Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
File: OjLwwcjLEx0TZbOPCKTltYLiW0E.mft (raw, json)
Hash identifier: wZMKjAwY4LbK4/IcRKRGbYPtOOebKG9LpSg5OEE5Wkk=
Subject key identifier: 0E:19:CE:0E:DB:43:A2:23:40:E5:17:F9:23:4B:1D:9D:13:2B:94:3C
Authority key identifier: 3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
Certificate issuer: /CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Certificate serial: 01A17A03D86509029FA72B54E6DEC1B6958C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:00:34 +0000
Manifest this update: Mon 26 Oct 2026 21:00:34 +0000
Manifest next update: Tue 27 Oct 2026 21:00:34 +0000
Files and hashes: 1: OjLwwcjLEx0TZbOPCKTltYLiW0E.crl (hash: bZO2b9gTUl03kKvMb25uZOhxKYq48o4veuLmxYwAo8c=)
2: SyE1IAlXPkJZ9_iqXKQIoEOXgAs.roa (hash: s6NzmaozxO+4w9NIyythzaRrJ0Zd5+4CkcBBGqgurQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:d8:65:09:02:9f:a7:2b:54:e6:de:c1:b6:95:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Validity
Not Before: Oct 26 21:00:34 2026 GMT
Not After : Oct 27 21:00:34 2026 GMT
Subject: CN=0e19ce0edb43a22340e517f9234b1d9d132b943c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:ef:1c:7c:18:38:95:3f:b1:ab:a5:5e:ab:
f5:3b:a5:60:37:28:9b:5e:4f:f8:04:81:30:2e:5d:
ed:bd:f5:f0:41:23:06:a2:04:dc:b7:27:cf:4d:3c:
c7:0c:b7:02:13:68:ef:33:4a:fd:6e:d3:93:14:10:
15:eb:e7:48:92:db:53:18:5b:ed:63:b2:79:af:76:
71:4a:86:a3:d1:bc:31:f5:ad:1f:3f:fb:30:04:ed:
e4:10:ca:4f:9f:a9:f5:76:2c:85:85:b1:6c:5a:7e:
b9:3e:30:65:51:e9:e0:60:b3:20:ac:d9:f1:fe:25:
23:2c:3e:c7:65:19:b4:75:bc:72:2e:14:0d:51:f2:
07:96:12:3e:66:09:bd:36:8a:7f:df:94:bd:2e:16:
dc:f3:29:9c:b2:43:05:78:da:69:9b:25:19:19:d1:
66:20:3f:ba:8c:9b:b1:15:3c:6a:c3:bc:e2:e2:f2:
b7:19:71:32:c5:4a:26:68:e6:c1:52:81:3e:05:ef:
f5:66:b3:d1:46:de:4d:5b:05:e4:c5:5c:0a:92:d4:
a2:5d:5c:4a:b6:ae:a8:3f:82:38:0a:95:84:1f:51:
b9:47:a0:28:d8:93:e4:9f:82:5a:58:6e:cb:5f:44:
1d:39:18:d7:15:a0:1a:4d:db:84:38:fb:cd:31:12:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:19:CE:0E:DB:43:A2:23:40:E5:17:F9:23:4B:1D:9D:13:2B:94:3C
X509v3 Authority Key Identifier:
keyid:3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3e:a9:97:25:8c:17:25:bb:9a:64:2f:57:7b:9e:ed:08:e3:
5f:5a:2c:e4:8f:05:82:97:c1:61:84:60:fc:a3:ea:fc:60:0e:
0a:55:ec:8b:f6:66:36:41:9e:92:8d:53:98:8d:0c:e7:f3:23:
9d:91:19:28:86:8e:fd:d3:50:de:76:de:cc:49:28:4a:3a:74:
4f:db:8a:71:95:b7:32:49:35:11:a1:43:8a:52:2c:a5:a4:15:
c1:87:cf:f3:27:2d:e4:2c:c2:b9:4f:e2:95:a8:39:dd:82:f5:
67:93:ef:3c:44:e0:6b:ff:52:4f:0f:7b:49:8b:28:fc:fb:9f:
64:4f:61:70:e1:71:78:f1:5e:ad:05:c7:53:87:a1:69:a7:e5:
8f:b2:3c:56:95:29:5a:6a:dc:b2:85:b1:57:4c:ff:0c:16:09:
81:1e:c5:3e:01:26:be:25:f1:48:57:71:76:df:3d:4f:18:34:
08:ac:2a:cd:68:7b:92:47:b0:6a:c1:43:58:92:04:d8:32:aa:
d8:b9:51:27:99:5c:3b:ee:fc:3d:f7:ba:71:58:42:04:13:ae:
e5:7d:81:ea:a7:69:b3:c2:57:20:4c:df:75:a6:26:11:09:49:
fe:a6:35:c7:03:ca:00:42:9f:41:83:79:f2:22:55:d6:f0:fa:
33:9e:9f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:36:42 2026 by rpki-client