Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
File: OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json)
Hash identifier: soq2OWhw+84DVPo7ZoId85HArkE9bkN5adXhcaak5x4=
Subject key identifier: 5C:AD:AD:FA:C2:CC:59:18:0D:5A:92:96:BE:4F:EA:F8:94:46:79:7E
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial: 01A1C09C7279936096500DCA8630597F787F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
Manifest number: 1AEA
Signing time: Mon 09 Nov 2026 14:00:40 +0000
Manifest this update: Mon 09 Nov 2026 14:00:40 +0000
Manifest next update: Tue 10 Nov 2026 14:00:40 +0000
Files and hashes: 1: 10zU5k5ICxgrM5-Ip5yncI3GNGs.roa (hash: LEG/jSgiyt7BovVPDQkdWrVInvTbnRp5DG6v8hbqY1s=)
2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: 7Vh1BARy5xQT9WtDJ2BN9H948RUNL8XJ/SCNS4yQuJs=)
3: QmWmoP1KHfrR9eTOqZ6x9ezRXSY.roa (hash: xqu4qFo0DMMx0+rjC1DPBvqtwUrbm4PocY0IAf7sGdo=)
4: pm2S8QCe4l9WpfwvU_iLSL0zIlI.roa (hash: siFYWGu9y7ejpY470okiO/aX4nO9BjP28kUxghwfExg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:9c:72:79:93:60:96:50:0d:ca:86:30:59:7f:78:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
Validity
Not Before: Nov 9 14:00:40 2026 GMT
Not After : Nov 10 14:00:40 2026 GMT
Subject: CN=5cadadfac2cc59180d5a9296be4feaf89446797e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:c2:5d:c5:8a:6b:ff:07:2b:67:77:2e:07:
55:44:8c:e7:da:6c:fe:cc:de:83:0a:f5:2a:6f:0e:
d0:c7:bb:57:18:d2:29:51:74:fa:51:2d:31:5d:dc:
74:c9:82:04:51:8f:02:3f:85:c0:d7:21:64:7e:94:
7e:cb:78:8b:cd:72:ee:a4:ae:30:8f:3c:0a:66:35:
d7:8e:3b:8a:a9:95:71:e5:46:0a:70:ae:ac:a4:74:
59:9b:92:2d:df:40:ce:74:9b:b0:32:a3:a2:8b:df:
d5:08:9f:9b:ca:9f:df:35:7c:45:2c:91:d9:e8:b3:
3f:d5:ad:29:ea:f0:9f:ac:3e:3d:c1:07:29:4d:b9:
f9:5f:88:4d:99:8a:e6:7d:65:b5:d9:ba:e6:0f:d1:
fb:3e:18:57:1a:53:b2:43:0a:f3:63:6c:e2:b1:aa:
eb:e3:9a:1a:04:38:46:90:05:4d:4c:2a:08:16:06:
13:a3:96:3a:a3:0c:e3:8d:d5:39:2c:19:1d:43:03:
5c:58:1c:c5:34:6e:8b:91:f5:39:7f:df:42:85:f8:
b7:15:fb:60:36:c2:32:db:1f:7f:f6:9a:e6:97:25:
f1:d9:a0:4b:86:3a:f2:56:6a:75:c5:76:0e:ed:8a:
b9:47:14:77:98:5e:d8:1e:e6:9b:9b:5f:56:81:ba:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AD:AD:FA:C2:CC:59:18:0D:5A:92:96:BE:4F:EA:F8:94:46:79:7E
X509v3 Authority Key Identifier:
keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:37:14:bb:6c:04:2a:54:71:0f:a2:93:59:52:8a:2c:1e:8f:
9a:7c:cd:0b:87:03:c4:09:14:81:57:fc:fc:dd:42:94:a1:7a:
92:75:e9:5c:c9:c0:a2:6c:ec:88:28:49:cc:e7:91:53:4c:ed:
ea:f4:d5:77:0c:83:53:8c:6e:94:ca:08:3c:d3:32:ed:4d:e5:
c6:83:08:94:91:d7:b7:54:c3:7a:f4:55:4a:6d:a6:08:49:2b:
84:b5:fe:05:92:8b:c9:e3:49:68:3f:87:ea:4e:d1:b7:05:4e:
8d:55:3c:15:e1:a3:94:9c:87:10:d9:9b:ea:13:eb:4c:a4:96:
54:cc:d8:49:e7:a6:99:4a:73:29:8f:0d:67:53:7b:31:50:48:
37:f7:56:35:b9:66:d7:59:5c:9f:bc:df:81:88:58:f9:c0:fd:
46:9f:11:13:af:f6:30:54:6b:8e:50:74:30:aa:f7:8a:ca:a4:
af:68:66:30:99:45:21:e8:fe:20:24:e7:10:58:a8:a7:81:a0:
9a:67:05:b6:31:fe:22:0c:05:6c:06:d4:51:39:a2:d3:c7:13:
dc:83:45:19:11:91:52:41:ff:39:81:e5:73:d0:98:ed:88:61:
c1:5f:6b:e4:1c:58:ea:19:b6:d4:90:e1:e4:b4:db:b4:88:ae:
d4:06:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 23:55:49 2026 by rpki-client