Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: 6aKtyveimYvSmNqAWFa+HVARRXWv3hqLH5/Kww11T4A=
Subject key identifier: 87:5A:D6:FE:40:54:35:F1:C0:38:B4:5B:23:EB:00:3F:01:71:32:08
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 01A18A89682709F55CA592B365166D5F4FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 1ACE
Signing time: Fri 30 Oct 2026 02:00:23 +0000
Manifest this update: Fri 30 Oct 2026 02:00:23 +0000
Manifest next update: Sat 31 Oct 2026 02:00:23 +0000
Files and hashes: 1: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: piMfJk6zJTZii45SabfcegWU0MC9oKpiyw0P0aFZ2D4=)
2: XY5E_RelyGQ_x471R3yDmTVoDTk.roa (hash: eROWL67g5W2cGW9pnAdECfpL0HCLybLp8h6TDlEvGJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:89:68:27:09:f5:5c:a5:92:b3:65:16:6d:5f:4f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Oct 30 02:00:23 2026 GMT
Not After : Oct 31 02:00:23 2026 GMT
Subject: CN=875ad6fe405435f1c038b45b23eb003f01713208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:6d:45:fd:99:99:d3:31:b2:91:e6:1f:d9:
b5:1f:b9:69:58:01:25:0a:59:20:8e:da:4a:76:77:
36:4b:dc:cb:92:88:b5:2a:52:fa:5c:14:7a:91:cc:
70:58:20:1b:f7:ac:65:6a:ea:5d:f0:7e:ba:f8:3b:
e9:5a:75:3f:f7:f3:37:15:94:8d:9b:78:65:c3:5a:
fa:3f:ae:30:9f:90:88:8f:3e:e8:cc:45:3d:7e:36:
45:85:c9:a3:a1:83:c9:03:a9:be:b4:b9:d8:cc:c5:
e7:e4:09:a7:e1:2f:de:e6:fe:70:ae:4b:df:6a:7a:
73:05:05:c2:e7:09:3b:ee:99:a3:4e:d0:ff:23:c0:
2e:d4:c9:98:1f:dc:88:37:9d:81:75:42:18:29:af:
00:1b:bf:45:c2:65:bc:fc:56:72:9e:c7:5a:fc:3b:
4d:cc:41:1b:0a:96:df:12:3f:56:68:76:17:be:7b:
5a:67:2e:2b:ea:7c:28:82:c1:13:c5:66:2d:b7:76:
3c:36:22:9c:d3:be:38:52:8a:01:9c:7c:99:69:11:
13:86:d4:b9:f9:9f:68:57:95:a9:77:ad:6f:31:23:
a5:20:93:27:a0:94:86:e1:c9:76:a0:77:f9:e6:b4:
f1:b1:66:05:9f:21:e3:45:29:e5:c6:6b:97:46:34:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5A:D6:FE:40:54:35:F1:C0:38:B4:5B:23:EB:00:3F:01:71:32:08
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:54:f9:4c:ee:59:62:e4:25:86:77:33:b6:e1:25:f6:15:73:
65:23:91:9f:0e:0e:a2:b0:9d:e2:6d:ca:f0:26:0e:28:54:86:
e1:0b:53:5b:88:72:8a:8d:96:72:55:29:1e:17:a0:14:66:a9:
b8:32:93:6f:b8:5e:66:97:d9:2f:ff:1d:f1:47:fc:be:6b:c9:
23:f4:2b:3e:f5:6f:7c:af:61:b5:4c:be:96:80:0a:aa:2f:37:
a1:f8:f2:8c:35:84:c4:dc:54:69:1f:f8:21:72:1c:1f:ce:92:
1c:6c:bb:7c:63:60:37:28:26:ac:f6:0b:e2:f8:9f:88:e4:c9:
ad:c5:5c:d1:14:31:1b:d6:70:4c:d0:50:ee:f6:d9:4a:af:94:
f6:2b:f6:95:6d:83:81:ac:bb:8e:2a:be:4a:86:69:11:a4:85:
96:fa:c3:a7:17:d1:3d:a6:62:03:16:69:08:2c:c4:38:c7:ae:
45:5c:10:a4:7d:b4:09:ad:3d:7a:dd:86:83:71:45:04:82:07:
87:a7:a7:a0:1c:65:9b:c3:06:78:f9:7d:4c:44:c4:29:67:ff:
2e:5d:75:4a:1f:67:ad:da:e3:5a:ec:27:a6:3e:40:1d:86:1f:
a6:79:34:af:f8:75:31:e6:e4:7b:6e:22:e0:6d:eb:78:b4:90:
14:bf:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:29:27 2026 by rpki-client