Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
File: OxJehmsjfJZ06em3qavRi1fXHxA.mft (raw, json)
Hash identifier: SRL2FgDJS//wtM7wypQulSxZLiNybbZGX1an2pY1JVY=
Subject key identifier: 04:DD:44:56:8D:DA:38:23:F8:0A:BE:2E:BA:9B:7F:AD:70:17:71:0A
Authority key identifier: 3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
Certificate issuer: /CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Certificate serial: 01A0E8C10610BBD07FD6A7ED7428FBF6C421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 16:02:39 +0000
Manifest this update: Mon 28 Sep 2026 16:02:39 +0000
Manifest next update: Tue 29 Sep 2026 16:02:39 +0000
Files and hashes: 1: OxJehmsjfJZ06em3qavRi1fXHxA.crl (hash: Y4tAwVYfm1DgwwUtA5E/lOCWQnCvCrYmMtip2XRJsNs=)
2: Xhri0AVup-iOcfJupA4s7w3cpYc.asa (hash: 4eaUl5vtgL4q0oqF8vNtbDWxyFZPR38UGBwc1PJc8Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:06:10:bb:d0:7f:d6:a7:ed:74:28:fb:f6:c4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Validity
Not Before: Sep 28 16:02:39 2026 GMT
Not After : Sep 29 16:02:39 2026 GMT
Subject: CN=04dd44568dda3823f80abe2eba9b7fad7017710a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:b6:a7:8a:ea:e9:40:a4:bf:3a:79:ea:02:
54:3d:df:84:5d:3b:c2:e8:1c:c2:b1:c5:3c:36:21:
72:8d:89:4d:2d:ce:08:24:73:c0:d6:de:40:b2:d6:
06:24:f1:d2:0a:3c:e5:58:ec:f3:d0:5e:ba:aa:1c:
60:b0:ab:eb:24:4d:6b:97:05:d0:75:85:71:f8:cd:
f7:d3:a4:5c:aa:1f:db:85:58:25:c5:1b:85:01:24:
aa:a0:db:03:80:ab:a7:f8:9a:b7:1d:e5:d5:6a:06:
f9:5d:b0:69:1a:d8:b3:c8:ec:52:93:7d:71:d7:79:
39:92:d2:0a:96:96:f4:5a:8c:05:3f:b7:e9:03:91:
83:38:52:3a:53:cd:0a:56:f8:08:c7:d0:d5:52:1c:
97:9d:a6:ee:c5:ba:fd:1d:d0:82:81:15:5e:d2:e7:
18:0f:bd:98:b8:37:1b:7b:ae:c3:90:35:0a:13:16:
da:0c:51:e3:1a:a5:6c:4d:15:a0:99:ff:d4:48:92:
08:c3:45:a4:3b:fd:10:5f:b6:0a:17:ff:1e:a0:f2:
6d:e1:36:a2:21:0e:d7:2c:81:6e:75:80:7f:d0:59:
eb:cb:a6:ba:ab:94:c9:94:e1:fb:11:39:9f:8d:73:
ec:39:0a:a0:2b:dd:e8:de:12:1c:99:ad:3b:7d:a8:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DD:44:56:8D:DA:38:23:F8:0A:BE:2E:BA:9B:7F:AD:70:17:71:0A
X509v3 Authority Key Identifier:
keyid:3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8f:41:06:b0:81:1d:15:28:69:1c:57:85:b5:4e:fb:b8:bc:
7d:ea:2b:f2:a8:93:dd:ef:c7:be:5e:41:89:27:9b:88:92:b2:
22:27:50:d0:b8:c4:52:07:ae:d4:cc:94:69:b9:aa:1d:21:94:
ef:74:4c:fe:67:b6:5e:59:3e:36:60:31:bd:51:27:ca:d1:8f:
82:1c:66:d0:ee:ac:be:9d:98:de:09:36:9f:12:88:90:18:6e:
b1:7f:59:cb:67:38:dd:df:d3:18:c0:6e:37:4f:bd:35:2f:e2:
3f:b3:1d:fa:68:3e:a2:20:11:f6:e1:26:42:43:65:d7:eb:b3:
4f:ff:ae:2e:4f:b6:60:18:04:85:0c:cf:a3:c3:2d:e9:76:a1:
b3:8b:28:e5:ea:9a:c4:57:79:3f:10:92:a4:29:cd:e7:96:3c:
8e:13:49:06:7b:b2:a8:94:2c:f2:74:ea:49:d9:09:bd:85:d0:
61:48:51:68:a4:64:5d:6f:e7:2b:70:40:87:1c:a8:27:f0:4a:
f7:5e:d8:1d:3d:e9:0a:9c:8d:40:78:d4:28:4b:b5:ef:7f:84:
af:0e:a3:a6:c5:9a:3e:33:e4:a9:7f:37:e2:da:66:ab:b4:72:
4c:58:24:bb:b2:fe:29:75:f3:be:d1:bc:24:2f:30:0f:52:1c:
28:9f:70:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDowQYQu9B/1qftdCj79sQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMTI1ZTg2NmIyMzdjOTY3NGU5ZTliN2E5YWJkMThiNTdk
NzFmMTAwHhcNMjYwOTI4MTYwMjM5WhcNMjYwOTI5MTYwMjM5WjAzMTEwLwYDVQQD
EygwNGRkNDQ1NjhkZGEzODIzZjgwYWJlMmViYTliN2ZhZDcwMTc3MTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXi2p4rq6UCkvzp56gJUPd+EXTvC
6BzCscU8NiFyjYlNLc4IJHPA1t5AstYGJPHSCjzlWOzz0F66qhxgsKvrJE1rlwXQ
dYVx+M3306Rcqh/bhVglxRuFASSqoNsDgKun+Jq3HeXVagb5XbBpGtizyOxSk31x
13k5ktIKlpb0WowFP7fpA5GDOFI6U80KVvgIx9DVUhyXnabuxbr9HdCCgRVe0ucY
D72YuDcbe67DkDUKExbaDFHjGqVsTRWgmf/USJIIw0WkO/0QX7YKF/8eoPJt4Tai
IQ7XLIFudYB/0Fnry6a6q5TJlOH7ETmfjXPsOQqgK93o3hIcma07fajIPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATdRFaN2jgj+Aq+Lrqbf61wF3EKMB8GA1UdIwQY
MBaAFDsSXoZrI3yWdOnpt6mr0YtX1x8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3hKZWhtc2pmSlowNmVtM3FhdlJpMWZYSHhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80ZmYzZWYtOTcwZC00MWYxLTg0YWIt
NTRiZWU2YWE1N2ViLzEvT3hKZWhtc2pmSlowNmVtM3FhdlJpMWZYSHhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80ZmYzZWYtOTcwZC00MWYxLTg0YWItNTRiZWU2YWE1N2Vi
LzEvT3hKZWhtc2pmSlowNmVtM3FhdlJpMWZYSHhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGY9BBrCB
HRUoaRxXhbVO+7i8feor8qiT3e/Hvl5BiSebiJKyIidQ0LjEUgeu1MyUabmqHSGU
73RM/me2Xlk+NmAxvVEnytGPghxm0O6svp2Y3gk2nxKIkBhusX9Zy2c43d/TGMBu
N0+9NS/iP7Md+mg+oiAR9uEmQkNl1+uzT/+uLk+2YBgEhQzPo8Mt6Xahs4so5eqa
xFd5PxCSpCnN55Y8jhNJBnuyqJQs8nTqSdkJvYXQYUhRaKRkXW/nK3BAhxyoJ/BK
917YHT3pCpyNQHjUKEu173+Erw6jpsWaPjPkqX834tpmq7RyTFgku7L+KXXzvtG8
JC8wD1IcKJ9wOg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:49 2026 by rpki-client