Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
File: OJwDADZ1arjNrJIrGvI3vOE2fOA.mft (raw, json)
Hash identifier: PPsnDkx2q7kyaE094hXvJwXn3BB2JQ+KxhmOphJu5kw=
Subject key identifier: C3:83:C7:B5:A1:0F:EE:D6:AB:95:77:4A:D8:7C:B1:1B:57:56:B3:13
Authority key identifier: 38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
Certificate issuer: /CN=389c030036756ab8cdac922b1af237bce1367ce0
Certificate serial: 01A1795ED57435FE0A68C167623DD6C58559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
Manifest number: 1AC1
Signing time: Mon 26 Oct 2026 18:00:20 +0000
Manifest this update: Mon 26 Oct 2026 18:00:20 +0000
Manifest next update: Tue 27 Oct 2026 18:00:20 +0000
Files and hashes: 1: OJwDADZ1arjNrJIrGvI3vOE2fOA.crl (hash: HWBqCTJufAWoVkVj/BqqfwTQ37k3y5EXoWKq9RcKkfI=)
2: UDNnbwScWIceduT3mK8HBVvLzOg.roa (hash: vhtxGUgVNJ9daTmq66lTJXKGFzwiSTw9nac1gcWaxBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5e:d5:74:35:fe:0a:68:c1:67:62:3d:d6:c5:85:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c030036756ab8cdac922b1af237bce1367ce0
Validity
Not Before: Oct 26 18:00:20 2026 GMT
Not After : Oct 27 18:00:20 2026 GMT
Subject: CN=c383c7b5a10feed6ab95774ad87cb11b5756b313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:45:ce:75:ee:08:47:61:dc:44:7a:73:af:
b6:f3:fa:e1:3f:7e:94:1f:1c:f1:5c:ca:5a:47:38:
ae:c9:df:c2:35:22:65:b6:76:72:27:2f:e1:80:eb:
c9:32:b8:64:5f:35:23:42:33:47:72:3b:93:e7:c2:
2d:ce:5c:bc:5e:46:37:9d:d4:11:53:42:81:9a:db:
30:62:fe:58:e8:b7:4d:9e:28:e8:52:99:db:cb:dd:
32:26:6c:ab:cc:1c:e7:b1:ce:b5:ee:3b:c7:cd:24:
27:d0:37:a4:78:5d:e2:de:6c:ac:3a:b5:8a:ff:11:
7b:f9:df:d2:8e:7f:8e:67:49:87:40:be:b3:1f:84:
9f:6c:c5:55:4a:16:ba:b5:89:3a:57:3c:5d:4d:98:
ff:91:57:c1:ae:ed:42:ea:e4:13:4f:b0:4d:0f:eb:
e1:92:81:70:45:26:77:5f:d0:53:b8:a8:e4:ea:22:
44:84:32:20:1e:61:03:05:bd:4d:21:39:52:ca:5e:
03:23:ee:59:39:73:c8:97:83:55:c6:3e:77:85:f5:
a0:34:a1:c4:ce:87:8d:ad:0a:06:e1:09:42:ef:66:
ef:fe:42:6c:2b:9d:5e:84:37:94:40:6d:01:6d:d8:
51:04:e0:a4:5a:78:07:bb:bb:be:13:0f:b0:23:36:
9a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:83:C7:B5:A1:0F:EE:D6:AB:95:77:4A:D8:7C:B1:1B:57:56:B3:13
X509v3 Authority Key Identifier:
keyid:38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f4:ea:8b:a3:65:49:95:ba:dd:90:a7:dc:f8:50:78:51:57:
03:3f:2c:3c:3e:3d:c3:cc:dd:66:e6:7f:f3:0c:2d:72:ad:bf:
e3:8b:b3:dd:3b:6e:78:63:1b:73:70:0a:67:4e:40:1b:f6:29:
21:26:71:6c:42:3d:09:b0:3f:35:4c:e4:8b:47:1b:8e:a2:92:
41:5f:a1:b1:d4:07:37:9c:4c:c0:ee:a1:bc:c2:9f:f8:7f:14:
35:ee:e1:44:a6:07:8c:9a:d4:b5:fd:b3:fc:b8:30:1a:90:d1:
5c:c3:32:1c:2c:b4:d8:9d:43:73:cb:4f:7a:2f:c5:85:e3:0f:
63:1d:f4:7f:74:a6:54:60:8a:52:e6:2f:d2:d2:da:46:b3:a8:
58:87:a3:b8:57:65:7e:94:55:50:fc:5d:ed:ec:dc:0e:0f:af:
6c:a3:dc:8a:8a:cf:4b:91:2b:09:47:9c:21:6a:09:04:4e:fd:
95:aa:5a:ff:df:e1:ff:59:6c:f4:71:dc:bb:d9:29:2d:6d:a7:
b5:b4:7e:ca:3c:2e:f5:ad:63:91:7b:c2:0d:63:3a:40:11:b0:
d6:d2:a9:64:4f:cd:49:42:fb:95:a8:4c:94:23:30:79:58:a2:
cf:42:91:3f:07:e5:ee:8e:e2:d0:6d:99:5e:0c:cb:17:ac:bd:
88:a4:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:31 2026 by rpki-client