Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
File: OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft (raw, json)
Hash identifier: l9u6OIdeXHjgJPr1NULzWRy7FyBeYOh0ljmtatE1oKs=
Subject key identifier: E3:90:A2:F7:64:51:C4:7F:8D:CA:C5:CC:4E:7B:7E:2A:D4:EE:54:E3
Authority key identifier: 39:72:C3:A9:DD:4F:8E:00:6B:3B:5F:F8:91:B4:A3:76:1E:DC:E4:13
Certificate issuer: /CN=3972c3a9dd4f8e006b3b5ff891b4a3761edce413
Certificate serial: 01A0CA47D05EC228CF562C1D9B74EBEB36FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:38 +0000
Manifest this update: Tue 22 Sep 2026 18:01:38 +0000
Manifest next update: Wed 23 Sep 2026 18:01:38 +0000
Files and hashes: 1: OXLDqd1PjgBrO1_4kbSjdh7c5BM.crl (hash: L1pRmI76BOopkR0W27bsAVRv0PkTZKR9ukgDcPDcAPE=)
2: RIl4fKhBjK-K5FgduYm10GA1QSQ.roa (hash: Ocyf7nYoVAbV1TQsJ/zEIif5q1NMRReT2mzgTvpzHMc=)
3: dOH2Swi-EI1bGKqjtPsLcUa9PnM.roa (hash: 2uMrxTRrZKBm5w9QVdyqQ0PMfu0UrouZnk+izTYWJdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:d0:5e:c2:28:cf:56:2c:1d:9b:74:eb:eb:36:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3972c3a9dd4f8e006b3b5ff891b4a3761edce413
Validity
Not Before: Sep 22 18:01:38 2026 GMT
Not After : Sep 23 18:01:38 2026 GMT
Subject: CN=e390a2f76451c47f8dcac5cc4e7b7e2ad4ee54e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:9e:d7:e4:fc:a6:07:1c:cb:bd:a4:2e:44:
76:5b:c4:75:83:bd:ab:ff:94:3a:b2:14:2e:eb:8f:
c5:95:7c:96:03:8b:1a:1d:b0:dd:5f:c0:99:25:cf:
3d:2a:50:f8:9d:31:43:a2:0e:40:4c:12:05:90:c7:
00:71:37:b8:88:31:8a:cc:11:20:5e:cf:15:93:8f:
c4:3e:e8:96:6a:fe:e8:79:7e:ea:d8:e1:e6:36:1c:
4a:30:b0:91:c5:6a:0a:4e:77:12:b0:39:74:b0:2c:
3d:8a:da:f3:b4:33:05:cd:ce:33:bf:9d:73:bc:74:
6d:b8:22:42:e1:57:1f:61:c7:05:3e:8e:be:92:59:
24:ef:eb:56:b4:51:40:e4:d1:14:c4:51:1a:82:66:
ae:cd:49:31:e9:d0:98:ef:4e:68:fd:cb:64:82:43:
54:60:bb:9c:8a:e8:de:c9:e9:8c:45:db:df:95:59:
19:b4:74:c6:e3:eb:1d:9e:35:b5:96:08:8b:f3:82:
5a:2a:fe:29:c5:b8:a4:3a:e4:df:a6:9d:a3:b6:eb:
b1:b5:5d:d4:f7:c1:f2:ab:b2:a3:64:9e:bc:f9:b2:
cb:6f:b8:73:f1:81:ae:05:23:99:45:97:47:fc:53:
68:8b:7a:b2:7b:f5:1b:d0:76:2d:87:6b:05:59:27:
bb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:90:A2:F7:64:51:C4:7F:8D:CA:C5:CC:4E:7B:7E:2A:D4:EE:54:E3
X509v3 Authority Key Identifier:
keyid:39:72:C3:A9:DD:4F:8E:00:6B:3B:5F:F8:91:B4:A3:76:1E:DC:E4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:93:e2:e9:25:04:3c:7d:70:87:a7:3e:f2:fe:39:40:40:c3:
d8:a0:15:b2:a1:e7:66:06:96:28:8d:35:07:6b:2a:d3:04:22:
5f:74:d6:fe:a2:6d:7a:ff:d6:2e:73:8e:8f:16:3d:cc:3a:74:
28:85:87:e6:47:45:a3:ab:ca:63:71:7b:42:ac:60:b3:63:c0:
0a:be:75:19:f8:e7:fa:d9:09:d0:af:6f:b1:9c:2b:64:3c:4f:
f5:99:3c:f1:8f:bd:2a:f9:d3:61:f6:c5:43:6c:f7:c0:37:56:
0d:4f:e2:b1:58:eb:24:82:b6:e8:8e:6d:1d:29:41:4e:31:45:
70:69:76:f2:d2:a9:a3:1b:16:4f:36:04:f6:42:90:2a:98:e9:
d9:aa:c3:8a:45:d1:f5:0b:0e:a8:90:4a:2e:44:01:be:14:31:
dd:7f:45:6c:52:bb:32:0e:6e:ac:7a:69:6d:50:3e:b5:88:24:
11:d7:8d:85:ee:72:62:0e:28:63:f7:a2:75:ef:c6:78:d6:db:
ea:22:93:f2:4c:05:cf:82:57:13:d4:ab:5f:d6:d6:52:2b:9a:
47:3a:7b:07:76:76:94:d0:85:48:e9:83:b1:f0:9b:39:ae:5c:
57:97:ce:5a:4a:df:f0:89:b5:26:6c:d0:3e:84:07:17:55:28:
eb:54:9d:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKR9BewijPViwdm3Tr6zb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzJjM2E5ZGQ0ZjhlMDA2YjNiNWZmODkxYjRhMzc2MWVk
Y2U0MTMwHhcNMjYwOTIyMTgwMTM4WhcNMjYwOTIzMTgwMTM4WjAzMTEwLwYDVQQD
EyhlMzkwYTJmNzY0NTFjNDdmOGRjYWM1Y2M0ZTdiN2UyYWQ0ZWU1NGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ2e1+T8pgccy72kLkR2W8R1g72r
/5Q6shQu64/FlXyWA4saHbDdX8CZJc89KlD4nTFDog5ATBIFkMcAcTe4iDGKzBEg
Xs8Vk4/EPuiWav7oeX7q2OHmNhxKMLCRxWoKTncSsDl0sCw9itrztDMFzc4zv51z
vHRtuCJC4VcfYccFPo6+klkk7+tWtFFA5NEUxFEagmauzUkx6dCY705o/ctkgkNU
YLuciujeyemMRdvflVkZtHTG4+sdnjW1lgiL84JaKv4pxbikOuTfpp2jtuuxtV3U
98Hyq7KjZJ68+bLLb7hz8YGuBSOZRZdH/FNoi3qye/Ub0HYth2sFWSe7IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOQovdkUcR/jcrFzE57firU7lTjMB8GA1UdIwQY
MBaAFDlyw6ndT44Aaztf+JG0o3Ye3OQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hMRHFkMVBqZ0JyTzFfNGtiU2pkaDdjNUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYt
MmFlYTc1YzJkZjc4LzEvT1hMRHFkMVBqZ0JyTzFfNGtiU2pkaDdjNUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYtMmFlYTc1YzJkZjc4
LzEvT1hMRHFkMVBqZ0JyTzFfNGtiU2pkaDdjNUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZPi6SUE
PH1wh6c+8v45QEDD2KAVsqHnZgaWKI01B2sq0wQiX3TW/qJtev/WLnOOjxY9zDp0
KIWH5kdFo6vKY3F7Qqxgs2PACr51Gfjn+tkJ0K9vsZwrZDxP9Zk88Y+9KvnTYfbF
Q2z3wDdWDU/isVjrJIK26I5tHSlBTjFFcGl28tKpoxsWTzYE9kKQKpjp2arDikXR
9QsOqJBKLkQBvhQx3X9FbFK7Mg5urHppbVA+tYgkEdeNhe5yYg4oY/eide/GeNbb
6iKT8kwFz4JXE9SrX9bWUiuaRzp7B3Z2lNCFSOmDsfCbOa5cV5fOWkrf8Im1JmzQ
PoQHF1Uo61SdGQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:03:23 2026 by rpki-client