Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
File: ojKhc4Do4liY3qnCIzIaKs5SNvE.mft (raw, json)
Hash identifier: 4bYHiVyXW7wAqFAAZaQ3SVKx1xVi9h3YzMNQJMwPNco=
Subject key identifier: 9F:33:B7:15:AD:81:A5:FE:18:34:52:34:6B:13:A7:9B:2D:D1:2A:38
Authority key identifier: A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
Certificate issuer: /CN=a232a17380e8e25898dea9c223321a2ace5236f1
Certificate serial: 01A12A3195908C110FABF5CC2DBD14B6F54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
Manifest number: 01DA
Signing time: Sun 11 Oct 2026 09:00:54 +0000
Manifest this update: Sun 11 Oct 2026 09:00:54 +0000
Manifest next update: Mon 12 Oct 2026 09:00:54 +0000
Files and hashes: 1: ojKhc4Do4liY3qnCIzIaKs5SNvE.crl (hash: B/uLLE9v8A9bWSaqEl9CD4nx2RPssUf3haSZRdU/vTU=)
2: xyoH9R_BmdJ-gyu7Oy-9rS-zs-0.roa (hash: HGNIvY3ULeEgQ68bK1r/+JhRNbs682fuQL9Y7B95gbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:95:90:8c:11:0f:ab:f5:cc:2d:bd:14:b6:f5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a232a17380e8e25898dea9c223321a2ace5236f1
Validity
Not Before: Oct 11 09:00:54 2026 GMT
Not After : Oct 12 09:00:54 2026 GMT
Subject: CN=9f33b715ad81a5fe183452346b13a79b2dd12a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:ab:ef:4d:92:cf:b4:4f:f4:85:0e:2e:e9:
bd:d9:6d:dd:65:b3:64:f7:f5:b7:5c:bf:c6:0e:55:
29:5d:ce:16:08:85:7a:55:7b:bc:40:89:c0:86:b1:
bc:f0:5d:a1:e4:ca:ca:7b:dc:c2:05:94:d0:b1:43:
12:a5:76:cb:27:0d:75:e9:5a:7c:71:7c:54:bf:e9:
3b:d3:0e:aa:99:55:0d:a1:5d:2f:ea:0b:2f:7a:7f:
f6:22:0d:9f:f3:d0:44:b8:2b:21:d7:5e:25:a0:5a:
c0:7c:d4:d5:a9:3c:c7:07:f7:49:6a:d5:0f:e0:6d:
55:b9:d1:7d:f6:2d:5a:13:8b:e8:0f:48:12:aa:1b:
24:fa:ab:c2:24:19:65:0f:78:71:17:a6:bd:0f:17:
4a:1a:9a:41:11:39:7a:44:aa:8b:4b:c9:7f:2e:d4:
f6:18:4e:89:13:4b:e7:d0:42:fe:b6:14:35:b8:8c:
64:b6:8d:d3:3c:b1:f0:f9:53:25:d8:88:b6:0a:6e:
21:f6:9f:42:aa:c8:f6:2b:2f:ee:27:19:c6:58:57:
4a:ef:72:f4:a6:03:dc:80:12:11:79:5b:9c:fb:8c:
3a:7a:90:a4:7e:55:b3:ec:0c:c9:ab:4b:4d:a4:de:
5a:2f:e7:a4:66:bc:55:a7:67:6f:7c:14:cb:b3:fd:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:33:B7:15:AD:81:A5:FE:18:34:52:34:6B:13:A7:9B:2D:D1:2A:38
X509v3 Authority Key Identifier:
keyid:A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:91:53:63:24:77:8c:3d:69:65:b0:66:ab:f4:bd:e4:cf:73:
f4:da:b8:ec:6c:19:9d:31:88:75:5c:cf:1f:04:db:d1:7b:1d:
5d:46:46:cc:3c:15:18:a4:4c:52:38:b7:b3:4d:7a:b4:ca:c7:
bc:92:53:97:37:06:5a:e8:9e:55:07:00:94:6c:76:f0:6e:6d:
34:bd:af:09:43:12:a7:9c:7a:1e:7c:3c:ef:cd:3b:86:3a:97:
38:81:13:cd:8b:1c:82:e8:fc:3d:33:30:e2:55:72:18:d8:70:
19:bf:0b:13:0f:d6:bf:7d:c8:1e:bd:5e:18:d8:39:9c:b8:88:
2c:37:81:ab:dc:93:42:49:1c:5f:91:d6:5a:c7:e4:ba:c6:48:
02:b5:7f:44:9d:ee:2c:bf:d9:3c:a9:ca:13:f3:76:4b:1c:fe:
fd:39:7f:31:77:fc:79:4e:bc:de:17:1f:ae:59:9e:7c:e6:37:
ed:83:7e:07:74:8e:ad:c7:fc:8a:7d:03:dc:6b:8e:d0:fb:13:
ee:50:81:c2:56:1b:98:7c:14:7e:46:8d:57:30:a5:f9:84:c6:
0a:b5:2b:4b:70:51:2c:89:18:70:3e:5a:f2:79:cd:dd:e3:33:
32:62:e1:fa:04:dc:02:c5:33:47:f8:4d:54:7d:2c:8c:5a:b2:
ef:98:66:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:14:08 2026 by rpki-client