:d2:
93:50:f3:2f:5c:67:8d:83:35:3b:ba:c3:48:57:87:41:16:f7:
46:d4:77:e5:6a:7a:15:97:b8:c6:6e:4f:83:72:60:52:39:6e:
4a:a3:1b:33:12:b7:b5:df:95:f8:77:7c:88:2a:e7:dd:cc:63:
2b:65:66:09:a4:ba:5d:cd:46:79:c6:b5:86:8f:90:d2:1c:23:
21:e4:00:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHF+iMdXv8jDjki69SQS3mXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzA0NzY5ZDA4N2Q5ZmU4Zjc5MGE2NTU1Y2I0ZmJlZmNk
MjRkMzgwHhcNMjYxMTEwMTUwMTA2WhcNMjYxMTExMTUwMTA2WjAzMTEwLwYDVQQD
EygzNmRhOTQ0OWIyZWEyYmQ1YzczNjcxZWZkY2VmZWY2Y2FjMzI5OTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MT7pDMGrBtrVWuCY+zKMfNBNj3x
NfhGHkQkH4gSAXHnEhE1bTDvzXDE60H9Je3A0R6QIICL6lF6XDpgoqFIasFu/A0y
xjgDiplTICBHBbZyu/K/CEIZVRbBcToALO/b/QaVD+Ms7lzHrwip/S9/J2esdIq0
5Z6zgbUCeLDamvAjK6B3YgrAbI0ZwSTt0SS/5NGYZ81swc8vHwDl0xS2Mp+A6MAP
ZJJIS8aCR8niShHqOGg7Jlhvv6cCBkK6SScifkBET0UkkAEIfqjNciXDce91bboT
NpQuWDQ8T8SKUctnUrepotEmuz1fSzmeKCFXjLmX3tQ9Ehgik7dRG4SMlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbalEmy6ivVxzZx79zv72ysMpmWMB8GA1UdIwQY
MBaAFDlwR2nQh9n+j3kKZVXLT7780k04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjIt
ZTQ1MzUwNDE0ZGRmLzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjItZTQ1MzUwNDE0ZGRm
LzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgxTRJ65
N7cX9+FmtbIK6c2RrJcDGYO5K+yRx20tttzanjEmU4mNbYtCuPQ8KYQqfeSafXym
cAo8xIa0TinvsSJf3+a3ZwXXbmqC6UeiS/M9vnjyBCr4ozShW+Opc6kfoA/jx7k+
5k0VrPCcE3npQ1EhEmX2MSa04PsNoCd7OkKL0QO6vpqrxN5JHmU0eqynSdrKn8zZ
o0zMl1YgvqBQLNSaZiA68UYgmbmrUMG15S1F3E/Sk1DzL1xnjYM1O7rDSFeHQRb3
RtR35Wp6FZe4xm5Pg3JgUjluSqMbMxK3td+V+Hd8iCrn3cxjK2VmCaS6Xc1Geca1
ho+Q0hwjIeQAUg==
-----END CERTIFICATE-----
Generated at Tue Nov 10 19:28:23 2026 by rpki-client