Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
File: oHkxBpr_ycmd5RjIJgYOGctHWmo.mft (raw, json)
Hash identifier: 7QRaEJuum3esYtGX7YDuaUg58LgmIrZEf4/ncnvClPY=
Subject key identifier: 24:D9:13:87:0C:B0:B2:38:8C:C5:26:62:92:C2:0C:02:B2:C0:59:46
Authority key identifier: A0:79:31:06:9A:FF:C9:C9:9D:E5:18:C8:26:06:0E:19:CB:47:5A:6A
Certificate issuer: /CN=a07931069affc9c99de518c826060e19cb475a6a
Certificate serial: 01A18676690C0302B76029152AC7A7520835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHkxBpr_ycmd5RjIJgYOGctHWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
Manifest number: 0273
Signing time: Thu 29 Oct 2026 07:01:09 +0000
Manifest this update: Thu 29 Oct 2026 07:01:09 +0000
Manifest next update: Fri 30 Oct 2026 07:01:09 +0000
Files and hashes: 1: 2nCCDGIY-zgjtBGd6Ratic4BUZk.roa (hash: ypGUracRtSQozaYCuAAYU3ve4jp+TLuRdz+sdn4iE+c=)
2: oHkxBpr_ycmd5RjIJgYOGctHWmo.crl (hash: lKudpPz+UpB7mRb1QgKiYzGDgV017l3590nXguHTu/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHkxBpr_ycmd5RjIJgYOGctHWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:69:0c:03:02:b7:60:29:15:2a:c7:a7:52:08:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07931069affc9c99de518c826060e19cb475a6a
Validity
Not Before: Oct 29 07:01:09 2026 GMT
Not After : Oct 30 07:01:09 2026 GMT
Subject: CN=24d913870cb0b2388cc5266292c20c02b2c05946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:17:45:98:8b:66:7d:c9:d4:99:12:9d:79:
c1:4e:1d:db:3b:9b:8a:4b:14:8b:94:c7:05:74:52:
42:9b:91:42:2d:da:28:e9:be:7e:f4:2f:c1:cb:36:
51:6f:fc:d7:e3:99:1e:7c:0f:fa:c3:8d:5a:51:78:
3b:5d:ac:98:2b:04:85:ec:b6:22:13:ba:c2:04:e1:
9f:a2:e6:e1:fa:77:5e:ae:68:3e:ba:46:42:c4:c6:
e1:cd:99:64:d6:c7:1c:73:ae:6c:d4:11:2c:8a:13:
4b:3e:7e:8d:a2:7a:69:09:60:58:73:4f:90:0a:e4:
dd:32:ec:9f:a9:5a:45:d2:1a:21:52:ba:2b:44:9f:
f4:3f:b5:aa:fd:87:83:15:61:59:42:86:38:3e:55:
17:32:99:7b:a9:f2:6e:2f:a4:bb:5c:23:eb:3f:a1:
9f:7e:80:f0:2d:f0:cc:2b:bd:96:00:73:cc:62:4d:
9e:a4:93:fa:c6:20:61:23:81:4d:67:32:d6:7e:ce:
74:bf:7c:4d:21:cf:02:b5:2c:ab:de:f5:f6:e3:31:
cf:33:b8:4a:39:60:46:a9:68:8e:eb:2a:cc:1e:3e:
65:ab:b1:9f:f8:ca:6f:2b:52:62:0a:cb:57:65:eb:
a0:1b:85:de:79:97:18:70:bb:99:b0:13:f5:c7:48:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D9:13:87:0C:B0:B2:38:8C:C5:26:62:92:C2:0C:02:B2:C0:59:46
X509v3 Authority Key Identifier:
keyid:A0:79:31:06:9A:FF:C9:C9:9D:E5:18:C8:26:06:0E:19:CB:47:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHkxBpr_ycmd5RjIJgYOGctHWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:22:91:70:ec:57:9e:5c:28:48:55:0f:57:a4:eb:8f:c7:c5:
90:c7:b9:1a:22:2a:5a:0b:0e:ff:dd:ff:27:b8:c0:68:19:8f:
39:2d:ca:0c:92:36:eb:be:d2:71:9b:98:32:15:68:8d:57:1a:
49:95:c7:97:b0:45:10:0d:7d:0b:9b:29:9d:43:14:94:86:63:
d7:13:58:bc:8d:55:d5:33:9b:90:91:0e:a8:f3:4c:5d:cb:6f:
3c:7f:75:08:15:f4:96:bc:3d:3f:f6:f3:41:39:be:9b:66:8a:
94:55:06:42:13:34:78:01:66:f6:03:51:4f:10:dd:fc:c7:7b:
04:8e:b1:c5:37:bb:2d:a3:83:78:3c:a3:3b:1a:44:d7:40:66:
22:2e:be:58:35:3e:ac:71:d2:85:5e:31:47:a4:83:7b:9e:4f:
81:a3:51:09:51:15:1d:39:31:77:68:dd:64:47:bb:ce:f9:54:
b4:bc:63:90:b9:a4:67:2e:91:1b:91:cb:17:c3:e6:37:fe:6c:
72:36:e9:ad:d6:a3:02:96:53:1b:6c:56:d4:8e:22:10:eb:a8:
6f:bd:e0:6f:f0:86:65:d0:7d:67:a0:6e:a0:09:65:bb:d4:5b:
9b:cd:5a:1c:43:8f:ac:a7:34:7b:c2:9a:a3:9b:35:25:0b:a8:
bf:35:d9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:04:51 2026 by rpki-client