Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
File: OxiO137kpO6Av-8i-pD5LCGJF0k.mft (raw, json)
Hash identifier: DBq3EOSUmBNAWPsgP3KRb1hsrqydyeM9nGP0vom337Q=
Subject key identifier: A1:0F:55:98:0F:F7:73:25:9D:30:84:1A:B2:7B:0D:F9:35:B4:2A:CB
Authority key identifier: 3B:18:8E:D7:7E:E4:A4:EE:80:BF:EF:22:FA:90:F9:2C:21:89:17:49
Certificate issuer: /CN=3b188ed77ee4a4ee80bfef22fa90f92c21891749
Certificate serial: 01A08EA098C3C25D25DA35A08EDF399EAE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
Manifest number: FE
Signing time: Fri 11 Sep 2026 04:01:24 +0000
Manifest this update: Fri 11 Sep 2026 04:01:24 +0000
Manifest next update: Sat 12 Sep 2026 04:01:24 +0000
Files and hashes: 1: OxiO137kpO6Av-8i-pD5LCGJF0k.crl (hash: eIK1fHmfDuVATH0KgcKBL4UdC1mLCnTYqExFcb9ECWU=)
2: RuW8-PgIfibhBoqNocX_t7ptPOE.roa (hash: zV6LrJuAjMC8MbTSFPKsE8qN0Xu/5M2QJ39L5RQKY/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:a0:98:c3:c2:5d:25:da:35:a0:8e:df:39:9e:ae:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b188ed77ee4a4ee80bfef22fa90f92c21891749
Validity
Not Before: Sep 11 04:01:24 2026 GMT
Not After : Sep 12 04:01:24 2026 GMT
Subject: CN=a10f55980ff773259d30841ab27b0df935b42acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e1:cc:25:b5:de:d2:d1:53:0d:c9:c2:a5:53:
8d:8d:71:1f:ed:c1:ca:d5:28:fd:73:7d:18:66:4e:
61:fc:15:e4:67:3b:ab:36:8d:02:b1:c7:e6:9c:08:
dc:70:2a:70:2e:26:36:57:70:1e:97:a1:94:e1:cf:
f8:77:d7:34:ed:47:b7:8a:c3:b6:1c:5a:28:9b:f0:
05:8a:e6:fc:73:92:ba:d1:2d:ad:35:0a:bf:d9:7f:
b8:93:0e:22:26:0d:c2:56:bc:c1:8e:de:a1:02:17:
59:56:3c:cc:6f:bc:8a:20:fc:eb:9f:48:ff:93:fe:
e6:ae:0a:45:2c:14:51:0e:bb:e2:93:dd:a4:86:7c:
c3:3a:b9:bc:bc:5b:9c:7b:01:41:53:96:f1:cb:a0:
18:eb:30:f0:c7:01:63:c2:f4:b7:fd:f6:8b:da:8e:
06:33:33:94:3d:a2:ea:e7:32:99:97:e5:66:44:62:
92:0f:7b:5a:89:ba:85:61:33:c4:9d:a4:13:bc:08:
c7:0e:d9:4b:86:8a:c9:c1:c5:28:58:b6:45:7c:bf:
46:4a:a4:52:df:05:e6:ca:c3:c4:69:69:33:d6:fd:
07:3e:4f:49:fb:aa:f3:22:07:34:7b:0a:40:11:20:
f3:74:0e:b7:f7:4d:1a:bd:7f:95:a8:9b:0c:bd:4b:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0F:55:98:0F:F7:73:25:9D:30:84:1A:B2:7B:0D:F9:35:B4:2A:CB
X509v3 Authority Key Identifier:
keyid:3B:18:8E:D7:7E:E4:A4:EE:80:BF:EF:22:FA:90:F9:2C:21:89:17:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:06:3d:d1:43:b1:c9:d6:54:67:79:69:b6:b1:2c:af:4c:e0:
4f:46:a2:3e:2a:14:ed:23:f6:4c:dc:33:fb:92:13:c5:ee:5d:
89:df:67:04:8f:b2:4f:6e:80:61:c9:de:7b:f2:68:54:2c:7d:
f9:39:16:50:6d:3f:1b:6c:c2:c5:1e:81:b9:97:4f:e0:b6:de:
da:2c:e8:8a:e6:31:7d:b5:21:a3:1b:a5:b4:02:98:29:9f:70:
18:0d:82:37:52:29:f0:3c:ea:83:9c:b7:6d:4c:ee:45:8b:a7:
3c:c8:4c:16:27:d3:13:03:d3:12:47:83:1f:66:6a:bc:de:24:
9a:2d:d2:ac:82:1c:17:20:3f:65:34:a0:03:96:8f:23:97:cb:
b7:37:0d:37:94:45:63:b1:67:a7:a8:f6:f5:00:7d:08:97:1a:
04:e4:d3:0b:b3:69:31:93:4e:21:d4:c9:80:58:17:18:01:ed:
19:ef:07:f5:41:e0:98:27:a0:17:a9:a7:67:d6:f7:8f:c0:01:
b8:bc:32:0f:53:f3:70:32:b2:77:d2:ff:a2:ff:bb:c7:5d:f6:
77:50:ee:61:e9:19:b6:cb:2d:b6:7c:4c:3c:44:d4:6f:dd:91:
21:6a:c4:fc:a1:26:37:89:b3:17:b9:bb:cb:3c:c1:fc:8b:2f:
a7:cd:cd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:49:32 2026 by rpki-client