Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: 72XU/W97ZMrCKDe3XyPyxe5mtOXqPQV8Ul7Zj0+X98k=
Subject key identifier: 96:6C:D5:E9:97:E7:9D:D1:C3:8F:84:E3:9E:C3:AA:A7:4A:79:5B:B1
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 01A06C827EB80CD425DD21AFA0E34AB75358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0D97
Signing time: Fri 04 Sep 2026 13:01:26 +0000
Manifest this update: Fri 04 Sep 2026 13:01:26 +0000
Manifest next update: Sat 05 Sep 2026 13:01:26 +0000
Files and hashes: 1: 16Wly6tf9ZCRlJ1eLRRr8Q4xzIw.roa (hash: Kp7oiL6STzpmE+EAdvQJo2k6GaSB6dYQxfvWJmxfMsM=)
2: JTe6rZdralZYMfrallY8D9l18pI.roa (hash: nAhU2MmHuPgFOMieOuqyCTSQGexpWdZSuDuOtmxyLp0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: Qmqkk+oXJKb132JDSoVn2bNEW878+O0ZeHURdO+0zP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:82:7e:b8:0c:d4:25:dd:21:af:a0:e3:4a:b7:53:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Sep 4 13:01:26 2026 GMT
Not After : Sep 5 13:01:26 2026 GMT
Subject: CN=966cd5e997e79dd1c38f84e39ec3aaa74a795bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:32:f1:d5:16:57:2a:cd:3a:69:dd:ee:0a:
0b:7e:7c:fd:1f:d2:3c:9c:47:62:91:2d:04:0f:77:
a0:9c:54:07:63:3c:a0:16:d9:ab:91:02:4d:ed:d2:
4b:03:2d:29:3c:00:b0:48:43:32:56:72:ed:ec:f3:
93:1b:22:ce:2f:09:e9:5b:0a:f3:24:61:65:e9:79:
75:46:0d:c9:f1:6a:5a:1c:c6:c9:f4:40:46:f9:32:
a3:13:9f:66:00:7f:4b:46:2a:f6:0a:70:0f:a0:16:
a2:4e:e9:f7:f1:a2:67:22:1f:c6:36:1d:2b:f1:9f:
a4:73:aa:a2:64:75:0b:ba:00:3d:31:e5:e0:b6:58:
24:73:98:28:3d:3c:f3:62:9a:b6:7b:2e:c1:08:2a:
80:05:73:aa:41:a0:ec:98:af:33:93:57:78:60:37:
a3:00:fe:51:64:0c:a5:a3:52:10:17:c0:10:87:04:
88:10:61:9e:b9:63:12:48:cf:82:46:75:2d:24:93:
8a:0f:1a:2d:12:69:7a:fd:8a:8e:05:f2:74:8e:82:
ff:cb:b8:4c:af:72:08:e7:4c:e5:a1:8c:04:71:60:
0d:81:7b:5d:2a:44:66:fd:5c:33:4a:a3:5c:61:db:
d8:3c:5c:fa:cb:7b:bb:ff:79:2e:1b:a3:3a:27:fe:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6C:D5:E9:97:E7:9D:D1:C3:8F:84:E3:9E:C3:AA:A7:4A:79:5B:B1
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:65:36:5f:ee:ef:d5:b9:17:e1:3a:e9:db:8e:77:06:12:7b:
d3:62:90:62:ea:f9:ef:c4:d0:87:ae:30:dc:fe:a8:15:5c:80:
b1:25:be:4d:72:f1:e4:a1:31:fd:cf:1e:41:ba:d3:9a:ef:f6:
61:37:a8:d5:ff:a9:c5:5b:40:db:d5:9d:ed:d7:75:11:54:21:
bb:fa:f6:ad:e9:60:d7:f9:2d:18:65:37:2c:97:17:a0:4b:c8:
10:33:13:89:c2:72:f8:79:d6:77:3a:1e:10:ab:bb:80:37:e8:
88:60:66:d9:67:57:99:19:86:36:35:1f:0c:be:d3:7d:01:ad:
29:ef:ed:2e:5b:92:9c:ae:28:c4:5d:7e:1e:c1:b3:78:13:d8:
1a:5a:8e:5b:6d:c0:f1:43:7d:ef:48:aa:b7:7f:a8:40:75:39:
90:c1:3f:21:9a:df:ba:9d:8e:1b:c3:99:28:ba:d5:7d:6a:76:
c1:66:56:ca:3f:90:51:59:39:5c:4c:dd:ed:a8:85:32:53:de:
eb:94:86:9a:ba:93:ab:62:d4:f7:47:d3:7b:96:40:95:18:a9:
c1:f5:b2:5e:54:11:68:5d:49:60:ea:fb:00:b6:6a:5f:4f:ab:
52:24:7c:44:39:00:dd:d9:43:bd:4a:9c:ab:6b:63:33:7b:03:
9e:a3:3f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:56:28 2026 by rpki-client