Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: bFghgFHH812UsOwLLAFmJfCUuqu43x3JoG7M96rj6ao=
Subject key identifier: 0D:00:37:CF:C1:16:AC:39:4D:3C:DF:2C:46:CD:B3:96:51:5D:C7:29
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 01A1480566556D8CB0739E4E9B84CF30EA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 0BC6
Signing time: Sat 17 Oct 2026 04:01:15 +0000
Manifest this update: Sat 17 Oct 2026 04:01:15 +0000
Manifest next update: Sun 18 Oct 2026 04:01:15 +0000
Files and hashes: 1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: dRC4LfXooezKtyy4VYuMxaUiktOBAnBEHP5pyurrgEQ=)
2: futCv-J21MxYYna1NlT0XMLEUxQ.roa (hash: Nuw/WTHENdY0hVuqEP9gOdFLaQ350WDyvFQ78Xtrdks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:05:66:55:6d:8c:b0:73:9e:4e:9b:84:cf:30:ea:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Oct 17 04:01:15 2026 GMT
Not After : Oct 18 04:01:15 2026 GMT
Subject: CN=0d0037cfc116ac394d3cdf2c46cdb396515dc729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:24:e5:ee:8d:b4:4a:d4:c1:f6:f7:57:1d:
44:cb:ca:6c:4e:4b:07:33:2e:e0:63:ce:1d:22:92:
7e:62:13:80:0d:f4:cf:29:7e:d7:4c:81:2f:9c:12:
36:07:2d:a5:7d:0a:81:e0:df:e9:83:8a:76:37:ea:
85:6a:f3:e6:28:3c:f6:a0:c2:9a:d9:ad:9f:18:53:
9e:d0:0c:a3:4a:b6:86:c2:a6:7e:97:67:c7:a7:3f:
00:3e:3e:ec:5e:fc:86:c4:4a:af:f9:c6:b9:41:8f:
4b:ea:4b:2b:f5:ab:09:29:2b:9b:e8:97:ba:f0:cf:
13:c7:ec:ba:12:18:10:58:81:82:77:4d:e3:72:01:
d4:12:28:61:a5:6a:ba:01:08:9a:f3:19:ab:f7:c1:
fc:fc:14:a4:3c:b6:82:57:96:f8:a5:87:30:86:29:
df:21:dc:b7:50:53:96:34:86:5d:17:11:2e:74:fc:
d2:6d:70:28:ec:1a:f7:95:bc:b0:cd:b2:e4:1a:f3:
49:8b:ec:a0:83:09:19:a9:ee:04:ad:d9:69:bf:64:
cf:7e:78:99:cb:e1:7c:a0:7a:73:73:c3:2f:96:99:
3f:e2:c2:80:89:cf:fe:cc:e6:ac:e9:0d:7d:71:27:
73:06:7d:68:5c:4a:c6:8b:20:3b:6e:62:a3:f2:c7:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:00:37:CF:C1:16:AC:39:4D:3C:DF:2C:46:CD:B3:96:51:5D:C7:29
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3e:04:9b:c6:86:1d:0c:47:33:41:a8:2a:66:78:26:d2:3f:
68:84:b8:8e:fb:97:92:cb:b4:f8:85:9e:4b:6d:96:d7:06:dc:
dd:3c:89:46:33:ac:6e:1a:17:7c:a2:3d:b2:44:fa:cd:4f:00:
7b:f5:e6:7b:2d:eb:d1:da:68:dd:16:b3:a3:7f:61:64:b7:e6:
93:9c:c0:dc:41:f7:43:62:a4:62:2c:a1:ce:41:d3:0a:5c:2d:
97:73:b8:6c:8d:90:81:f4:1a:8f:f9:82:05:89:1b:9d:ad:21:
f7:14:50:ea:a1:d7:ec:d0:a6:97:9c:de:8c:97:e7:a0:0e:51:
d9:5f:c7:53:46:34:53:cd:16:58:0e:d0:21:9d:91:7c:32:f0:
85:b5:d2:18:2c:77:69:90:6d:c8:82:f8:eb:97:33:fc:02:ac:
1c:06:c3:9b:d4:38:56:58:8f:a6:1a:16:6e:1d:c8:75:a1:5c:
59:7c:23:18:8f:29:f2:0c:2e:95:00:30:53:26:8e:7b:13:4c:
47:7f:d8:5c:a7:fa:50:17:be:0c:64:f7:35:3a:50:c9:35:61:
6e:f1:94:f8:98:65:b0:f9:77:a2:ad:c9:04:90:28:f0:fa:60:
1e:ae:72:b4:cc:b6:a2:b4:a3:4f:ad:66:d8:38:04:74:9d:b4:
a4:a4:23:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:26:51 2026 by rpki-client