Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: hMO0+jHcrunWwQKgsAOpUd6Dx3Uv6I7wGonIxD79Rkw=
Subject key identifier: 78:34:6B:C2:2B:66:BC:23:77:76:76:77:3A:41:A4:45:29:12:1D:FA
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 01A1A593263974879054D0E7C78CABCB28D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1AE4
Signing time: Wed 04 Nov 2026 08:00:46 +0000
Manifest this update: Wed 04 Nov 2026 08:00:46 +0000
Manifest next update: Thu 05 Nov 2026 08:00:46 +0000
Files and hashes: 1: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: X9taZJqZOxfmq3vOsX9uC0GG2Lb5DdkpCpbA+6/SRuI=)
2: WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa (hash: ZvSkcDxGhvi+aJsfbms5jhxFpHcmll85L+dtrGm8zwg=)
3: csloCIt3CTSVgebL58dJpxOdtC0.roa (hash: esH7P1ArdXIQnwu6qXLQUiXFhHbcU/4jPuyvpFcE9cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:93:26:39:74:87:90:54:d0:e7:c7:8c:ab:cb:28:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Nov 4 08:00:46 2026 GMT
Not After : Nov 5 08:00:46 2026 GMT
Subject: CN=78346bc22b66bc23777676773a41a44529121dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:dd:11:33:23:cb:05:71:18:75:c6:db:32:
b4:3b:d2:bf:92:58:65:b5:5e:93:05:e5:9b:e4:75:
0d:bd:74:ee:95:cd:9a:69:df:d2:e7:24:9c:31:54:
59:22:62:76:4d:78:7a:a6:b5:7a:c4:50:85:8d:e6:
04:d5:76:38:4a:5b:f6:f3:6c:cf:fe:22:ec:a5:6f:
11:1a:d5:ee:82:af:5f:3c:fb:93:97:cb:b3:9e:c5:
af:30:a9:20:80:e1:84:ee:a0:7f:ef:40:3e:c2:e0:
46:db:fa:7b:e4:d8:c0:a2:42:b7:b9:d8:2c:b6:96:
60:01:9a:24:cb:61:df:aa:bf:ed:0a:1f:ed:c9:dd:
a6:d3:cb:43:8c:16:b9:34:9c:c4:de:87:5e:13:bf:
48:2c:a9:70:e2:b9:34:cb:1c:08:11:60:7b:c2:87:
c2:0e:0f:9c:1f:e1:a6:3d:e1:34:da:51:7c:6a:fc:
c7:15:33:31:49:b6:a8:6f:9a:c5:fa:8f:a6:21:c4:
91:6c:80:29:dc:ea:9b:8a:9b:a7:9d:a7:7b:0f:5e:
98:68:50:8c:ae:80:e5:ad:ed:b2:a9:18:b8:30:d8:
ff:13:9a:39:02:87:09:82:53:64:b2:00:cf:b8:2f:
aa:c0:03:36:ee:2c:d5:34:59:9b:76:76:60:39:09:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:34:6B:C2:2B:66:BC:23:77:76:76:77:3A:41:A4:45:29:12:1D:FA
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:90:09:93:21:c5:8a:13:b0:c3:b6:f7:54:ca:72:06:85:d2:
97:d7:37:08:2f:10:57:01:5f:d5:91:6b:80:8b:99:12:db:ab:
f7:f5:fa:fe:0a:b3:ca:a0:90:7e:70:ec:d2:b4:05:cf:7e:a6:
3f:91:03:34:96:c2:92:31:7a:ae:a6:82:e4:b2:7e:ee:38:82:
a3:f9:ca:d8:7b:6d:70:bd:52:c2:b3:36:0b:40:1f:f0:52:16:
6e:7f:f5:b4:bd:a7:c6:89:d4:38:a0:fe:6c:7e:d0:a9:7d:3b:
ee:b5:f8:d0:c8:ea:c1:60:2d:68:7a:ca:a9:0e:e3:71:8e:ff:
e3:a9:aa:ae:6f:60:f7:7c:0e:c8:b3:70:99:30:fa:cd:c4:fa:
62:09:6a:dc:c7:03:38:60:d2:2d:99:2b:93:47:0d:24:05:aa:
0b:f4:f0:d9:0e:3a:55:dc:65:bf:a0:40:f7:66:39:a4:5e:87:
74:87:28:14:28:15:8a:fa:15:ae:29:47:38:99:7c:59:d9:f4:
c2:00:a3:29:c7:df:11:a7:6a:34:66:be:70:c7:eb:5f:08:5f:
a6:4a:18:c0:8a:e6:15:28:61:43:da:02:c8:3f:96:43:3c:31:
08:ae:8a:2e:62:c3:d9:06:7d:d1:d9:1d:70:9b:8f:6d:5e:f9:
ca:e6:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:18:51 2026 by rpki-client