Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: hGoFRZ8aPE1Sb0qnwdSBmz2rA91Uij/xRxJyjF6gDGo=
Subject key identifier: 10:16:30:06:2F:30:B7:E8:32:96:DA:54:39:5A:96:06:38:E3:47:4B
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 01A12D69C102F39B484092FD543AC08B232B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 11B2
Signing time: Mon 12 Oct 2026 00:01:07 +0000
Manifest this update: Mon 12 Oct 2026 00:01:07 +0000
Manifest next update: Tue 13 Oct 2026 00:01:07 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: XKjMhfPYDB8b22JJ7xLaaRTobpY8YXQX5VfIbRwrBK0=)
2: cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa (hash: kFvba9VnGvbidEsHHI8Wcjcp/+eUykc2W3uRbNK02kM=)
3: s148UHmTyL2I6MjySz-GFW3mNYI.asa (hash: a59MaIiFr2fa8TsMCT5CNyhH5jJOVRe6D3jxY/4FIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:69:c1:02:f3:9b:48:40:92:fd:54:3a:c0:8b:23:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Oct 12 00:01:07 2026 GMT
Not After : Oct 13 00:01:07 2026 GMT
Subject: CN=101630062f30b7e83296da54395a960638e3474b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:de:76:1a:51:fd:2b:65:99:5a:83:55:8a:
db:e6:46:23:4d:1f:b7:c1:c1:53:23:35:b9:2d:05:
49:5c:3b:10:53:8a:e5:80:90:f3:a3:0c:0f:92:7d:
46:97:83:0d:34:df:42:7a:30:58:71:83:c8:6d:a8:
e0:8f:39:6c:e3:70:b0:08:89:2d:01:82:7a:69:12:
20:73:e3:93:64:23:d0:96:b1:64:50:90:48:a9:63:
b6:52:dc:e5:90:42:9a:62:ea:aa:25:9e:84:80:69:
5f:09:81:5c:b2:dd:1e:2e:cd:03:dd:c7:b6:21:be:
c0:f8:ff:88:d2:b9:1a:3d:fc:b4:3a:1d:8b:54:64:
15:ee:a9:39:77:47:b5:8d:9d:f1:e0:13:d9:67:92:
6b:4c:a6:68:2e:80:fb:b5:9c:45:8a:f1:d2:6c:10:
d7:47:a9:be:40:36:10:16:56:6b:ce:4f:1b:ad:c4:
df:a4:b6:59:f0:21:91:f3:a0:82:b2:ef:86:07:7d:
4e:0d:f3:03:a8:12:7a:3f:47:84:c6:b9:69:15:25:
09:1b:37:cd:7d:df:38:c6:61:90:34:45:01:c7:79:
a3:ba:c1:2e:3b:de:cf:05:da:d7:66:41:88:10:35:
93:cf:38:5b:b6:01:89:c8:4d:5c:89:84:a1:36:55:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:16:30:06:2F:30:B7:E8:32:96:DA:54:39:5A:96:06:38:E3:47:4B
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ba:e0:31:9c:05:cd:fd:4e:ad:01:e6:63:fa:f5:4f:0e:06:
8e:24:c1:6a:dc:f5:7b:a0:34:08:63:e4:29:84:ca:fc:f4:de:
48:5f:13:f2:64:38:76:b2:e0:2f:03:e3:74:3f:6b:63:8a:f3:
7c:be:d5:71:b8:a7:21:65:fe:e3:81:8c:bb:f7:d3:5b:d8:c1:
d4:a9:95:e6:48:28:ee:4c:0b:6f:ad:f0:9d:7e:93:fa:32:87:
c7:6f:61:d3:87:e9:a5:4a:f4:aa:f3:88:53:78:db:b1:ea:56:
74:eb:4b:93:27:f1:3c:be:79:a1:4d:c6:4c:a0:17:8e:f4:11:
93:46:6d:d8:03:b2:26:93:d3:33:aa:29:bd:f7:a7:08:df:7f:
5d:07:8b:2c:95:b3:3a:d4:33:3b:69:9a:12:27:5b:ec:93:92:
ae:c2:e1:c9:2c:11:14:45:ac:63:9b:6e:fc:7b:f4:5e:d1:f9:
32:b1:7e:4c:d1:76:88:16:79:d1:b0:77:19:a8:c7:b7:a8:8d:
c8:3b:c0:f9:a4:94:15:d8:9f:30:4a:9f:a5:14:e0:eb:42:77:
c2:04:f9:4f:30:e6:a6:dd:1e:0f:8c:85:a2:4d:4b:59:af:74:
dc:84:bd:be:e3:65:79:0c:ab:3b:81:8e:98:3c:ad:3f:fc:3e:
59:72:d6:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEtacEC85tIQJL9VDrAiyMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OWMxM2M2YjNjMWRjNmIyMjE1MDM1YTY0MmYxZWZiOWIw
MGRkZjUwHhcNMjYxMDEyMDAwMTA3WhcNMjYxMDEzMDAwMTA3WjAzMTEwLwYDVQQD
EygxMDE2MzAwNjJmMzBiN2U4MzI5NmRhNTQzOTVhOTYwNjM4ZTM0NzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcbedhpR/StlmVqDVYrb5kYjTR+3
wcFTIzW5LQVJXDsQU4rlgJDzowwPkn1Gl4MNNN9CejBYcYPIbajgjzls43CwCIkt
AYJ6aRIgc+OTZCPQlrFkUJBIqWO2UtzlkEKaYuqqJZ6EgGlfCYFcst0eLs0D3ce2
Ib7A+P+I0rkaPfy0Oh2LVGQV7qk5d0e1jZ3x4BPZZ5JrTKZoLoD7tZxFivHSbBDX
R6m+QDYQFlZrzk8brcTfpLZZ8CGR86CCsu+GB31ODfMDqBJ6P0eExrlpFSUJGzfN
fd84xmGQNEUBx3mjusEuO97PBdrXZkGIEDWTzzhbtgGJyE1ciYShNlUBoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAWMAYvMLfoMpbaVDlalgY440dLMB8GA1UdIwQY
MBaAFDicE8azwdxrIhUDWmQvHvubAN31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMt
NjIxMGVhYjA1YjcwLzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMtNjIxMGVhYjA1Yjcw
LzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbrgMZwF
zf1OrQHmY/r1Tw4GjiTBatz1e6A0CGPkKYTK/PTeSF8T8mQ4drLgLwPjdD9rY4rz
fL7VcbinIWX+44GMu/fTW9jB1KmV5kgo7kwLb63wnX6T+jKHx29h04fppUr0qvOI
U3jbsepWdOtLkyfxPL55oU3GTKAXjvQRk0Zt2AOyJpPTM6opvfenCN9/XQeLLJWz
OtQzO2maEidb7JOSrsLhySwRFEWsY5tu/Hv0XtH5MrF+TNF2iBZ50bB3GajHt6iN
yDvA+aSUFdifMEqfpRTg60J3wgT5TzDmpt0eD4yFok1LWa903IS9vuNleQyrO4GO
mDytP/w+WXLWfw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 07:54:37 2026 by rpki-client