Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: pYe/5KYNb+rtlVz1y0pPPx/HvT6TLH3NoTsMscGOXho=
Subject key identifier: A8:CC:26:25:2F:25:2A:23:A7:CD:EC:86:E7:13:BF:5B:B1:C6:90:33
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 01A1DD27450FD6D618E449B848A3B27CE466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 07AF
Signing time: Sun 15 Nov 2026 03:01:40 +0000
Manifest this update: Sun 15 Nov 2026 03:01:40 +0000
Manifest next update: Mon 16 Nov 2026 03:01:40 +0000
Files and hashes: 1: AgJDjffcx13iFGg7O-6BTWa5Mi8.roa (hash: F0nKF0WSY8oAZJYmoA/vzmlCpRXcrLqKk16YPUwPz6o=)
2: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: dMWoNa8irbw+129F6743xht2qv1aLHnvBS71wXopCq4=)
3: hiaLRXvZEWJHbVSfrWH639IpyGY.asa (hash: NEonAO1XE9fHfE9rdEUMWD5j05luJAvYlzVQQMAchnY=)
4: iOIsGM1prEuZUKH2cM7CUq3g5Is.roa (hash: igmbQzjudKovyj6MAKOgXMXBnsmnwoI5fJogJVcvX14=)
5: lINPWdgeXogkwbJ0wzJ7U2mJtc0.roa (hash: gV2ck8EeAb/tXZS6FJRF8q/lSS14/k4pPK+HFVJcJ50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:45:0f:d6:d6:18:e4:49:b8:48:a3:b2:7c:e4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Nov 15 03:01:40 2026 GMT
Not After : Nov 16 03:01:40 2026 GMT
Subject: CN=a8cc26252f252a23a7cdec86e713bf5bb1c69033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:29:5a:83:de:01:fe:fe:d8:59:db:72:a4:
19:8d:19:6e:37:13:fd:8a:d5:53:c1:fa:2b:38:2e:
61:e7:71:ed:69:38:4a:31:a5:dc:11:8b:72:ce:dd:
da:18:26:4a:ff:6e:d6:f3:bd:ef:93:2c:a8:a3:c5:
bc:c9:15:ed:72:3f:77:87:aa:ea:8c:08:14:31:ea:
c0:44:c4:4f:7d:0e:c8:1f:d1:23:b2:32:da:7f:8f:
e5:31:f3:69:cd:b8:29:79:d7:8c:a9:13:e9:99:1e:
e7:ec:30:ca:2a:c4:ea:12:06:ed:74:ab:db:33:de:
c7:a6:1b:6e:e7:80:f7:f7:16:58:b0:e6:1b:47:e8:
9d:5d:bb:e1:f2:be:a8:39:e4:ec:e9:66:cc:88:80:
0b:9c:e1:3e:de:30:9c:c9:1f:ea:15:ed:5b:09:2f:
7f:0c:05:e5:3a:a7:4f:32:7e:4b:d0:fc:4e:04:18:
59:81:e7:68:ff:92:1a:e2:5f:a4:f2:de:26:75:24:
98:ae:df:a5:4e:bd:a9:04:3c:02:d8:ae:a2:86:8c:
9d:4f:d1:3e:11:76:ae:9f:91:57:5c:ec:92:11:fc:
21:37:b9:b8:eb:72:7b:be:df:36:e8:01:32:ac:d4:
f3:0f:39:b8:e3:dd:de:3a:f1:ab:61:9b:f1:64:51:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CC:26:25:2F:25:2A:23:A7:CD:EC:86:E7:13:BF:5B:B1:C6:90:33
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2c:b7:0e:d3:6c:3a:35:64:fb:27:70:92:7a:d8:77:2a:f6:
90:7f:16:7d:0f:6c:85:5b:f2:6f:e5:bc:df:f4:3f:1b:5e:de:
63:b9:1c:e0:00:60:e4:86:77:65:b4:cc:64:c0:2f:dd:43:03:
37:71:22:f9:1f:61:a9:bd:07:74:9f:b8:f6:2c:5a:97:09:57:
d4:22:5b:ee:73:d5:d0:5c:af:8f:98:25:09:0b:9e:ee:27:24:
f2:c9:95:c1:46:70:f1:5c:63:21:df:42:bf:75:d2:ad:ab:d5:
12:87:91:bc:79:98:1c:f3:0b:67:6f:db:72:a8:99:4c:4f:a2:
ae:6a:14:a8:d0:c0:6c:3c:80:55:1d:05:0d:0c:48:eb:60:7e:
6b:7d:5b:77:e6:67:1b:59:8c:11:0d:9f:4c:8e:6f:8a:aa:78:
1a:eb:f3:ae:8c:c7:55:fd:4e:a8:d0:aa:a0:cb:5d:fa:aa:bf:
46:f5:95:43:ab:33:72:ca:9f:3c:ee:d7:b5:97:17:ea:a7:51:
b6:73:68:bb:32:ee:bf:4d:fc:94:2c:c1:14:21:32:11:58:49:
c9:71:d1:29:28:74:13:ed:13:7e:bd:5d:dd:88:de:93:ca:d3:
7c:94:a0:50:de:38:f7:2d:b7:81:6f:d8:c9:0a:39:63:70:b9:
bf:1d:f9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:46:50 2026 by rpki-client