Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: 07B5P72/Dn9x3MZVxq0TNqChMQdhF5oS5prJk/Dx2+E=
Subject key identifier: B0:FD:8B:35:16:F4:41:F4:9F:AA:0F:2A:E4:06:81:D7:38:BE:34:54
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 01A0D5026A759399E5B7BAA07802F7A93780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1A78
Signing time: Thu 24 Sep 2026 20:01:40 +0000
Manifest this update: Thu 24 Sep 2026 20:01:40 +0000
Manifest next update: Fri 25 Sep 2026 20:01:40 +0000
Files and hashes: 1: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: hbHneeZBjc4gAM9muBLkprVuEvTov3Z0mTiVEv0oPw8=)
2: WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa (hash: ZvSkcDxGhvi+aJsfbms5jhxFpHcmll85L+dtrGm8zwg=)
3: csloCIt3CTSVgebL58dJpxOdtC0.roa (hash: esH7P1ArdXIQnwu6qXLQUiXFhHbcU/4jPuyvpFcE9cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:6a:75:93:99:e5:b7:ba:a0:78:02:f7:a9:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Sep 24 20:01:40 2026 GMT
Not After : Sep 25 20:01:40 2026 GMT
Subject: CN=b0fd8b3516f441f49faa0f2ae40681d738be3454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:14:31:aa:fe:89:f6:14:68:04:fc:df:3a:
0e:0e:c5:dd:08:92:18:6f:1c:59:0e:5e:0a:30:0f:
e7:b1:d6:77:aa:de:b0:8a:d6:1b:4a:44:fa:a5:4f:
b1:91:6d:4b:bd:8e:ca:89:cd:99:ca:18:39:d6:25:
19:75:58:dc:5c:63:b2:71:27:21:77:2b:87:36:8a:
ca:35:73:cc:55:f2:a8:35:30:19:4c:19:4d:b8:e9:
ae:25:68:3f:ad:d1:ea:ec:a6:c4:3a:a4:6d:16:c4:
3d:27:cf:4a:e2:f6:a6:32:c7:89:f2:07:a4:67:6e:
14:3e:eb:65:fd:43:1c:7b:57:48:56:2f:6e:90:f5:
65:f7:ab:30:fc:c2:f5:be:4a:70:2a:2a:25:5f:2f:
d6:b5:99:44:8b:93:33:8a:28:12:0d:93:e9:2b:d9:
0b:02:b4:69:06:c6:c9:11:dd:5e:ea:3c:0f:fe:30:
7b:aa:26:79:59:99:49:c8:60:fd:cb:04:f0:12:6a:
f0:f1:30:00:76:df:6a:76:e6:16:43:e3:35:80:a3:
00:86:2e:70:86:13:3a:10:96:19:d5:af:a8:c1:ec:
f0:a1:a7:e3:1b:61:94:34:c0:a6:42:f3:6b:01:0f:
9c:9e:1d:35:49:08:4b:7c:5d:81:fe:96:5a:7d:5d:
df:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FD:8B:35:16:F4:41:F4:9F:AA:0F:2A:E4:06:81:D7:38:BE:34:54
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:63:d1:5a:26:0d:3f:6e:db:1e:b2:c5:d6:cd:da:ac:6d:72:
73:da:34:31:92:72:fd:56:52:c1:1a:e7:6b:65:f1:92:29:c3:
2e:53:ef:4a:15:de:45:eb:f9:c0:0a:c6:2e:c2:df:3c:20:59:
d9:ad:16:e0:5f:7e:a9:a2:5c:ee:5b:4d:b2:1f:0a:3c:dc:34:
2d:41:a7:16:d4:eb:7c:85:c1:bb:13:18:0a:2a:02:8b:c4:5a:
7d:7e:64:7b:35:ff:be:81:a1:b7:68:72:49:af:27:bb:13:09:
75:63:cb:d1:4a:f4:e1:41:24:b0:c5:71:f9:17:23:cb:48:04:
d7:c2:6a:9c:c9:69:ff:78:9f:fa:79:6b:a6:ce:83:9e:64:d9:
fa:cc:1d:a1:3f:cf:0c:f0:75:25:52:e8:46:b2:96:26:8a:32:
fc:64:83:61:06:94:fb:f0:19:7f:65:8e:dd:25:3e:81:e4:1a:
32:34:5e:f9:cd:61:31:bc:f2:bb:d2:c2:a3:d0:c8:93:d1:b2:
58:65:47:ee:6e:0d:96:a7:da:08:88:c6:37:91:35:77:c0:5b:
98:4b:50:a6:c0:15:03:7b:c6:2d:95:b1:ec:f6:fe:48:df:c2:
9e:9e:f3:57:d1:26:17:41:f1:53:9a:19:42:ba:34:f0:b3:f6:
41:08:1e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:51:26 2026 by rpki-client