
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File: OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier: 4v5c1qJTnoTO80KcriisGT/he/UPuWr80JNTXIzoyXw=
Subject key identifier: E5:8D:19:73:C4:8B:26:E9:24:5C:1B:FD:49:70:5C:45:07:0F:A2:37
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 01A06E70A75BDE72CCE91D5E8A22A41AFA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number: 11D5
Signing time: Fri 04 Sep 2026 22:01:11 +0000
Manifest this update: Fri 04 Sep 2026 22:01:11 +0000
Manifest next update: Sat 05 Sep 2026 22:01:11 +0000
Files and hashes: 1: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: t+PlJsJFdtVenP+jmcz4RNzU5UsnVSqINuSTrXpGwZ0=)
2: TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa (hash: w2y72ko+lJjiVlRbZd4qD2G3W4qa+BLqf6Sn4G+/dow=)
3: XWcYfudW_fCjYcND3H407xe959o.roa (hash: hWyo7JRjc5zRnP54qNBVfiEpztNdLDDxrtX9abLg7Ps=)
4: ge5kxbikwrvAEUuIO3lNRkFxLmw.roa (hash: eEJ79T/++oL5XPtUGIItjARG2jFvNlWqvTqYFtL6EkY=)
5: rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa (hash: ng9lqabxlxHQ1G6hpIjPJfi43vHsrt3ed7Cyb0T70ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:a7:5b:de:72:cc:e9:1d:5e:8a:22:a4:1a:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Sep 4 22:01:11 2026 GMT
Not After : Sep 5 22:01:11 2026 GMT
Subject: CN=e58d1973c48b26e9245c1bfd49705c45070fa237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:82:c4:d4:78:8d:35:09:c3:57:3c:58:94:
b2:e5:02:4c:3e:24:c3:a4:83:b5:dc:ac:b5:68:07:
13:1c:3b:35:62:86:06:52:22:f3:da:f0:d9:30:16:
d0:6c:31:b7:23:c8:27:45:65:dd:4b:a0:54:b8:de:
45:50:0b:90:b2:ba:66:3a:73:28:bf:1c:3a:28:8a:
6d:65:50:85:3f:dc:0e:0c:e7:06:fd:c6:cc:ab:c1:
ff:18:fc:60:fa:46:2e:31:6c:50:d2:83:fe:23:90:
af:16:3a:92:70:c3:73:06:21:93:aa:49:20:21:12:
34:67:0f:e7:e9:80:3d:4f:d0:82:20:37:f7:d2:03:
f0:0f:7e:ed:03:31:29:77:6d:00:ef:68:11:b3:6a:
f5:2d:6a:c5:a8:7f:9b:b6:5e:97:48:d2:33:a1:c2:
37:a7:e4:7d:9a:8b:00:b9:76:cc:9b:d7:cc:56:21:
30:99:f6:ff:71:42:f4:7d:7d:28:16:3a:c9:77:83:
dd:58:82:34:ad:34:7b:9f:8b:86:ec:8c:c3:f0:21:
08:0c:5a:22:60:6d:cd:68:de:1e:4e:4f:28:e5:46:
a7:a6:a7:2e:fb:f1:fc:83:2a:8a:21:b9:bb:bc:b8:
a1:af:51:a8:f9:73:b6:c5:0c:f6:6f:12:fd:b0:fd:
7c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8D:19:73:C4:8B:26:E9:24:5C:1B:FD:49:70:5C:45:07:0F:A2:37
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:29:65:f5:a0:4d:9f:82:47:41:8d:35:a6:b0:a6:45:c0:5a:
d2:4e:8c:f7:41:4d:31:aa:b9:f1:39:99:9f:ba:a3:b6:c9:0f:
b3:c4:9c:69:06:9b:9e:d4:0d:56:07:2d:f9:d1:41:42:2d:9b:
43:e4:72:d7:b6:d4:d7:fe:ed:90:ba:b5:21:a3:3e:21:98:c3:
62:3b:35:9c:b8:a1:9b:7e:13:69:6a:f5:87:07:3e:ff:8b:5c:
6a:0d:2c:ce:4f:f4:58:25:b5:2e:a7:06:d4:4f:93:28:b7:ec:
da:04:d0:bd:1e:8f:0a:6a:4e:83:95:cf:24:b9:69:d8:65:fb:
34:74:67:09:27:f0:09:1a:ac:04:6d:4d:5d:c2:42:05:4c:cd:
f4:41:e3:53:f1:1a:87:a1:3f:2e:ae:ad:f8:06:88:69:dc:cd:
3b:71:87:a5:5b:c1:26:b4:00:f8:17:65:5e:3a:55:9f:f7:23:
4a:ab:18:1b:72:1c:16:d2:8a:ed:30:32:6b:e8:1f:eb:f5:50:
bd:9f:7c:4e:5d:9c:13:81:82:7d:87:5a:99:85:78:53:9f:7f:
43:0c:e0:43:75:76:5d:a7:4e:6d:e0:5d:00:f7:a4:ee:b9:a5:
38:c1:9b:df:ff:61:4b:da:ba:60:c7:fd:3a:c6:57:ca:04:48:
78:34:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:01:22 2026 by rpki-client