
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier: H8Ml4N2/cR5sh69xQAlqHA78ww5ZOCtzV05tT0D+LIk=
Subject key identifier: 1A:9E:AB:6D:49:14:BA:26:19:0A:9F:90:05:98:BD:B6:5D:FA:CA:A6
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial: 01A1201BA4D2C3DB0598D291ACBE4B45AA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number: 10D2
Signing time: Fri 09 Oct 2026 10:00:44 +0000
Manifest this update: Fri 09 Oct 2026 10:00:44 +0000
Manifest next update: Sat 10 Oct 2026 10:00:44 +0000
Files and hashes: 1: O4mhqRGKIoCKcIMKacGidJQTeig.roa (hash: o44fh95pYU44LJ84noRE8s+3KorVfsnK8XoKEFDXt+c=)
2: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: xSqoWFAZXr1nSg3zZI8HIri7w9PUox5ZybjsXlPIL0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:1b:a4:d2:c3:db:05:98:d2:91:ac:be:4b:45:aa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Validity
Not Before: Oct 9 10:00:44 2026 GMT
Not After : Oct 10 10:00:44 2026 GMT
Subject: CN=1a9eab6d4914ba26190a9f900598bdb65dfacaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6a:71:4b:55:73:9e:43:53:9d:4c:fc:33:9c:
32:b0:dc:dd:43:08:49:85:a6:d6:bd:22:a0:1d:bf:
cf:f8:d9:08:40:43:2a:58:5b:e5:82:67:de:89:88:
3d:db:44:1e:b2:f5:06:c8:83:fc:a8:e7:df:d0:69:
ce:73:50:90:3e:d1:30:69:ee:45:d9:d5:61:87:92:
a2:ec:57:62:ae:5e:11:01:bf:a3:ff:dc:35:89:74:
95:92:7a:2b:91:32:e3:bb:5d:02:12:f9:59:2e:79:
e2:16:c4:09:ab:71:99:7d:a0:af:a5:f9:4e:53:a6:
38:3a:40:99:d0:14:27:2a:71:c8:9d:fa:fb:61:e1:
b2:b8:d2:17:41:d4:1b:3d:87:ae:b6:71:98:44:ef:
19:92:fb:99:1c:e5:92:50:36:eb:e9:cc:e6:b1:3d:
4f:e6:de:4c:30:7e:c5:ac:34:20:9e:73:65:49:39:
52:e5:a1:2e:e3:f7:bf:5c:f4:f3:9f:33:a6:b3:80:
cb:29:32:09:97:fd:a3:87:3b:33:6d:28:db:ad:30:
c1:72:66:b6:46:5d:3e:5b:36:05:c0:42:eb:2d:da:
16:41:4c:d0:48:c4:4f:53:ad:d0:7c:a4:1f:81:c2:
c5:63:a5:be:6a:f5:1d:33:71:4a:00:3e:e6:18:24:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9E:AB:6D:49:14:BA:26:19:0A:9F:90:05:98:BD:B6:5D:FA:CA:A6
X509v3 Authority Key Identifier:
keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8f:e2:e1:76:37:68:00:63:42:14:41:23:20:c7:c2:65:65:
3d:21:85:92:f1:be:f7:3f:47:f0:38:45:f0:05:af:c4:c3:e3:
e6:b7:da:10:5d:03:e7:3e:d1:bd:ad:49:d3:be:bf:92:41:9f:
e6:ab:1a:13:19:3d:a2:b1:41:01:96:2d:95:af:98:a0:67:ab:
2d:dc:40:fe:e5:bb:d5:58:ea:52:15:81:e0:3c:1d:8c:84:a1:
fc:fa:8d:db:14:cf:3b:da:2a:3b:64:d5:20:d3:01:dc:37:60:
8e:ff:c3:bf:ee:cb:fa:27:25:84:44:a6:69:d9:0c:ca:b4:c7:
d8:d4:df:95:49:ec:f5:90:26:85:f4:f2:7b:72:c2:61:7e:a2:
f3:3f:46:1a:86:7f:c8:ec:36:15:26:8f:10:ff:34:a4:be:8c:
91:65:77:78:fc:bb:62:fa:c5:22:7a:39:c9:05:a1:44:3f:ae:
03:a9:f9:fb:82:ac:46:99:66:98:d0:3b:38:a7:fb:07:59:64:
92:61:b2:b4:f9:3f:56:e4:ef:15:54:34:be:cc:5b:78:fe:44:
27:a4:d1:b5:24:85:d4:85:b5:08:38:72:84:57:0c:39:dd:0c:
1c:1b:d1:c7:93:56:40:fc:3c:1f:25:49:d5:80:61:8a:48:c5:
7c:d8:47:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:52:32 2026 by rpki-client