Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
File: OQJ3OPl4_tokqdh7DLi7mqevVA0.mft (raw, json)
Hash identifier: R+WGcfwCtzFNgyKes5KkrQuFIsTPGeBP9T+TV8CRXRk=
Subject key identifier: 9F:F1:4A:23:1C:B9:0F:AB:03:C3:0F:33:D4:48:10:6D:E4:1D:C7:2C
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 01A12D331BD53A43463DADC2C6B6F061E661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
Manifest number: 1AA6
Signing time: Sun 11 Oct 2026 23:01:26 +0000
Manifest this update: Sun 11 Oct 2026 23:01:26 +0000
Manifest next update: Mon 12 Oct 2026 23:01:26 +0000
Files and hashes: 1: OQJ3OPl4_tokqdh7DLi7mqevVA0.crl (hash: kE1NhVNx6LrswxIp4rd/JNZE8i3R5zCncNhAhbMIdos=)
2: jr5zaX72B88EPr7fF-QkGP5Dx98.roa (hash: oiKQk5Ow8W6lhAid4jGIfOCDhwPg0xWcUUAnbvjLz5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:33:1b:d5:3a:43:46:3d:ad:c2:c6:b6:f0:61:e6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Oct 11 23:01:26 2026 GMT
Not After : Oct 12 23:01:26 2026 GMT
Subject: CN=9ff14a231cb90fab03c30f33d448106de41dc72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:5b:36:d5:3f:89:92:74:ef:ac:bb:8b:9d:
9a:8b:1d:e0:c0:f5:95:4b:12:c5:d0:7d:cf:2f:2a:
ce:03:a8:c3:96:da:6b:81:03:61:3b:8f:70:7e:d3:
bc:de:7a:fb:25:58:28:97:c0:c5:cd:ac:fb:91:b1:
05:e8:1e:37:99:e8:dc:fc:3d:21:52:42:34:b2:4b:
2d:d4:61:39:ca:84:89:14:6f:04:a1:df:cd:f9:41:
ec:c2:05:89:33:48:30:51:6d:eb:bd:71:7e:9b:e3:
ac:e5:4a:fe:a0:f6:e3:ef:6b:e7:59:70:f1:3b:56:
72:14:98:ea:d0:92:c5:bc:60:cf:96:27:2c:b7:94:
16:06:47:74:aa:d0:da:74:2b:00:28:e3:cc:98:0e:
6b:a4:01:6f:f4:13:4b:a3:d9:4c:95:d5:75:6a:47:
8a:62:d8:d7:d9:6e:5f:9a:8b:94:1b:99:b6:03:aa:
e7:59:a5:2b:f0:b4:22:10:71:73:01:96:a9:73:9e:
b5:e3:cb:ca:6a:11:46:00:7b:5a:ae:a4:24:f0:97:
e5:13:20:2e:6b:a8:eb:33:3f:ea:a3:6c:9a:c5:2a:
22:ee:50:2a:71:5d:e6:ac:3c:86:e1:1a:33:a6:29:
1c:b6:7d:26:d9:17:e7:44:84:e0:fb:6e:eb:5a:3d:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:4A:23:1C:B9:0F:AB:03:C3:0F:33:D4:48:10:6D:E4:1D:C7:2C
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8c:aa:d2:b4:79:b4:80:8f:05:46:3b:39:e6:84:d5:f3:11:
5b:ab:fa:b6:54:83:de:47:9e:bf:30:af:39:9c:74:6b:10:7f:
31:2d:24:ac:01:9c:f8:a7:ea:b5:75:6e:21:da:b3:95:b2:f4:
a7:92:bd:e8:e2:89:45:04:e9:55:55:5b:b5:6b:1a:7d:84:64:
e3:4e:6e:47:42:80:bb:77:af:3f:ea:25:3b:15:5e:15:9a:bd:
3e:73:78:d5:1b:90:0c:db:f8:14:0c:7e:f3:13:5a:fa:16:7e:
e6:21:bc:94:68:ad:5c:b2:3a:86:d1:a6:2b:1b:10:0f:50:f6:
e2:a2:26:82:9a:f9:a8:f0:0d:93:ee:bd:1c:93:19:9f:28:00:
52:2a:d6:02:ad:e8:4e:c3:90:21:71:83:c6:1a:41:09:15:da:
46:f5:3d:5f:aa:2f:0a:bc:b6:c6:8c:17:6c:98:88:08:0e:fa:
ac:f6:b3:ba:14:5b:3a:c4:62:27:e7:f1:7e:61:3b:88:04:0d:
5a:8f:87:62:d0:17:27:50:b5:37:23:13:75:f4:e8:b6:b3:f3:
5a:a3:99:0a:44:b1:de:67:b6:a7:86:6e:96:cc:57:7c:c6:d8:
f1:ac:96:d9:51:d9:a3:72:5e:e4:f9:f7:a1:90:1c:fc:ee:ae:
a9:a5:cf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:15:58 2026 by rpki-client