Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: hEJ9w3vB7H99x7DYLjSTbNAkxJfXsvpaX8bJ1+P0Shs=
Subject key identifier: 1A:27:F0:34:4B:AE:9D:FD:F1:C2:B1:FC:42:03:81:03:D3:08:FB:30
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 01A0CC3639F1126ADFD4C58B5A609748ACAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 19FA
Signing time: Wed 23 Sep 2026 03:01:40 +0000
Manifest this update: Wed 23 Sep 2026 03:01:40 +0000
Manifest next update: Thu 24 Sep 2026 03:01:40 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: xH5aAV/GfOb4cZh+8l3mV9o+8kRlG3tsX3N9iTkP7/k=)
2: TFyydJckZZxmvJ2kyZiqerxMndc.roa (hash: 1M8O0DEiBMTzRovUAkdLb42byd8jCd0k32zelG/wKMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:39:f1:12:6a:df:d4:c5:8b:5a:60:97:48:ac:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: Sep 23 03:01:40 2026 GMT
Not After : Sep 24 03:01:40 2026 GMT
Subject: CN=1a27f0344bae9dfdf1c2b1fc42038103d308fb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:6e:d7:1a:c6:4e:64:c3:97:98:0d:fd:21:
3c:84:a0:af:e5:d8:79:77:6e:12:2a:cd:56:84:19:
2c:3c:8c:b1:7a:a2:ef:b6:60:55:7f:5a:c2:3b:70:
57:5d:4b:80:69:21:03:0b:0c:7c:25:8a:15:e6:fc:
7b:c9:1c:2c:4e:60:13:59:c6:d6:c0:95:da:6d:ab:
b4:3b:13:b8:df:ee:73:96:43:45:a4:36:d9:d6:17:
2c:83:58:5f:62:d5:b9:1c:e6:79:c0:4f:56:7c:5f:
52:06:0c:70:49:80:f4:5c:86:9a:95:93:99:aa:2d:
b4:26:c5:4b:51:46:9e:0e:8d:3e:61:3a:02:7d:0d:
cb:7a:84:be:70:a6:a6:68:7d:48:d1:53:3e:2c:e6:
b7:b8:25:b2:ca:db:88:e8:11:f5:0a:e6:aa:74:61:
7b:89:1c:1a:b8:83:77:f0:29:82:7d:be:57:00:c8:
9f:98:26:48:8a:48:1a:bf:9d:fc:0f:da:51:2d:6b:
aa:d5:21:00:49:1f:5d:3e:4e:57:57:48:7b:eb:78:
21:19:78:f3:d8:5f:77:35:b0:1d:86:f4:4f:68:55:
e0:0c:a4:52:ff:14:ee:21:55:9f:be:be:2b:1f:bd:
37:ba:63:f7:77:0f:4a:20:01:9e:35:31:9b:ae:fc:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:27:F0:34:4B:AE:9D:FD:F1:C2:B1:FC:42:03:81:03:D3:08:FB:30
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ad:98:e7:a6:88:4a:33:81:1b:cb:37:df:bb:5b:ac:f9:b6:
16:da:2e:c6:d9:97:0e:65:f5:b1:fd:64:2e:fb:ca:b7:94:c8:
56:af:1a:fb:87:d6:4f:6d:02:fd:d1:cf:ff:da:9c:85:21:07:
4f:39:96:9e:c3:e7:e3:fb:bf:07:be:09:de:cf:80:7b:4a:b1:
e1:43:e9:d7:f4:9a:0b:73:81:44:63:f2:0b:a9:d4:d2:b5:cb:
88:53:a2:2a:25:73:fe:6f:4f:33:26:5a:a6:48:84:28:ee:ee:
47:08:66:6f:05:8f:3d:db:e5:26:84:3a:d8:f9:f0:29:29:cb:
0b:57:a2:3a:b5:5f:68:6d:2c:62:cb:19:b0:24:6a:ba:f4:90:
fe:7c:cd:b4:16:c4:f5:e4:39:65:1d:c6:bd:60:11:40:39:31:
70:a6:2b:23:2d:18:10:ba:65:f0:2b:38:53:65:14:a2:76:d1:
50:1b:be:4c:eb:c9:96:60:b2:4e:11:e5:f0:7e:44:8b:5e:21:
f9:38:a9:7c:b3:e6:f6:ab:f6:65:9b:ae:c6:f9:b0:cf:03:38:
45:e3:26:5b:eb:f6:de:95:d8:23:fa:30:df:2a:81:5e:1c:42:
97:c8:e5:77:16:8b:0a:47:25:75:da:f6:6d:1c:f9:70:c5:90:
79:01:0e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:01:41 2026 by rpki-client