Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: XTSlYscvM8LKZZfXZvILLCXmotOTcksj0d67PVjkJss=
Subject key identifier: 89:EE:5B:83:7D:21:D4:68:E4:20:FC:52:FB:DE:9E:5D:C8:B5:F6:ED
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 01A19A6A774F2663EB0D7EB65488C9BA88ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0FF8
Signing time: Mon 02 Nov 2026 04:00:30 +0000
Manifest this update: Mon 02 Nov 2026 04:00:30 +0000
Manifest next update: Tue 03 Nov 2026 04:00:30 +0000
Files and hashes: 1: 75yqge0Mas1_d8DNK85PjPxD8u0.roa (hash: 5ohJJRrInpgTC+nJEF4e2/DApexQWvpHtnFConEwEDo=)
2: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: PH56JTba+WfCyRrWgGwMNvtu4VNunCgELGWgkdZefzs=)
3: opow8uP9IKSNWNqVgii4cTwADfA.roa (hash: +b/EweslPo3iR9ssvZX7aiO4HVHajEP37IxcMi09yZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:6a:77:4f:26:63:eb:0d:7e:b6:54:88:c9:ba:88:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Nov 2 04:00:30 2026 GMT
Not After : Nov 3 04:00:30 2026 GMT
Subject: CN=89ee5b837d21d468e420fc52fbde9e5dc8b5f6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:1c:45:92:01:b7:f7:1a:48:bf:cf:9d:07:
40:64:57:50:97:3b:c1:97:19:c0:84:66:41:51:82:
6f:c0:0e:08:91:68:45:b0:9c:40:ea:63:a8:a5:e1:
14:5e:ca:76:52:c5:56:d0:b7:1b:4a:08:80:01:ea:
35:3b:ff:d3:dc:31:fa:f1:7c:d4:ed:10:1b:81:5e:
18:ba:50:2e:b2:b1:61:fc:50:46:ed:76:34:2f:fa:
30:75:8a:fe:ff:4c:4c:93:7c:6c:0b:51:99:82:be:
fd:93:e7:84:f2:79:55:0f:e3:07:bf:75:7e:c1:eb:
11:79:6e:f4:a5:3d:44:52:cc:69:f9:74:22:8d:e8:
e7:f6:04:80:94:f4:e6:9e:6d:19:fc:20:90:d2:84:
79:89:d7:1e:58:d2:98:f4:e2:e8:a2:35:55:cd:f3:
4d:7a:de:8f:55:4a:bc:fe:57:cc:c5:0e:62:b3:8f:
b2:3e:25:9e:f3:6c:18:c4:be:a6:35:c1:6c:b0:14:
8d:40:1a:a7:88:e0:e2:80:21:b4:1e:f9:4f:bf:18:
9f:c4:37:ef:d9:1b:f6:30:30:3e:3a:60:2e:0d:23:
b9:ba:f2:2a:00:67:51:30:4d:9d:1b:1d:2c:31:6e:
d1:30:7a:e0:d1:09:95:a0:30:4c:b3:8b:42:d8:a2:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EE:5B:83:7D:21:D4:68:E4:20:FC:52:FB:DE:9E:5D:C8:B5:F6:ED
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b3:f7:83:0b:f5:a3:08:33:9a:cb:ba:e9:0d:ee:a9:50:08:
2b:06:58:8f:3d:94:b3:c0:68:15:d3:f0:12:a4:7f:04:39:b8:
9f:24:62:93:e7:66:45:5b:65:b1:19:c3:36:24:ec:b2:0b:45:
d3:c7:26:bf:9f:c6:98:1b:e4:f3:f0:a7:47:9b:f2:07:5a:6c:
92:cc:e4:85:02:8c:7c:8f:f6:3b:30:c6:a2:3e:70:ab:68:50:
cb:24:50:3d:42:c9:5f:f9:d7:56:42:c9:c7:f4:e1:66:fc:30:
1d:8b:ae:58:f0:8d:10:93:ca:dc:2b:90:a8:17:99:4c:58:a3:
54:8e:3c:98:83:48:cc:92:db:21:c2:d6:74:6b:93:e8:a4:58:
bc:2b:47:d6:52:8c:f8:0d:98:8d:8b:ba:ef:a3:a3:f6:22:9d:
b2:f9:9d:c9:e9:0f:00:b2:74:17:7d:be:3c:0b:3b:c0:21:06:
76:ca:8a:a2:f3:16:fd:91:18:25:3c:a5:61:97:09:ef:96:cd:
a0:72:89:f4:a2:f8:41:d5:5c:6b:89:d0:f6:dc:95:97:53:04:
70:01:d6:92:d5:c7:bd:f2:63:a8:59:1e:df:87:7c:72:1f:93:
6d:b2:b7:27:7d:bc:14:9d:e8:bb:1d:c3:ef:41:79:34:55:48:
2d:d0:a6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:43:50 2026 by rpki-client