Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: k8LZsr6eX+Z6fufDJ/4vf0GRGnX1mHfJK+DkskTU9fg=
Subject key identifier: 96:2C:3E:11:CB:13:DE:1E:49:A4:0B:79:1C:DF:E9:AD:A3:0D:82:1C
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 019FAB62FEB62CA5BA7315CAF922AF09BB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 106A
Signing time: Wed 29 Jul 2026 01:00:19 +0000
Manifest this update: Wed 29 Jul 2026 01:00:19 +0000
Manifest next update: Thu 30 Jul 2026 01:00:19 +0000
Files and hashes: 1: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: OIl+MOZTVlyRJ0Ds0yeQVoCpQc/sdkqHYjT7TpivVhg=)
2: dvF-ax6xW9w6QlzjTOaIlgyWKik.roa (hash: E53mXDTZAgvYtLPLUqhUWEPa5aOM6nnfYCB3KgCjcD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:62:fe:b6:2c:a5:ba:73:15:ca:f9:22:af:09:bb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Jul 29 01:00:19 2026 GMT
Not After : Jul 30 01:00:19 2026 GMT
Subject: CN=962c3e11cb13de1e49a40b791cdfe9ada30d821c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:a3:b6:b4:c2:20:81:db:f8:b6:ed:6f:f1:
20:24:b8:97:8f:1d:9d:d7:c6:62:2f:92:60:15:d6:
c3:1f:a6:1a:ad:14:69:fa:52:8d:77:24:5b:90:8c:
9d:f0:1d:c0:26:f4:09:9e:5a:6e:1f:df:e2:2e:65:
12:0f:3c:93:49:16:64:84:bb:a7:b0:2d:98:05:ab:
32:77:14:30:50:f8:15:0b:dc:7b:25:cd:23:cd:8d:
a0:05:b9:89:e4:b7:49:2a:08:ae:84:e8:71:2c:2c:
ce:97:8b:1d:6d:94:aa:5c:88:88:cc:f3:40:99:45:
b8:47:9e:db:cf:7c:41:d1:3d:4c:d4:ce:b8:ed:fa:
96:1f:74:0e:90:f5:1e:63:e5:9e:eb:03:cf:d9:0f:
14:77:85:ca:4c:c0:a7:58:0f:ec:34:b0:88:8c:09:
29:d4:99:ea:8d:b4:ec:21:f8:71:dc:b9:c1:a3:18:
6e:ed:9d:48:3b:e7:1d:c9:bb:a6:01:ee:88:95:40:
c5:97:60:a3:53:db:ba:0b:b3:1d:21:d5:45:ed:ab:
61:7c:1f:dd:02:d9:a7:47:28:a9:a6:93:b6:cc:50:
c8:ff:35:38:eb:b0:74:f5:e2:fb:ac:2f:2f:68:19:
08:0d:bb:b1:0c:96:dc:ff:1b:94:38:f7:d7:41:35:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:3E:11:CB:13:DE:1E:49:A4:0B:79:1C:DF:E9:AD:A3:0D:82:1C
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ae:3e:eb:59:af:09:8b:19:c4:cd:24:d4:65:81:c9:08:55:
6d:bb:c2:93:4b:9c:0a:c4:8c:5c:30:14:85:02:e5:9f:33:31:
2b:e5:4f:60:78:34:43:f0:da:2b:0d:da:e9:ca:ba:44:82:e0:
0f:85:b6:de:5f:4c:b5:37:fd:3e:d5:63:b5:c9:62:ab:c3:dd:
34:8b:54:a2:52:8e:99:97:0a:fd:ad:95:0c:f8:61:34:18:31:
57:7b:3b:59:4b:1a:2e:f9:59:9c:4c:72:4d:7e:93:7c:70:7f:
9d:74:f3:d0:18:20:70:4c:34:61:c3:e2:93:6b:dd:da:2b:bd:
c9:6f:80:fd:95:34:42:35:43:45:39:b2:98:45:6f:1e:04:9c:
ba:77:93:28:80:61:08:87:6a:01:c8:23:08:fd:54:a5:f8:ef:
a0:ad:64:82:69:18:2f:02:01:61:64:f1:f6:67:26:97:ad:24:
ab:5f:f7:ac:db:b1:46:0d:d7:d4:52:f8:a0:4c:f9:4f:3e:99:
1b:fc:79:c0:79:17:d0:23:0b:9a:b8:77:1f:1e:fb:ec:9c:4e:
ad:6d:78:d7:6a:25:44:38:3b:2b:79:09:d2:3c:45:04:ea:c8:
33:1e:b2:d2:0b:a1:2f:ca:8f:f7:51:73:4d:f3:35:07:2a:78:
40:7e:3f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:38:59 2026 by rpki-client