Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
File: OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft (raw, json)
Hash identifier: LDwuhdg/PV/EMiPXH2za/2nuFrXagjB9EMHsHNNtCZ4=
Subject key identifier: 30:52:6E:C4:C7:95:C7:E7:82:09:D7:AF:54:CC:E1:DD:88:81:0A:21
Authority key identifier: 39:72:C3:A9:DD:4F:8E:00:6B:3B:5F:F8:91:B4:A3:76:1E:DC:E4:13
Certificate issuer: /CN=3972c3a9dd4f8e006b3b5ff891b4a3761edce413
Certificate serial: 01A17DE1125C04707A8C549554B29F0885BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:01:04 +0000
Manifest this update: Tue 27 Oct 2026 15:01:04 +0000
Manifest next update: Wed 28 Oct 2026 15:01:04 +0000
Files and hashes: 1: OXLDqd1PjgBrO1_4kbSjdh7c5BM.crl (hash: tVgB8Uh65SwVxziuqqflYdy2mcDD2nm17nlbY/ASkC0=)
2: RIl4fKhBjK-K5FgduYm10GA1QSQ.roa (hash: Ocyf7nYoVAbV1TQsJ/zEIif5q1NMRReT2mzgTvpzHMc=)
3: dOH2Swi-EI1bGKqjtPsLcUa9PnM.roa (hash: 2uMrxTRrZKBm5w9QVdyqQ0PMfu0UrouZnk+izTYWJdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:12:5c:04:70:7a:8c:54:95:54:b2:9f:08:85:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3972c3a9dd4f8e006b3b5ff891b4a3761edce413
Validity
Not Before: Oct 27 15:01:04 2026 GMT
Not After : Oct 28 15:01:04 2026 GMT
Subject: CN=30526ec4c795c7e78209d7af54cce1dd88810a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:a1:2e:84:9c:74:94:e3:69:da:79:36:f6:
f8:b9:f6:23:30:15:3f:58:e9:c3:95:c4:c5:18:3c:
89:b7:5c:2b:b0:69:60:c0:33:0a:f7:e0:b2:8a:fa:
40:16:39:ce:2e:31:4c:6a:1d:3e:aa:00:e3:ad:2a:
42:52:e0:09:f9:78:91:02:a4:33:1f:1b:b4:26:2f:
df:cc:59:a3:4c:26:8b:fd:36:e6:37:35:51:3b:c5:
5f:0a:b8:33:c1:bc:fa:36:e6:dc:12:c6:09:ab:0a:
cb:14:48:18:61:bb:b9:3f:11:de:7b:aa:98:64:7f:
bc:3c:a5:af:d5:44:30:d6:0a:e4:48:2e:19:2b:5b:
91:69:e6:22:88:bb:0b:be:2f:68:ae:13:b6:cf:a3:
f7:53:37:0a:a8:d9:3f:ff:d5:0f:2e:b2:70:0f:d2:
00:fe:b2:63:6f:f6:26:c6:d9:d8:87:9b:00:1d:8d:
37:58:dc:13:b5:46:ec:7d:7d:bf:0f:15:d6:46:03:
79:1d:85:0e:73:fa:81:38:da:5b:0f:80:34:4b:27:
89:d3:d4:dc:86:92:22:70:79:9b:f9:f8:57:df:71:
f7:96:4c:7b:77:e6:e3:22:b6:a2:3b:1d:f8:d3:17:
05:b6:35:b9:8e:70:18:4a:7e:d1:95:ba:e3:c6:ab:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:52:6E:C4:C7:95:C7:E7:82:09:D7:AF:54:CC:E1:DD:88:81:0A:21
X509v3 Authority Key Identifier:
keyid:39:72:C3:A9:DD:4F:8E:00:6B:3B:5F:F8:91:B4:A3:76:1E:DC:E4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:63:59:e8:2c:6d:e7:bf:0d:1b:00:49:32:42:51:ae:4a:65:
f1:e3:7b:e8:6b:90:da:98:49:86:c4:d4:17:10:1e:0a:67:d1:
34:08:72:a6:ff:65:bf:d4:8a:41:32:5c:a4:4d:2c:1a:ce:8b:
f6:ea:28:83:e0:92:4d:48:4f:57:36:e9:43:81:a8:64:d9:c4:
53:00:ca:43:62:74:86:66:f5:ba:5b:c7:3f:f4:d9:f7:4a:04:
9d:56:82:85:db:a8:f3:99:ae:6b:e4:f9:84:26:60:99:19:51:
ec:d8:15:2e:ed:b8:69:28:9c:5e:b5:6c:c1:8c:d2:bf:0e:e7:
3f:c7:f9:61:09:68:bc:6e:21:c1:b3:a2:6c:62:8e:79:f8:6f:
08:2f:07:a3:20:ae:3a:26:62:26:c4:b0:4f:5f:e3:6d:51:c4:
58:2f:8c:93:88:84:52:d1:78:c4:c2:67:42:49:6a:02:f3:5e:
95:98:fd:92:92:33:b1:65:dd:f8:aa:12:c5:cd:f1:f9:f4:4e:
45:f8:ba:fb:28:a7:df:22:51:f9:45:b3:43:aa:e5:e0:48:09:
10:ae:f4:86:05:06:77:ea:34:65:0f:94:e3:79:a2:6d:d1:90:
50:2c:d7:cd:37:e2:16:06:db:6d:f7:0b:ad:66:50:5c:f5:a2:
02:f1:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:03 2026 by rpki-client