Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: TC1EjLQOI2wlJf+vpv9goRC2cj7O4S7ykTzL38Vvzzo=
Subject key identifier: 0E:88:48:85:1F:94:37:3C:02:8C:19:0B:E5:14:F3:25:5D:E0:71:4D
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 01A1AAF08D0CACCE2D2164C88D452CC468A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 0795
Signing time: Thu 05 Nov 2026 09:00:53 +0000
Manifest this update: Thu 05 Nov 2026 09:00:53 +0000
Manifest next update: Fri 06 Nov 2026 09:00:53 +0000
Files and hashes: 1: AgJDjffcx13iFGg7O-6BTWa5Mi8.roa (hash: F0nKF0WSY8oAZJYmoA/vzmlCpRXcrLqKk16YPUwPz6o=)
2: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: sHhjmlSZF7eeGf1pteZGiQ6aNkd0I+0Gp0jYJ2TVmro=)
3: hiaLRXvZEWJHbVSfrWH639IpyGY.asa (hash: NEonAO1XE9fHfE9rdEUMWD5j05luJAvYlzVQQMAchnY=)
4: iOIsGM1prEuZUKH2cM7CUq3g5Is.roa (hash: igmbQzjudKovyj6MAKOgXMXBnsmnwoI5fJogJVcvX14=)
5: lINPWdgeXogkwbJ0wzJ7U2mJtc0.roa (hash: gV2ck8EeAb/tXZS6FJRF8q/lSS14/k4pPK+HFVJcJ50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:f0:8d:0c:ac:ce:2d:21:64:c8:8d:45:2c:c4:68:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Nov 5 09:00:53 2026 GMT
Not After : Nov 6 09:00:53 2026 GMT
Subject: CN=0e8848851f94373c028c190be514f3255de0714d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:d7:d2:51:b4:33:fc:bb:e6:5b:6c:f7:51:
d2:01:51:b6:28:64:51:3c:93:ca:2f:7a:4b:c4:b8:
fe:9b:99:8a:5f:e0:69:0c:a2:ef:8c:bf:9d:5b:01:
a2:23:6a:c9:a1:56:00:41:cd:25:02:e8:6f:44:50:
59:f2:79:0c:3e:c7:77:98:e3:f2:30:8b:cd:63:d6:
a2:80:1c:28:b5:50:63:14:f3:7e:84:2d:bd:50:42:
fc:ba:d3:61:17:dc:38:cc:44:3f:fc:2b:d0:ad:69:
be:93:3d:ac:e2:f7:ac:a1:29:7b:7e:3b:6b:62:1b:
f7:d1:0e:3a:ed:c2:dc:ff:b9:ef:b4:29:5e:6e:e0:
ab:26:4d:32:42:c2:37:f3:97:6e:52:96:46:cc:d0:
5e:2e:83:59:a6:95:e9:48:af:be:51:a4:d7:56:6e:
1b:1a:69:1e:1d:10:aa:ae:91:8e:a8:16:03:51:d9:
d2:24:57:30:1f:54:9b:06:c2:3a:9e:ba:99:3e:9a:
77:df:07:1e:3f:c2:d5:66:bf:38:3b:07:83:57:4b:
32:b3:7b:04:31:4f:d5:48:5e:a2:86:15:54:d0:8f:
02:17:6e:45:d1:aa:db:37:5a:88:a5:09:0b:0e:fb:
a7:f8:df:89:00:72:a8:6c:42:e0:eb:4b:95:5c:1a:
39:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:88:48:85:1F:94:37:3C:02:8C:19:0B:E5:14:F3:25:5D:E0:71:4D
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:65:25:c9:be:90:83:84:ab:33:de:d8:18:bb:d0:ea:fb:79:
c3:9d:4f:ca:6a:5e:08:be:11:ba:ab:38:d3:d7:b0:8d:cc:83:
bc:79:ef:7d:f2:6d:8e:bc:60:7c:07:e3:97:bf:2f:83:31:fa:
c2:56:62:47:70:80:61:d4:82:50:fd:d0:70:a1:16:26:86:6b:
a2:72:25:0d:e4:7b:37:e9:b2:96:1b:4c:c0:93:d5:d4:2a:c2:
40:da:96:7b:fb:e5:54:77:bf:89:bc:8a:4c:af:a8:14:5c:e6:
e3:84:37:2d:13:d0:f6:a8:73:ea:3f:9d:62:b8:b8:7b:09:60:
04:7e:18:ea:7a:2b:20:c1:fa:5a:bf:aa:45:95:9e:e4:dd:55:
51:8c:4d:b0:77:ee:fc:43:3c:d9:e1:20:03:ed:6e:cb:43:72:
47:5d:31:81:d3:0e:10:1c:1a:0f:39:eb:ca:d3:31:41:2e:cb:
a6:d6:32:34:d5:15:9b:35:3e:78:f8:18:45:7b:90:62:e4:d7:
47:58:d6:cd:ba:7e:fd:d5:a6:a6:4c:45:bb:21:fb:58:23:51:
e0:2d:37:c6:fa:0b:fc:a0:f1:64:cc:21:b9:eb:e1:fc:a4:41:
46:d9:21:81:12:79:d1:61:6f:58:5d:b6:ee:23:c9:50:b4:ba:
57:cc:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:57:06 2026 by rpki-client