Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
File: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft (raw, json)
Hash identifier: czGE26YPQOyvDl5yScU2T+ZorjFYD/ogvk5BqE0TZJU=
Subject key identifier: 55:4A:A8:D5:00:0A:C9:07:0E:5E:D4:DE:01:19:DB:33:25:2F:42:6C
Authority key identifier: A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
Certificate issuer: /CN=a231d7b97a07676122f72e465091d23606ae66a2
Certificate serial: 01A12C20400725B63AD54C1CA08F8F458958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
Manifest number: 01DE
Signing time: Sun 11 Oct 2026 18:01:13 +0000
Manifest this update: Sun 11 Oct 2026 18:01:13 +0000
Manifest next update: Mon 12 Oct 2026 18:01:13 +0000
Files and hashes: 1: duR9uQ1SsCstwHLOlmLoUwdbMns.roa (hash: yA4AsbUZ49Idd1b6bOSpb8V75FCHwuh/putB9VxYleY=)
2: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl (hash: w1sVsjsQfkrAEsF4Grsv242/XXLnhgbGjtmCoqePeMw=)
3: yMLrlgL_4XGQv4PkP0fKel7Uqa0.roa (hash: WADJFfyNdRhdPfPcKnXU061md0h/PkE/qV2H2/38MPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:40:07:25:b6:3a:d5:4c:1c:a0:8f:8f:45:89:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a231d7b97a07676122f72e465091d23606ae66a2
Validity
Not Before: Oct 11 18:01:13 2026 GMT
Not After : Oct 12 18:01:13 2026 GMT
Subject: CN=554aa8d5000ac9070e5ed4de0119db33252f426c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:52:cd:e9:7e:1d:1c:5c:3c:80:07:40:1a:
25:2d:cc:1c:31:28:48:4c:ef:bc:16:e9:8b:c6:d9:
29:ef:ac:e2:1d:2f:a7:c5:3e:52:20:b0:b6:88:68:
28:82:bf:94:87:ae:af:56:00:0c:bd:cc:73:c6:e4:
e2:45:46:f4:0a:2f:f4:d7:59:6c:b7:c6:80:de:60:
ec:eb:cc:bf:d2:fb:13:87:78:17:f3:42:2a:ee:6b:
5b:9b:47:98:57:0d:4f:5d:1c:91:8a:52:91:ee:33:
b8:cf:4d:93:40:96:a4:36:03:59:6b:61:5d:8d:b7:
f4:e1:94:fc:9f:cd:c9:7b:d7:0f:52:c1:ca:a1:bd:
97:a2:77:e9:18:96:b8:b9:98:6c:e4:31:21:cd:7c:
78:c6:d7:b0:67:e6:e6:a5:f6:3f:fd:43:16:4d:65:
b7:7e:19:5a:0a:1d:60:0a:cc:fe:f5:94:4e:4c:98:
51:c8:3d:1b:d0:58:40:0d:f5:2e:6d:a7:57:3b:01:
74:25:56:33:d5:4c:88:b3:cf:6f:c8:22:ac:b3:6d:
50:91:e4:ce:05:29:76:38:ce:9c:d4:31:77:8a:91:
5d:75:ce:9b:e3:45:8d:1d:16:9c:a7:a0:c1:2e:73:
48:85:98:9c:38:c1:91:19:1e:d5:4f:b6:f3:58:05:
de:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4A:A8:D5:00:0A:C9:07:0E:5E:D4:DE:01:19:DB:33:25:2F:42:6C
X509v3 Authority Key Identifier:
keyid:A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7e:b6:0e:09:ef:80:86:86:d3:c1:00:9d:85:a6:4a:e9:1a:
7f:56:5c:8c:f8:3a:35:35:ff:e2:a4:2f:1c:97:25:59:35:a0:
5b:78:fd:f7:ce:33:e6:71:0c:cc:f1:b2:8e:35:2b:03:c1:0a:
f8:ad:dd:e9:8e:1c:51:31:c4:5c:de:97:53:86:c5:f3:41:dd:
66:55:33:0e:8e:5e:36:cb:ac:3c:ef:3c:65:89:c8:30:56:01:
5b:9f:2e:a6:fe:c3:57:ef:55:f7:97:92:51:9a:70:ac:3f:bf:
f8:2a:9c:4a:80:da:ad:29:2b:8f:19:52:09:23:d8:0d:4d:81:
d5:15:ae:bb:55:41:a2:1f:d3:96:84:3a:00:ce:94:f6:2a:59:
7a:6c:89:a9:87:8b:1e:17:33:f8:6a:fc:f7:fd:af:d6:f9:11:
0d:86:cc:1f:45:7f:fd:95:65:1d:11:f0:05:73:7f:78:ca:c6:
54:e5:ee:b1:3c:b5:a4:88:4a:be:55:a6:bf:fa:10:eb:62:5f:
89:f5:f7:5e:69:96:fe:6c:1d:ed:cf:41:1a:02:28:7b:a5:82:
1f:80:f5:3f:fe:c7:99:c6:fb:2c:ec:f9:c1:da:aa:4e:83:b9:
a3:6e:f8:3f:28:c4:8f:d1:79:10:94:de:c1:8b:84:7f:b4:53:
34:49:e0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:35:32 2026 by rpki-client