Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
File: OXxQHi_zsKtTS0hMOpKNHwk10bE.mft (raw, json)
Hash identifier: 8qAKEtn3SlFIUo2SEI2OUvM24kBSiMTl2ex6BeWIx5Y=
Subject key identifier: CC:1C:3A:9F:F7:81:20:2E:24:F9:C9:28:51:2B:AF:C1:EB:07:23:3A
Authority key identifier: 39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
Certificate issuer: /CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Certificate serial: 019D9B19D4E9ACB00250C058FCC9A14BECF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
Manifest number: 010A
Signing time: Fri 17 Apr 2026 11:00:54 +0000
Manifest this update: Fri 17 Apr 2026 11:00:54 +0000
Manifest next update: Sat 18 Apr 2026 11:00:54 +0000
Files and hashes: 1: OXxQHi_zsKtTS0hMOpKNHwk10bE.crl (hash: mZtrL/p6BYULVw1pSoar3FKraBV1E+gUW01/Oagmjp8=)
2: gLMnpAvJYDZgw8CMi1ywBPu8HKA.roa (hash: HfvKqfxiDqSfDMKCc4gBb3RHAJZd+tjrpFoCaU5J9O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:d4:e9:ac:b0:02:50:c0:58:fc:c9:a1:4b:ec:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Validity
Not Before: Apr 17 11:00:54 2026 GMT
Not After : Apr 18 11:00:54 2026 GMT
Subject: CN=cc1c3a9ff781202e24f9c928512bafc1eb07233a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:1d:19:83:26:15:f5:54:47:17:70:9d:08:
5b:3f:df:6c:e0:2d:fd:39:17:0e:6c:be:17:53:7d:
b0:98:d5:4a:46:d6:6e:79:cd:99:aa:7d:1f:a2:0f:
e6:ed:52:bb:8b:ff:b1:ad:08:cd:9b:9f:55:77:fa:
ba:5f:20:3f:8e:10:ec:93:de:9f:e1:54:bb:74:fa:
13:d7:3e:e1:60:cd:5b:2e:46:44:a3:55:0b:83:97:
35:ee:ae:c2:c2:bc:f1:31:82:47:a6:f6:61:60:f0:
68:bb:99:f5:04:f5:b5:a2:9d:6d:08:e1:05:c2:3c:
df:00:06:f4:0c:45:e8:e4:2d:75:74:01:f9:0c:d4:
78:87:87:42:5d:a3:c8:4d:19:be:2c:2d:02:67:d7:
64:cc:30:20:d8:74:a9:70:f8:27:48:67:3c:c5:fa:
5c:ec:c6:34:0c:56:6f:4e:10:63:e1:5c:0a:8a:f8:
92:f2:40:95:8e:bd:23:00:3d:a7:8f:86:70:3a:b7:
0e:db:aa:b9:2a:97:3a:1f:e0:8b:b0:ca:7e:cb:96:
2a:70:4c:2f:51:1f:11:f5:26:bb:97:62:f0:de:27:
ea:5b:99:12:a8:28:0e:7d:15:10:9b:53:6e:3a:80:
1c:18:10:e9:23:ad:1c:92:1b:b0:33:e2:18:9e:cd:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1C:3A:9F:F7:81:20:2E:24:F9:C9:28:51:2B:AF:C1:EB:07:23:3A
X509v3 Authority Key Identifier:
keyid:39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6e:5f:2e:7e:74:52:05:26:8c:40:ac:45:03:6c:ed:0d:25:
14:29:2b:de:18:75:c0:19:26:bf:7a:11:31:1e:ba:f1:59:24:
7d:6f:e2:89:0f:3e:96:7d:a7:54:85:58:9e:1f:27:2a:b5:cb:
1f:6a:37:d7:3a:c5:9d:79:50:b9:09:c6:cb:99:99:85:64:ae:
71:b1:64:38:f6:b9:34:2d:0d:c3:27:f5:7a:c4:73:b2:34:0d:
41:7a:97:ce:29:d4:40:bb:a9:24:6a:7c:d9:e2:25:aa:d7:28:
9a:68:d2:93:a0:82:79:26:aa:14:45:ca:e2:b3:32:60:99:4f:
cd:a2:d4:86:fb:d4:b3:10:de:63:ab:6e:d8:dc:14:9c:b9:03:
46:74:54:ae:19:36:31:6d:f1:dd:f3:6a:24:d9:42:ec:7f:b4:
10:5b:fd:b2:ce:32:f0:d5:38:5b:c1:30:b7:55:92:d8:ab:52:
c4:d4:d0:e2:c9:03:8b:2d:4e:a5:34:b9:46:a7:aa:e7:bd:cf:
d9:99:58:b9:77:9c:91:fa:7f:00:6a:31:f8:cb:3a:d1:58:99:
f0:6d:cc:80:c8:21:af:50:cf:ce:7d:42:62:5d:5e:3a:5b:42:
2b:d5:32:8e:b9:60:fa:3a:f7:3f:d0:4f:23:b5:77:a6:be:5c:
28:d0:4c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:26 2026 by rpki-client