Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
File: OxRinHZc4axPaIlW47kPatjEtYI.mft (raw, json)
Hash identifier: QVnChJ5E3DLAhIo38ilyh+A0QQsq4dQNldBt+T3M+9w=
Subject key identifier: 26:B4:D4:B3:A0:16:A9:81:0F:FB:3E:46:7D:60:68:16:2B:8D:BB:56
Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
Certificate issuer: /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Certificate serial: 01A140834EFE790A8433611695B1E05294BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
Manifest number: 1A3A
Signing time: Thu 15 Oct 2026 17:01:49 +0000
Manifest this update: Thu 15 Oct 2026 17:01:49 +0000
Manifest next update: Fri 16 Oct 2026 17:01:49 +0000
Files and hashes: 1: 0yRcFcA3OBSplazAFaiD6lfC3B0.roa (hash: 2qPLWspuMTgkMxkS4l/YyisgXYynSeGYaJD2ttoyg+o=)
2: OxRinHZc4axPaIlW47kPatjEtYI.crl (hash: RdcxkoGqv58IlNibWIrkVsAvw7xg6rters3XXFSymQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:4e:fe:79:0a:84:33:61:16:95:b1:e0:52:94:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Validity
Not Before: Oct 15 17:01:49 2026 GMT
Not After : Oct 16 17:01:49 2026 GMT
Subject: CN=26b4d4b3a016a9810ffb3e467d6068162b8dbb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:67:e9:66:91:4f:c6:2f:47:d2:6d:e6:74:
51:21:79:80:61:7b:9a:27:86:57:d5:cc:e6:be:10:
7d:84:d3:d5:ee:23:34:e8:c5:68:1c:23:17:36:6b:
24:2a:05:83:9c:3e:fa:aa:ad:d4:32:22:07:7d:bf:
29:ad:ea:15:ac:77:fa:69:84:ef:0c:a6:44:5d:d0:
8c:95:6b:fb:3b:5d:7f:ae:5c:6d:a1:08:1b:18:cc:
70:fd:25:a0:8c:17:c2:b6:40:90:83:64:bb:7c:7b:
1d:30:c5:55:a0:54:cf:9d:69:b7:2b:97:e1:b3:d3:
19:8b:c9:d7:d5:cc:36:54:b3:ff:72:36:34:80:43:
5d:51:41:34:0a:f2:ec:07:83:52:6f:4e:c0:81:60:
a0:87:ee:02:17:0d:5a:bc:47:0e:91:03:a7:4d:57:
aa:d5:33:e1:0e:d8:20:e6:0f:2d:7a:36:eb:f6:93:
e4:74:a2:72:ab:7c:ad:cc:2c:98:ab:92:f0:e8:5b:
2c:3b:8c:71:d9:73:60:49:1b:46:b4:cb:e7:b4:dd:
57:92:5e:39:85:8a:c2:19:cb:9b:17:86:9f:9f:a8:
1c:9a:c4:25:55:a4:36:3d:67:43:5c:04:27:d5:d4:
7b:f2:a0:ef:9d:86:e0:0b:19:f8:5a:f9:96:0c:59:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B4:D4:B3:A0:16:A9:81:0F:FB:3E:46:7D:60:68:16:2B:8D:BB:56
X509v3 Authority Key Identifier:
keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:de:59:45:cc:83:66:72:5f:bd:58:e0:dd:e2:02:f7:84:97:
7f:06:af:61:dd:7a:6d:fc:8c:b9:df:49:64:06:84:82:38:5a:
f9:68:b9:1a:ad:51:38:09:18:ac:6d:86:b9:ad:e4:c0:b0:1d:
ee:bb:7c:9e:a6:e8:01:af:79:42:78:f6:b5:98:f2:5b:d9:6e:
d4:f0:22:b9:24:ee:18:de:6b:cf:1d:8a:d6:fe:62:8d:28:45:
b5:87:1f:d8:31:e6:38:5a:4b:68:6d:a0:f1:aa:45:ad:a8:f3:
87:0b:91:a3:d8:47:08:a1:ca:18:11:0d:7a:07:19:c4:be:78:
31:a1:ab:83:92:bb:c9:de:6e:91:03:81:89:97:ff:f4:13:b5:
5d:63:76:e4:07:06:19:ae:ff:cb:45:43:37:52:3b:ec:a7:aa:
af:7a:5e:59:93:5e:fd:6e:dc:fb:c0:6b:7d:e2:7c:d5:1a:62:
06:81:df:f7:df:52:15:90:da:38:a5:30:c3:e9:8a:91:04:14:
10:b2:a7:4e:d7:4d:a4:57:90:bc:45:5e:c7:72:fa:20:93:c9:
3b:8c:eb:b1:dd:64:6c:b5:ff:70:69:bd:45:51:d8:92:d9:4e:
fd:6c:5f:9e:be:3c:61:fe:ab:e1:15:45:e8:df:f2:5d:49:80:
b4:36:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:07:56 2026 by rpki-client