Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
File: OQJ3OPl4_tokqdh7DLi7mqevVA0.mft (raw, json)
Hash identifier: 7FDYXmPvGDyCsrvxoRvh9EGXMWxK4hXz6SsT0NXKTNM=
Subject key identifier: E0:A7:97:0B:78:32:21:1F:4C:05:6E:7F:9A:79:D7:04:D5:9D:2F:F3
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 01A19B463DB9DE537CA7003B4D251690AD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
Manifest number: 1ADF
Signing time: Mon 02 Nov 2026 08:00:34 +0000
Manifest this update: Mon 02 Nov 2026 08:00:34 +0000
Manifest next update: Tue 03 Nov 2026 08:00:34 +0000
Files and hashes: 1: OQJ3OPl4_tokqdh7DLi7mqevVA0.crl (hash: eW4l/OxP/Whu45CIv+x2Wr0gGTSa5UFokYwrwxvkUxE=)
2: jr5zaX72B88EPr7fF-QkGP5Dx98.roa (hash: oiKQk5Ow8W6lhAid4jGIfOCDhwPg0xWcUUAnbvjLz5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:46:3d:b9:de:53:7c:a7:00:3b:4d:25:16:90:ad:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Nov 2 08:00:34 2026 GMT
Not After : Nov 3 08:00:34 2026 GMT
Subject: CN=e0a7970b7832211f4c056e7f9a79d704d59d2ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:03:12:3b:97:3c:db:17:87:17:76:72:e2:a7:
b7:2f:54:45:b4:7c:2e:e4:3d:db:5f:fa:5c:73:27:
41:fc:7d:72:3d:2b:db:cc:94:c0:0f:7b:4e:0f:fc:
af:e9:e2:50:cf:d9:22:f8:d1:12:af:24:1b:44:f1:
d0:ff:e2:91:3f:4d:1c:a9:d0:f8:e7:51:01:8c:1e:
16:f5:8b:02:63:d4:d3:a3:83:8c:41:e9:a0:d2:82:
18:83:5d:71:9f:f0:0a:4f:48:a1:7a:f6:a7:71:7a:
df:45:b4:c4:b9:b0:b4:ee:3f:cf:85:60:0b:7e:06:
76:87:aa:03:76:7d:a8:90:48:41:c9:6e:9d:2e:a4:
78:aa:4d:57:c9:c5:d5:9f:b7:5c:f2:b6:8e:8f:fe:
e0:4d:eb:08:ae:8b:ae:60:c5:95:5f:82:ca:19:1d:
d0:d9:09:c3:69:d0:01:ca:7b:87:01:89:b2:be:dd:
77:14:7a:2f:a3:37:5b:6f:e4:dc:9c:92:10:97:34:
5d:f0:9e:3f:70:97:e3:d0:84:92:65:5d:1a:04:e7:
22:41:32:f2:58:df:54:67:2a:20:fe:5c:3b:f0:16:
38:44:04:a8:87:da:a9:18:c5:5e:34:91:f8:8b:2e:
86:be:52:b9:f6:3e:3d:14:12:5f:6b:cb:a0:3b:b6:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A7:97:0B:78:32:21:1F:4C:05:6E:7F:9A:79:D7:04:D5:9D:2F:F3
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b1:10:98:c3:92:8f:97:48:d6:91:2e:57:d4:8c:24:c4:2d:
f7:ac:2e:90:2c:f5:f6:e3:6d:71:d6:26:7e:3a:38:44:80:b6:
70:5c:5a:40:e1:ee:06:80:d5:68:e0:7c:53:8b:69:f9:79:75:
f3:32:5e:96:e7:7c:7a:39:6e:a8:79:94:98:98:40:16:b6:f6:
e3:6c:53:ad:8d:0f:2f:43:9c:92:99:0c:27:68:a8:ab:1e:7d:
4e:b3:45:a4:a3:ef:56:06:42:e1:07:67:f2:ff:30:77:e2:45:
66:b8:86:1f:79:bf:c1:cc:a3:06:5b:3e:6b:83:3f:16:e3:af:
28:0e:fd:bc:a7:79:8f:90:e2:24:c0:db:28:31:48:61:16:d6:
d4:c9:aa:df:b7:5f:05:98:31:51:93:b6:bf:ad:39:45:33:49:
8c:1e:b7:11:8d:df:ce:a0:a1:1c:1d:d0:a8:ef:1e:5e:bd:63:
ca:bb:fb:3a:20:aa:77:71:11:ca:c9:68:9c:05:d5:dc:c7:76:
c1:76:a3:34:8f:fc:25:2e:dc:09:ff:68:78:e2:b2:ae:31:a0:
4c:6d:cc:b7:5d:05:5a:09:1f:59:00:a9:e3:fb:da:c3:54:69:
cd:69:85:5d:ba:e4:0a:0a:a0:c1:35:0f:50:25:4c:24:6b:f7:
8a:94:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 15:06:35 2026 by rpki-client