Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
File: OxJehmsjfJZ06em3qavRi1fXHxA.mft (raw, json)
Hash identifier: ehujGJrlGaEHMPpg8UyTn2BkkuaLbFMNzyFbMVuDrmM=
Subject key identifier: 3B:B4:E8:08:B0:BC:E0:46:B2:66:77:E9:0A:8F:83:B4:BF:5A:B4:35
Authority key identifier: 3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
Certificate issuer: /CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Certificate serial: 019F4BE736CFEBFEBAF0CAFC07DB76BBEFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
Manifest number: 1C
Signing time: Fri 10 Jul 2026 12:01:11 +0000
Manifest this update: Fri 10 Jul 2026 12:01:11 +0000
Manifest next update: Sat 11 Jul 2026 12:01:11 +0000
Files and hashes: 1: OxJehmsjfJZ06em3qavRi1fXHxA.crl (hash: KAAiAFvVJs8k6IlMktIdMVenJDFtpag2TrEzCjj3JPM=)
2: bZgb_LBQZPKkxWDgNj1Z_zHcwQE.asa (hash: m9UVTG9+c2/JgO4VOpvbJWRqRhAZPe4u/yqlQK0GFh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:e7:36:cf:eb:fe:ba:f0:ca:fc:07:db:76:bb:ef:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Validity
Not Before: Jul 10 12:01:11 2026 GMT
Not After : Jul 11 12:01:11 2026 GMT
Subject: CN=3bb4e808b0bce046b26677e90a8f83b4bf5ab435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:ab:b0:76:06:e3:29:09:48:21:03:c6:6a:
0e:99:b6:8a:96:95:91:95:25:f3:a3:41:0c:36:23:
a6:34:86:2a:e0:df:90:8d:a4:38:c9:35:1c:37:96:
37:75:47:38:00:de:09:35:cf:6c:09:00:c6:a0:11:
3f:3d:22:c5:e3:04:2c:04:f3:01:cf:7a:52:49:44:
3e:9e:65:9e:0b:14:bc:ad:c4:fa:e9:c8:ac:67:91:
bb:3f:8c:d1:1b:3d:a7:22:a0:9f:d3:4e:d0:c4:a0:
7c:80:ae:08:b1:c0:b2:47:0a:08:52:6f:86:6c:ad:
a8:e9:aa:21:f2:94:db:3a:07:76:df:3f:ad:54:45:
6b:06:8d:6b:fa:68:a0:97:0a:b8:3d:5b:87:27:e6:
fd:ea:f9:88:ef:bc:64:21:1a:94:2d:b9:b4:1e:82:
e1:ba:76:07:72:77:e1:ba:47:cc:70:82:e3:9a:5d:
93:59:3b:77:bd:da:f3:e6:48:15:77:58:0b:61:9c:
0e:be:0e:92:6a:d9:dc:bd:ef:2d:16:da:d9:e8:5f:
89:fd:17:6a:26:0f:e7:e6:75:22:c9:d4:00:7f:5e:
11:81:19:07:f2:33:e9:2e:49:41:d3:af:eb:49:67:
d6:9d:ca:a3:20:22:02:cf:2c:fc:79:fa:2c:27:e9:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B4:E8:08:B0:BC:E0:46:B2:66:77:E9:0A:8F:83:B4:BF:5A:B4:35
X509v3 Authority Key Identifier:
keyid:3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b8:51:04:04:56:fe:6e:4f:6b:a4:5e:e7:e4:3a:ac:0d:26:
fe:d7:fc:6c:8b:17:80:51:8f:7b:af:50:df:d9:dc:a7:c9:b8:
a1:5d:32:16:fc:da:1a:92:45:31:e3:54:0e:84:aa:ea:be:10:
73:db:a0:6f:c6:67:6d:fe:30:7d:1d:2f:9c:e1:70:79:15:35:
99:cf:e5:61:6c:36:cb:90:39:bb:50:e9:c4:d0:b7:4f:d9:00:
1a:25:af:7b:fb:4a:a5:a8:f6:5a:80:f3:6b:b6:0e:fc:36:34:
03:a5:30:ac:89:c3:03:8d:e6:be:dd:ad:e3:b8:21:01:9e:07:
77:1f:d4:86:b0:22:53:a9:02:79:86:eb:b2:39:55:a9:01:d0:
d5:4e:31:7f:c4:cb:f0:16:80:a4:d5:b1:d4:5b:48:fa:ee:3c:
b4:1a:0a:2f:cb:51:b8:5f:16:8b:b4:bf:4c:cf:a8:57:9d:2a:
df:87:7e:40:04:9b:cf:3f:10:f5:74:53:b6:02:e6:02:66:dc:
d9:23:39:5b:af:95:1e:e3:8f:f1:a1:d3:b1:8e:87:de:f1:a7:
55:10:0f:cc:82:5c:6f:54:35:0d:6f:fa:0e:7a:29:1f:bc:76:
7a:8b:70:e0:22:f6:2d:4f:17:9a:2a:b4:57:1a:3b:d0:80:b6:
75:35:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:34:37 2026 by rpki-client