Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: vKs45q63t5sdvWArE/Ds4C9452ylYfOIt+zmAfKonXc=
Subject key identifier: 17:56:4B:52:8A:EE:68:13:30:FA:07:1D:46:D6:24:7B:7F:B0:D9:13
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 01A17DE211082F8BBDCBF7F70D7EC298CC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 1A56
Signing time: Tue 27 Oct 2026 15:02:09 +0000
Manifest this update: Tue 27 Oct 2026 15:02:09 +0000
Manifest next update: Wed 28 Oct 2026 15:02:09 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: H+FD5GnS6cxVoGrRawXiFzoFNtMb389vIDIqI8doQTE=)
2: TFyydJckZZxmvJ2kyZiqerxMndc.roa (hash: 1M8O0DEiBMTzRovUAkdLb42byd8jCd0k32zelG/wKMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e2:11:08:2f:8b:bd:cb:f7:f7:0d:7e:c2:98:cc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: Oct 27 15:02:09 2026 GMT
Not After : Oct 28 15:02:09 2026 GMT
Subject: CN=17564b528aee681330fa071d46d6247b7fb0d913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:49:b3:8a:7c:23:44:1d:85:c7:52:db:d8:
3d:46:27:ad:ef:cc:8b:b7:71:34:51:61:e3:e5:01:
75:50:e4:e5:81:20:86:1f:b9:01:d6:eb:52:d6:44:
83:c7:9f:38:5b:93:15:3f:c7:b2:ec:1a:e6:6a:bd:
a3:89:7a:0a:d2:b6:e8:b2:7a:4b:32:dc:63:58:f1:
41:ba:b9:18:e6:bc:ff:9a:51:0e:1a:b0:86:f3:8b:
74:92:87:54:28:68:c7:3e:23:1e:0d:bc:dd:4b:79:
d1:24:20:56:29:d9:af:98:51:6b:a9:34:bc:a8:ae:
d5:3b:86:c0:19:c6:08:6f:d0:c6:ee:52:0d:43:bd:
04:cd:5b:a8:dc:06:b5:8b:a1:82:eb:12:cd:0e:fa:
f1:df:ca:16:66:25:4b:f3:43:ed:3a:fc:f7:cf:d1:
b4:c2:5e:33:62:4e:0f:d5:7c:fd:89:3a:e8:b9:5b:
eb:9a:c2:bc:eb:5b:6b:d7:48:f8:e9:7d:f4:d3:6c:
54:60:a9:fe:c3:28:f4:f1:8f:59:4b:77:fb:0f:80:
f3:76:5c:e4:4c:2e:f6:f2:f5:a5:71:36:52:ac:ba:
4b:32:87:30:5d:4e:a3:ad:79:d8:0d:17:11:19:e7:
d4:a5:28:f7:16:ac:fb:14:e8:31:0b:24:a4:aa:d8:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:56:4B:52:8A:EE:68:13:30:FA:07:1D:46:D6:24:7B:7F:B0:D9:13
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:15:a0:c4:a6:a9:ab:d0:98:2b:31:a2:09:b5:2a:25:d9:9d:
6d:dc:8f:dd:c1:9f:1e:5f:8e:06:09:f5:b0:ad:2c:b4:7f:e3:
1f:52:97:86:6d:82:b6:6b:a6:6e:1e:cc:da:82:f1:f9:91:c3:
5a:d9:ca:db:04:45:af:66:28:4c:d6:53:39:f8:71:a5:02:cb:
9b:54:2b:4b:6f:ef:69:04:15:b7:0d:97:dd:4f:ac:31:e8:64:
55:8c:a0:96:af:51:d4:40:d4:0c:3d:95:dc:43:a0:b4:cc:fd:
2e:d1:bf:fe:8b:72:32:7d:ed:03:4d:66:03:87:88:a0:d9:6c:
d1:30:7e:6f:6f:87:b2:2a:82:72:50:41:db:f6:ba:40:d1:1f:
e3:86:17:ae:6f:45:dd:22:01:5c:68:42:69:82:47:6f:4e:2a:
5c:11:af:ce:45:3a:b5:f3:e2:60:0e:df:40:cf:97:be:bc:78:
ec:82:5e:84:fa:df:1c:df:9c:e6:40:a3:dd:80:f0:78:46:50:
72:bd:f1:15:38:f5:97:db:35:7a:48:6e:0b:56:40:53:19:f9:
8e:ba:68:99:59:d9:80:01:17:fc:9b:9a:00:0b:c5:dd:05:ce:
f1:7c:5d:1f:f6:47:99:62:56:68:da:8c:4b:6d:24:aa:0a:46:
47:f2:15:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:00:31 2026 by rpki-client