Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: XXxanj1nLlgN8QnOZDjI4GiYqzz5PwazMPMBgXLrapQ=
Subject key identifier: 95:68:BF:D7:17:54:02:80:64:42:C1:6E:85:38:37:42:C7:8C:C2:4F
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 01A15E55C6DD5E6DC28DEFF260116411C13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0E18
Signing time: Wed 21 Oct 2026 12:00:42 +0000
Manifest this update: Wed 21 Oct 2026 12:00:42 +0000
Manifest next update: Thu 22 Oct 2026 12:00:42 +0000
Files and hashes: 1: 16Wly6tf9ZCRlJ1eLRRr8Q4xzIw.roa (hash: Kp7oiL6STzpmE+EAdvQJo2k6GaSB6dYQxfvWJmxfMsM=)
2: ADqOf27SLPwwto-ocjpqEJw2IBQ.roa (hash: 02wXRVyX5qgq4n1cyEf0Py4Rh/FGrWnnS89Dg9FX4vA=)
3: K5ostPCTlzhRxaxo847usrKR-CI.roa (hash: NmMLX9d9BtFVnwDmZOqCtfLXGibrWNZHHPi91g//AAQ=)
4: LKCZjRnqOfP4c6EPSr981Q8ufBE.roa (hash: AHOlzbkAOwQMFN9o3abQlagG3JiaFNtgoH0PdamFOSU=)
5: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: xQrwYADfNpwQtrjkn/icPVk8yc2xa2p8Vq9o8J3n3Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:55:c6:dd:5e:6d:c2:8d:ef:f2:60:11:64:11:c1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Oct 21 12:00:42 2026 GMT
Not After : Oct 22 12:00:42 2026 GMT
Subject: CN=9568bfd7175402806442c16e85383742c78cc24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:31:62:e2:5d:0e:73:c7:09:fd:46:13:c2:
5e:3f:2d:2d:fc:57:5a:43:6b:c6:26:2a:5a:23:55:
9c:0c:1a:36:c4:ae:13:d5:cd:d3:41:73:3a:49:b5:
27:cd:ab:ad:84:3c:c0:7a:94:1d:4d:ad:74:78:ec:
8d:e3:fe:66:d7:0b:a4:5b:6b:23:65:2e:96:2a:ff:
14:dc:5a:2d:14:2e:52:c3:34:98:62:72:6d:0d:28:
b3:ad:59:46:70:00:0c:64:59:42:b7:4d:24:c5:fc:
84:0c:0e:61:92:a7:1b:ee:d9:d4:50:f9:ca:80:7d:
47:66:e2:7e:d1:92:ad:53:7a:ba:67:2a:0e:ec:8a:
62:ae:cb:0b:23:43:a3:3e:fc:cd:b9:76:eb:e4:bd:
e3:93:38:50:74:b5:8f:f8:d7:b9:9b:03:4e:d6:8b:
25:75:44:16:d6:0f:e4:eb:35:31:41:62:14:46:c2:
5e:31:7b:8b:08:41:f7:d8:b6:3f:50:27:d3:3d:56:
a1:dd:66:05:02:32:bf:7c:73:1a:39:0d:2d:ac:30:
99:cc:a9:56:ca:50:7e:2d:3b:7f:38:c2:4e:4e:50:
a6:d0:c0:5e:45:09:79:2e:40:d6:c1:f7:b8:f4:dd:
2b:de:a8:19:94:6a:e8:ac:1f:15:b9:c4:ff:3c:4d:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:68:BF:D7:17:54:02:80:64:42:C1:6E:85:38:37:42:C7:8C:C2:4F
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:32:c2:df:4f:86:90:c4:5b:af:67:f0:ce:97:d1:79:86:f1:
e0:5e:a5:6c:24:78:e0:a3:1a:c1:6f:a8:93:1e:dd:ec:f7:e8:
e9:50:80:0f:64:ea:db:3d:59:56:41:85:94:33:c0:a8:49:43:
6a:91:2f:40:0b:70:0c:74:54:44:02:d0:45:1b:18:81:dd:3a:
a3:9e:ef:6c:fb:d6:fe:6e:5e:28:a4:00:f3:4d:7d:b1:37:56:
a9:88:84:88:47:9c:67:a2:88:8c:72:cb:2c:5a:d6:dd:05:96:
2e:eb:86:c9:5b:56:44:7c:15:ce:7c:b4:59:8d:cf:d7:1f:2b:
a3:f9:6b:e5:96:c5:04:3f:53:11:6f:55:14:b1:b3:1b:b5:7a:
99:36:ac:19:c1:70:47:f6:06:5d:4c:5f:8b:14:55:1d:e9:38:
04:fd:7b:a0:08:f7:c1:93:cc:2e:09:f8:6a:31:f1:02:5b:a2:
89:34:85:d5:ee:82:74:f0:31:36:fc:92:ec:c8:f5:ab:c4:05:
91:07:d4:69:b1:66:c7:9b:33:64:e9:76:be:14:b3:f7:3d:9a:
2c:44:64:e6:b7:bd:9f:ce:1a:a7:75:44:09:25:e7:71:f3:5e:
be:0d:b4:88:53:eb:bc:39:a4:be:f8:5d:29:7c:ea:24:3c:ec:
33:86:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:47:58 2026 by rpki-client