Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: yqRNPJp3igvQ2w7oUJ9lULyGbGz9sGpAWfQlYvlHIRA=
Subject key identifier: 8C:6A:2D:99:98:6A:6B:83:54:AC:97:79:D8:42:58:E8:99:85:63:C6
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 01A1317D57A47627118E6DD89FD926F85614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 1135
Signing time: Mon 12 Oct 2026 19:01:00 +0000
Manifest this update: Mon 12 Oct 2026 19:01:00 +0000
Manifest next update: Tue 13 Oct 2026 19:01:00 +0000
Files and hashes: 1: 8RlFcN6gLbpUc6FFzlURVV6HRUw.roa (hash: Tx6IxgxGtMFyzuZm5nI4v5qQk6SBxlPImSdMh1gmEkw=)
2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: CebQFOUi1EVUyjrl0TmhyMXMoVfwbRX1yWbD875M7Po=)
3: dvF-ax6xW9w6QlzjTOaIlgyWKik.roa (hash: E53mXDTZAgvYtLPLUqhUWEPa5aOM6nnfYCB3KgCjcD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:7d:57:a4:76:27:11:8e:6d:d8:9f:d9:26:f8:56:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Oct 12 19:01:00 2026 GMT
Not After : Oct 13 19:01:00 2026 GMT
Subject: CN=8c6a2d99986a6b8354ac9779d84258e8998563c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:21:4f:c9:6e:d9:a1:de:66:30:bf:4f:69:
67:23:15:f8:c3:80:c4:8b:dd:ed:3a:20:57:a6:d0:
92:d7:39:1e:25:bf:e4:05:0a:bc:31:db:43:89:7d:
a9:77:ea:ff:3d:08:d3:c6:b9:fa:72:6d:10:91:df:
08:d6:58:0e:99:44:05:69:f1:b7:ef:69:4c:b2:d9:
e4:ab:10:e8:f8:01:a0:0c:b0:a5:2a:92:e1:ab:e0:
cf:d8:d6:bc:01:f6:74:95:28:92:71:33:36:19:bf:
93:38:d6:46:02:90:bc:82:97:45:67:b4:43:0b:5e:
bd:80:64:f5:90:69:10:07:1c:c3:61:e7:f1:58:f4:
c2:02:88:de:60:a2:c0:a8:c8:34:0a:0e:8a:23:db:
f2:95:e9:ea:81:e5:70:73:b8:12:30:15:8b:7b:91:
ac:e3:b4:70:07:26:56:b1:b6:b9:4a:7b:af:ca:05:
79:a7:a1:05:63:eb:86:07:d2:26:e2:a9:be:c1:88:
c2:2d:8f:28:ed:aa:6c:60:3a:7a:eb:e3:0c:62:8b:
e3:f0:51:f1:9e:59:b8:9b:93:2f:bc:fa:c8:bd:6a:
4e:44:ec:34:eb:5e:b9:59:03:a1:b8:6c:51:e1:23:
ec:86:a4:56:31:7d:9e:f9:7f:6c:e6:ee:8c:39:95:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6A:2D:99:98:6A:6B:83:54:AC:97:79:D8:42:58:E8:99:85:63:C6
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:33:b4:f6:f7:5a:53:35:24:f4:b4:e7:58:8b:c4:5d:d1:8b:
07:ad:db:66:81:ff:bb:b1:36:e9:21:ba:ba:dc:96:43:b5:94:
74:1c:22:88:1f:0e:be:ff:a6:74:9c:9f:78:9a:07:f3:b4:15:
9d:0a:d5:f2:0a:f1:b1:59:c7:61:47:cd:28:8f:33:a4:78:80:
2c:0d:cb:f9:b4:cb:af:aa:61:40:3b:b3:33:c3:22:f7:64:e9:
b2:67:05:c1:de:9d:5e:76:c6:88:d4:4a:94:f2:f7:1a:20:49:
97:a1:f0:12:62:08:d8:40:34:31:6e:f5:cc:f3:b2:8f:6c:d7:
fb:a7:65:2e:65:7c:3a:87:54:17:5e:99:8a:51:9f:fc:67:93:
1b:98:4a:5f:91:e0:7a:2d:3a:36:a4:54:5f:1a:97:f6:24:48:
1d:ae:10:95:c0:c5:94:de:0b:f0:81:21:4d:be:9a:2b:2d:b9:
d7:d8:90:f2:c1:6e:f3:2a:7f:94:fb:fe:11:0b:05:5a:a4:dc:
f3:8c:d0:52:28:f6:19:3a:13:87:b7:84:c9:ab:f2:d7:6a:37:
dc:dc:28:f7:27:7b:b7:ca:e8:e8:97:57:73:32:55:b3:53:13:
c9:38:9f:37:d0:8a:8c:d5:dd:c0:d8:b0:ae:c3:33:89:32:de:
10:28:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:23:15 2026 by rpki-client