Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
File: OQJ3OPl4_tokqdh7DLi7mqevVA0.mft (raw, json)
Hash identifier: XbH1pCRYUbjw1d0mP+ZUKMI8lMRhEjPRDViphcWa6hg=
Subject key identifier: B1:AD:55:19:00:B1:07:CF:8D:A9:59:99:8F:E5:47:E2:48:93:93:F1
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 01A06FF1B33A08117B87C7F74901955A2868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
Manifest number: 1A44
Signing time: Sat 05 Sep 2026 05:01:46 +0000
Manifest this update: Sat 05 Sep 2026 05:01:46 +0000
Manifest next update: Sun 06 Sep 2026 05:01:46 +0000
Files and hashes: 1: OQJ3OPl4_tokqdh7DLi7mqevVA0.crl (hash: nZv2nGqDhDNzRasWorMNmetAh2/ylIF40dhVUzDcjYY=)
2: jr5zaX72B88EPr7fF-QkGP5Dx98.roa (hash: oiKQk5Ow8W6lhAid4jGIfOCDhwPg0xWcUUAnbvjLz5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 05:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:f1:b3:3a:08:11:7b:87:c7:f7:49:01:95:5a:28:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Sep 5 05:01:46 2026 GMT
Not After : Sep 6 05:01:46 2026 GMT
Subject: CN=b1ad551900b107cf8da959998fe547e2489393f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:53:85:d7:33:87:4a:8e:a7:f4:1b:a1:94:
9b:92:f4:53:ae:ac:b4:1d:ff:e4:b0:9e:b0:a0:1e:
ff:f5:0a:dd:01:3a:96:15:6b:e8:6d:19:59:1b:63:
4a:00:f1:14:99:57:34:40:20:6f:54:b3:c8:db:e9:
a7:95:cc:d3:88:eb:5d:6b:71:a2:3a:86:57:e5:cb:
73:5b:c7:7f:4c:34:95:3a:92:4d:9d:5c:c9:c4:04:
d9:08:b5:5d:69:a1:61:d4:2a:2e:90:20:4e:77:77:
40:3e:68:ab:c9:90:1e:3a:4d:7c:39:7e:32:82:8d:
da:13:f1:4a:46:e8:ee:6e:ce:58:73:b6:86:74:2c:
e7:00:b2:28:9e:72:c6:cc:2c:14:b7:47:f5:b5:6c:
f8:98:94:24:bc:a8:a8:d4:14:28:f5:de:c2:b8:c7:
86:7c:08:35:23:5d:d8:97:8b:22:0b:6c:c4:52:d7:
e8:82:56:42:af:9a:28:bc:98:fd:7c:e1:34:70:3f:
4e:6b:15:1d:0c:d3:0e:cc:42:70:73:f9:0c:d0:5f:
09:f1:3c:2a:d9:f3:6a:41:72:72:86:89:1c:01:f1:
d9:e1:ea:c0:2b:e1:4f:49:b3:20:7c:29:8b:a5:8b:
a8:7e:e1:a3:ce:4f:c0:d4:3b:74:2c:d6:d8:99:36:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AD:55:19:00:B1:07:CF:8D:A9:59:99:8F:E5:47:E2:48:93:93:F1
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e7:34:de:93:3a:ec:40:9b:56:38:eb:8e:05:11:08:ac:e1:
1b:ce:30:00:87:1b:79:4b:e5:8a:2b:98:ab:73:68:46:38:54:
00:92:1c:7f:7e:c2:6b:d5:4f:2b:c1:7f:80:79:0a:47:01:54:
bb:3f:80:e0:05:a6:53:55:49:37:4b:c2:a3:e8:2c:38:e2:fc:
1f:49:bd:56:c1:18:a5:d1:e6:39:68:2c:19:6f:ce:5c:45:8f:
d4:17:75:ab:49:4a:ec:95:42:88:c2:6c:b1:2b:02:82:f2:df:
81:ff:49:74:23:18:5b:dc:a2:82:cf:fb:53:e4:68:5f:00:27:
75:e5:e7:20:19:2e:22:d7:66:76:c2:3f:46:8c:22:32:44:c5:
12:fc:2a:28:c6:c2:e1:ab:e0:01:92:39:ea:24:bf:13:ba:11:
a3:29:32:a6:e6:03:38:33:c0:60:c5:51:6c:b0:a0:7a:59:f6:
70:26:5b:9d:94:41:5f:af:c1:f9:b3:0e:ac:1f:d7:24:5a:b4:
64:81:a5:54:dd:ae:53:e8:ff:01:50:2c:e1:20:8d:42:34:94:
bc:30:24:7a:71:f1:de:14:83:9a:e0:29:a5:f5:91:43:fe:cd:
c7:cb:81:b9:bb:5c:b5:99:d3:7a:e7:02:86:3c:fe:4b:2d:a2:
e9:df:e5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:13:41 2026 by rpki-client