Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: O6XPDuapsrvi0rEvX/GhLNwQWQ+EcYCAW9VzMqodsEU=
Subject key identifier: 9A:32:48:5E:8F:88:D4:C9:7A:89:24:4E:AD:67:01:29:69:F4:42:A1
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 019EFEB10E4DE272D4367ED92E4DD9C95EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 0B9C
Signing time: Thu 25 Jun 2026 12:11:16 +0000
Manifest this update: Thu 25 Jun 2026 12:11:16 +0000
Manifest next update: Fri 26 Jun 2026 12:11:16 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: HOyUTvNnKTfT4NlxqxA4XtEaKWJgPSJWaGYQb6bbjsw=)
2: a8XnUOfpz8ZY7eKp-4bvRwhsoUk.roa (hash: ezF+mZ7l6Eoc1jbkNrsOHMCf2Y5Hcn8BAe23t9pa+WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 08:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:b1:0e:4d:e2:72:d4:36:7e:d9:2e:4d:d9:c9:5e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Jun 25 12:11:16 2026 GMT
Not After : Jun 26 12:11:16 2026 GMT
Subject: CN=9a32485e8f88d4c97a89244ead67012969f442a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:06:87:ee:c6:79:55:73:83:83:d9:c2:2b:a7:
44:8f:d7:04:1c:fa:f0:47:43:41:7c:d5:29:da:12:
97:7a:34:05:3b:69:79:1c:b4:ad:56:6b:74:dc:12:
c7:00:79:8a:26:c6:d1:8e:32:35:f8:ff:9d:9e:55:
5f:8f:93:42:39:6f:dd:ff:5e:a0:74:bc:a5:32:cc:
f1:95:c2:04:77:ac:c7:9c:06:a4:c8:d4:45:4d:30:
81:27:f7:86:f4:24:e5:b8:ae:2f:fe:16:54:88:6b:
61:6b:24:5f:47:e0:be:32:b1:13:0a:80:cf:51:00:
d4:65:2e:d3:02:48:28:a5:2f:33:65:40:83:43:c4:
25:df:2f:59:52:82:b8:55:55:16:6e:af:d7:e1:43:
28:17:43:c8:a8:0e:f5:cb:8c:8d:85:e4:6b:c9:6d:
14:cf:ef:d7:6c:b3:6b:8e:9e:cf:78:b3:2d:da:20:
b4:7f:46:17:07:67:eb:c2:f6:1f:98:11:58:69:9d:
00:de:8d:b2:49:17:2d:5d:a1:f6:71:5f:55:fb:06:
0e:a7:4c:50:b8:fc:ad:2c:bc:e5:41:bc:86:0b:95:
8f:6e:e1:5b:e7:83:dd:f1:03:11:3f:f8:a4:21:56:
65:a8:54:63:42:fe:3f:b1:30:73:f6:01:ec:8c:2a:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:32:48:5E:8F:88:D4:C9:7A:89:24:4E:AD:67:01:29:69:F4:42:A1
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d5:8b:30:77:b6:9b:e8:ee:e3:5b:a6:bf:01:03:c8:c9:8d:
fc:25:5a:3d:6c:36:2b:ea:bb:97:27:72:9e:17:dc:a3:93:f8:
99:ec:fd:4b:14:a9:12:d9:15:4e:7b:0f:86:11:a7:78:ab:de:
b5:b5:77:fd:54:c8:93:52:ea:0c:67:6f:e7:09:6a:aa:e6:4a:
da:71:f4:0d:5d:89:d1:07:4d:e1:8d:d4:63:00:54:ed:81:b2:
9d:bf:df:ae:b6:bf:af:15:80:91:86:fe:58:41:8a:e7:d1:bd:
cb:99:e2:0c:ce:4a:5c:28:59:96:9c:3c:52:93:c0:b5:19:b1:
f6:78:ff:da:78:f0:e3:25:be:59:97:31:9d:de:0c:99:5f:c5:
9a:77:f4:56:ad:14:43:5e:2b:74:44:b6:62:b4:a1:70:42:03:
02:38:10:83:b2:8e:db:4e:52:ce:41:41:5a:ec:dd:f3:b1:94:
d0:d5:70:74:bc:a7:75:f6:5b:56:f0:9e:76:10:05:45:03:19:
11:60:f4:28:d3:24:4a:72:93:de:18:12:c8:7a:98:8f:5a:e9:
5d:7d:4e:6d:d1:b3:09:26:74:5f:68:05:40:c4:d4:07:19:c7:
56:b5:93:78:78:b1:50:2d:fa:2c:b0:9d:3c:09:bb:97:a9:ff:
63:39:09:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 15:32:17 2026 by rpki-client