Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
File: Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft (raw, json)
Hash identifier: TFyBpGmtKn9MSac6VPxguz6HQYaViA4etE8MBpFeUMg=
Subject key identifier: BA:7D:CE:37:75:25:23:9E:41:62:52:5B:CD:16:55:BD:2A:48:BB:A1
Authority key identifier: 39:A7:B4:A9:E8:91:F8:B9:B0:83:E9:80:A6:AF:AF:44:AA:6A:1C:95
Certificate issuer: /CN=39a7b4a9e891f8b9b083e980a6afaf44aa6a1c95
Certificate serial: 01A18F42441BA24EDE14AD4E268597A2DC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
Manifest number: 0148
Signing time: Sat 31 Oct 2026 00:00:47 +0000
Manifest this update: Sat 31 Oct 2026 00:00:47 +0000
Manifest next update: Sun 01 Nov 2026 00:00:47 +0000
Files and hashes: 1: JLnk5C74MEI_NjoEcm6PQfIFO6E.roa (hash: mjm8zSzLPcPug8icRhADhhaesrGC//QbH1Zmg7AdhiY=)
2: Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl (hash: weGAU1NmwvCdMG7CboGR9motIPXDh4NM+w2NKwg1PBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:44:1b:a2:4e:de:14:ad:4e:26:85:97:a2:dc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a7b4a9e891f8b9b083e980a6afaf44aa6a1c95
Validity
Not Before: Oct 31 00:00:47 2026 GMT
Not After : Nov 1 00:00:47 2026 GMT
Subject: CN=ba7dce377525239e4162525bcd1655bd2a48bba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:94:55:0d:dc:8c:35:17:cb:38:9c:d3:34:af:
f3:23:e3:36:c3:66:1f:16:ea:bc:4f:55:b2:19:70:
8f:5d:f6:da:03:4e:67:fc:4a:02:18:99:3e:13:b1:
dd:f7:7f:37:4b:d8:84:76:16:23:e5:94:c5:7e:51:
75:53:32:36:30:37:f9:aa:da:11:cd:56:f9:e1:8f:
75:ff:b0:56:6d:55:f0:31:94:17:13:10:b9:7d:96:
f5:b4:31:35:43:e8:b8:63:50:45:76:26:6c:7a:26:
b8:2b:aa:44:78:cd:6a:16:6e:96:eb:fd:77:92:d1:
4c:2e:a1:44:d2:81:bf:fd:64:5e:fc:da:6b:be:55:
7e:ee:70:9c:67:bb:af:6c:de:16:a4:82:7d:a7:e1:
08:94:a9:45:3c:4a:cc:9c:77:80:08:49:32:03:7e:
b8:7a:70:ed:c4:26:54:bb:d8:ab:68:75:5b:93:89:
d6:5f:f1:13:12:92:d7:fa:6c:2e:8a:15:b6:da:19:
ea:0c:d7:ab:f5:23:23:69:aa:e3:c1:86:0b:86:f8:
53:b9:44:8c:e2:c5:b3:c2:18:77:be:f5:07:0d:62:
8e:56:be:80:82:83:b9:55:e0:10:69:7f:8a:9a:9f:
91:e8:85:7d:05:4f:41:1a:4d:b6:13:37:4e:8e:81:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7D:CE:37:75:25:23:9E:41:62:52:5B:CD:16:55:BD:2A:48:BB:A1
X509v3 Authority Key Identifier:
keyid:39:A7:B4:A9:E8:91:F8:B9:B0:83:E9:80:A6:AF:AF:44:AA:6A:1C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:22:c4:2d:55:fa:56:23:bf:79:8d:8d:a2:45:9b:13:fb:ca:
7d:60:f4:f6:02:ad:4a:3f:77:63:dd:12:43:63:c9:fd:4f:e4:
26:2d:46:e7:c7:5f:0e:a4:7e:dd:51:49:c1:77:e2:ff:1f:0d:
35:16:8f:0a:a1:d6:e0:07:90:0c:c7:55:64:df:b9:11:c5:4a:
8a:cb:17:6a:8f:cd:12:7b:c6:53:34:02:23:15:54:fc:c6:b9:
66:5d:76:79:63:c7:cf:f7:0d:bf:f8:e8:cc:f0:9e:17:5e:3d:
a3:42:c9:b4:d4:90:61:5a:d0:79:72:87:50:ff:bc:e7:5d:a3:
66:d2:3e:d5:8c:d6:cf:b2:5f:75:fe:80:ba:78:c3:51:b2:3c:
67:b9:71:6b:37:18:e7:bb:a5:ce:22:53:aa:84:6f:21:60:04:
72:3f:d8:01:e0:32:c4:fd:51:72:3f:14:14:3e:1f:99:81:c8:
00:c0:d2:10:12:20:b4:51:79:fc:0d:af:b7:6b:1b:79:fe:c0:
33:f7:e5:f9:24:10:db:0a:52:e6:7e:27:2a:1c:f8:7e:22:fd:
b7:50:54:df:bb:9b:07:44:58:f0:2b:52:75:82:c2:fa:2d:23:
46:3d:a2:13:93:eb:48:a2:fe:8d:e6:b4:c1:3b:a7:ab:44:43:
70:0b:06:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 10:05:32 2026 by rpki-client