Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
File: OjLwwcjLEx0TZbOPCKTltYLiW0E.mft (raw, json)
Hash identifier: MxPGsgF8+nOuh162tzgh+YgU21ojdowhx7mEoKA9ayY=
Subject key identifier: 75:83:9E:17:82:79:C9:50:D4:2B:8D:7D:28:26:78:7A:57:7F:A7:CF
Authority key identifier: 3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
Certificate issuer: /CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Certificate serial: 01A08A8CB01C8AF7542DE56C102025E49168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:10 +0000
Manifest this update: Thu 10 Sep 2026 09:01:10 +0000
Manifest next update: Fri 11 Sep 2026 09:01:10 +0000
Files and hashes: 1: OjLwwcjLEx0TZbOPCKTltYLiW0E.crl (hash: TtqbJALjUlPv8DyEO40ydxl3jMeX41VZYiXcB6ALd/g=)
2: SyE1IAlXPkJZ9_iqXKQIoEOXgAs.roa (hash: s6NzmaozxO+4w9NIyythzaRrJ0Zd5+4CkcBBGqgurQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:b0:1c:8a:f7:54:2d:e5:6c:10:20:25:e4:91:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Validity
Not Before: Sep 10 09:01:10 2026 GMT
Not After : Sep 11 09:01:10 2026 GMT
Subject: CN=75839e178279c950d42b8d7d2826787a577fa7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:4a:ca:73:94:eb:93:fd:8a:8d:c0:b7:c5:
62:24:0d:a5:c5:d5:1a:a9:a6:35:d5:75:5d:95:37:
fd:72:aa:f8:a2:51:3c:ab:85:62:c7:28:af:75:b0:
58:1e:b2:56:da:d7:d1:7e:b5:91:dc:94:3e:ac:d1:
fc:4d:56:78:b6:17:a6:cb:6a:7f:91:2a:c3:cf:f7:
65:18:62:cb:9d:43:1d:09:79:54:2a:0c:e5:e9:ec:
87:db:2b:2d:40:c1:54:fc:13:b6:a8:d4:8a:44:cd:
ed:9b:43:cd:7f:07:fc:fa:88:fd:c4:69:1d:e5:a2:
08:b3:e6:80:c2:b5:ad:ac:58:c7:9e:19:cb:0d:05:
54:e3:65:33:d8:b7:ee:ed:e1:f3:e5:a0:9f:2c:b9:
55:a8:25:34:4e:94:2d:ea:81:a5:e9:7d:74:57:00:
84:ce:a9:6a:7d:66:03:17:7a:9c:b1:0d:42:38:71:
f2:a7:18:0a:91:0e:95:02:a5:9d:5d:46:d8:c6:69:
35:1a:60:7f:16:3f:f1:ff:01:d5:ed:88:5c:42:77:
a7:aa:e7:e0:8b:14:a4:a7:a3:0c:f9:92:0f:70:e9:
b0:7f:0d:fa:dd:94:81:56:f0:22:8c:22:66:7b:8a:
f9:ea:7d:f8:5e:27:ac:a1:0c:b3:93:cc:d1:55:60:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:83:9E:17:82:79:C9:50:D4:2B:8D:7D:28:26:78:7A:57:7F:A7:CF
X509v3 Authority Key Identifier:
keyid:3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:be:1f:dc:45:4d:b0:61:34:b7:41:53:c7:5e:81:b9:96:97:
7b:3c:0c:b8:ab:df:0c:a4:33:81:83:96:ff:0b:15:22:2b:eb:
c6:5a:28:20:72:37:c4:a2:b8:b1:17:e3:94:f3:c0:18:b0:88:
3e:1c:2d:97:d0:f1:ec:97:01:f0:3b:2c:18:aa:12:7d:d4:a9:
eb:10:91:d0:12:e4:e0:d7:8b:f0:0b:30:ef:d0:35:95:e7:f2:
3d:c0:8c:89:d4:ec:da:ff:85:df:01:80:90:66:dd:b4:ac:41:
64:50:cf:cf:aa:15:b9:5b:e2:fb:09:5a:06:d9:57:c3:68:ca:
a8:d3:3e:6f:89:3c:a9:86:47:90:d4:3e:2e:b9:ba:14:0a:3b:
c1:4e:35:07:f9:12:36:e8:d2:7d:26:bb:8b:f3:6f:67:60:52:
94:56:28:66:08:27:cc:7d:56:0e:c1:5c:08:71:74:ca:99:4d:
c5:8f:2f:6c:5c:51:f7:0a:c4:03:1c:7e:5d:58:bd:ea:2b:52:
b4:87:c2:33:1b:5b:f2:ae:4e:4b:97:66:c5:3b:6a:18:04:6e:
a2:36:53:05:75:a4:3b:aa:bb:91:79:14:e6:5f:18:79:a8:1c:
18:20:5d:1e:79:ab:84:63:4f:ae:73:63:f5:bf:29:92:36:85:
91:33:24:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:59 2026 by rpki-client