Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: tXU1oLrvMoREq9o8mS+c1oEXTRY6kq4hBN7qXxbHvMY=
Subject key identifier: C8:B6:4F:7D:CD:53:55:82:5B:E1:69:BD:1C:8D:1F:4D:37:18:5D:86
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 01A0E8F6FCE0207273356637C6BD1B2F89E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 072F
Signing time: Mon 28 Sep 2026 17:01:35 +0000
Manifest this update: Mon 28 Sep 2026 17:01:35 +0000
Manifest next update: Tue 29 Sep 2026 17:01:35 +0000
Files and hashes: 1: AgJDjffcx13iFGg7O-6BTWa5Mi8.roa (hash: F0nKF0WSY8oAZJYmoA/vzmlCpRXcrLqKk16YPUwPz6o=)
2: CUqZc8hec0Ms-egOcTLYoCv3kIM.roa (hash: ZlTiAUnMG4BkW/1TEjOoZRHb8X1Pe28FH9YpKcWqV/8=)
3: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: 0dwdxbmFtolHhweQFUPb7gAEy2WH2+oZHAtwVikYm+4=)
4: hiaLRXvZEWJHbVSfrWH639IpyGY.asa (hash: NEonAO1XE9fHfE9rdEUMWD5j05luJAvYlzVQQMAchnY=)
5: xiMdBnBAVbzMONM7bWyZSTHXags.roa (hash: R9sPzPBlp0RJe+m5WxmViRNBW2hNOa0kbVaZ9zt/4VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:fc:e0:20:72:73:35:66:37:c6:bd:1b:2f:89:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Sep 28 17:01:35 2026 GMT
Not After : Sep 29 17:01:35 2026 GMT
Subject: CN=c8b64f7dcd5355825be169bd1c8d1f4d37185d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:c0:53:1e:c4:f6:5d:40:ab:96:35:c3:0e:
88:c7:92:5a:df:7e:88:74:47:94:0d:eb:c5:3e:19:
98:71:a7:1e:b3:71:b1:fe:c6:88:da:c6:4b:45:dc:
2d:76:4f:2f:dd:09:77:78:4a:e5:52:df:22:2a:8e:
01:b8:df:98:16:4b:d6:88:56:57:ec:d0:d9:17:a3:
28:bc:ef:07:e3:9c:16:94:ee:29:89:38:85:d7:4d:
61:40:bd:77:00:70:03:1c:3b:fd:62:e9:9a:40:8f:
16:ad:65:91:08:45:a0:30:94:2e:86:40:3f:f1:d1:
c5:48:1f:43:88:76:45:b7:2b:71:42:c5:d7:67:29:
0b:4a:1b:e5:87:f8:6d:ee:59:62:db:ea:e2:7c:90:
b9:b6:e0:ba:9e:50:f4:83:22:7f:73:bf:62:e6:f5:
ec:1b:54:0e:9a:81:2d:e2:53:14:98:88:1e:4a:83:
14:53:05:90:a7:eb:85:32:0e:f1:c7:85:ff:f4:19:
d9:bf:19:83:0a:34:20:50:30:76:91:37:40:64:45:
06:a3:60:08:ce:b1:c8:f5:62:5b:99:78:dd:40:36:
ff:00:71:4c:5d:42:33:70:cd:0c:23:17:9e:0b:de:
f7:79:bf:8f:f1:e7:61:86:31:df:98:01:4d:00:82:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B6:4F:7D:CD:53:55:82:5B:E1:69:BD:1C:8D:1F:4D:37:18:5D:86
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:09:c1:47:18:aa:f3:b5:78:4e:88:ec:c1:97:fa:c2:95:a9:
43:a9:73:ad:3f:6c:22:8c:3c:1e:7f:cf:47:65:82:b5:e7:25:
67:6a:8c:89:e7:df:33:21:a9:19:2f:07:5f:c0:87:bd:27:5d:
4b:d7:d1:67:6d:de:bf:12:24:21:49:a3:65:4a:7e:bb:06:bf:
18:10:34:78:e8:37:da:22:ab:cd:e4:92:37:95:2a:7e:15:54:
69:14:36:08:14:eb:20:74:83:e3:79:33:cf:38:2c:c1:41:cb:
a6:1f:2b:25:f5:bf:f9:07:13:80:02:38:4b:f0:f2:6b:35:38:
95:0f:23:96:c1:f9:dc:a1:2f:7d:81:e0:9a:d3:31:d4:68:59:
65:db:77:0b:89:48:29:0c:78:ad:68:88:ca:cb:1d:a3:a2:10:
ef:35:98:bc:f1:21:81:6c:cf:33:e4:8e:fe:7a:a1:c0:d5:ba:
bc:4b:30:c5:4e:c2:a6:9e:a6:9d:f5:87:63:de:85:e7:a9:4d:
68:19:fa:e2:f3:26:da:ca:3e:94:43:23:08:e6:69:19:a0:24:
8b:89:0b:cd:de:35:4f:fc:f6:a1:37:08:8f:a5:80:1e:99:c4:
5b:3e:81:93:24:84:22:3b:2c:a0:aa:d0:6e:c9:f8:79:13:98:
70:08:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:30:18 2026 by rpki-client