Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
File: OX2fPb_DZTMuKCvRdqaAdURtHRs.mft (raw, json)
Hash identifier: pYzCH1+ccn7D8HyQc/f7XCtTRYueyimrwl2MogdbDmg=
Subject key identifier: 32:AF:C7:DE:EE:16:2F:8A:F1:EB:F0:46:26:48:82:1C:D8:72:CA:E8
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 01A1882D2CA3911FE3D0101F760724E62385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
Manifest number: 14EF
Signing time: Thu 29 Oct 2026 15:00:24 +0000
Manifest this update: Thu 29 Oct 2026 15:00:24 +0000
Manifest next update: Fri 30 Oct 2026 15:00:24 +0000
Files and hashes: 1: OX2fPb_DZTMuKCvRdqaAdURtHRs.crl (hash: aqQrpDuZXhkQmyHWmLVRh7TRoY6oOdHOHCxwYPpeQeM=)
2: Wsump-ruMTHeCIUMQYq9YHizRHM.roa (hash: PRDR807Wy2QehMf95nyisTATR9YQb1obROcnB9juLnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:2d:2c:a3:91:1f:e3:d0:10:1f:76:07:24:e6:23:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Oct 29 15:00:24 2026 GMT
Not After : Oct 30 15:00:24 2026 GMT
Subject: CN=32afc7deee162f8af1ebf0462648821cd872cae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:07:3b:9e:72:35:c2:f7:b9:0a:be:39:f1:
34:2e:1f:4b:07:77:50:21:f3:a1:de:4a:4c:71:91:
c9:78:4c:06:90:d7:fd:5a:64:31:42:e9:54:38:98:
29:0a:a8:c0:50:be:19:82:e2:65:95:e2:8d:31:a0:
a4:19:bf:4e:0a:f1:49:ca:36:8e:4e:bb:ac:de:7d:
5a:7b:5a:52:23:81:0d:ea:97:19:cf:fa:5d:71:5c:
45:9d:55:e6:6d:80:f7:cc:8f:86:0d:8e:92:fb:aa:
75:de:1a:5e:3c:92:70:e9:ba:ed:a0:c8:e1:4f:33:
2c:0f:9a:c4:f1:83:3b:39:54:f6:21:14:7b:50:22:
ae:4e:60:6b:ba:63:b1:66:36:ac:b5:b5:10:38:9e:
82:12:b4:bc:b4:7d:6e:2f:4d:c1:86:c5:81:7c:e7:
dc:30:61:f1:be:7f:e8:25:4c:2a:24:c9:03:15:26:
51:ec:96:a1:60:dc:f7:d6:0c:84:88:df:c6:70:32:
1e:0a:ae:6a:03:37:81:9a:04:14:30:db:86:af:90:
cf:ce:17:34:e2:92:d5:84:61:72:9e:74:e4:39:0b:
86:f8:82:30:d6:e4:64:68:b2:f6:54:6a:29:e4:95:
10:dc:6f:87:31:95:ad:c1:9d:45:16:5a:18:35:25:
c9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AF:C7:DE:EE:16:2F:8A:F1:EB:F0:46:26:48:82:1C:D8:72:CA:E8
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8e:27:1d:13:75:47:c3:fb:81:05:db:5f:cb:14:e4:26:b8:
2c:ed:3f:9c:37:2a:ed:61:9d:45:46:62:7e:bb:d4:a6:95:72:
8f:c8:0b:e0:d8:da:36:44:1a:ae:50:e7:49:7f:c9:17:52:9e:
cc:d1:83:ff:29:c7:ae:29:d8:23:7b:9c:32:ab:cd:ac:9d:9e:
ba:3e:a5:12:9e:08:6e:07:18:5a:e0:53:ca:f8:07:9c:30:34:
47:61:99:38:4b:c0:62:25:d5:1a:7e:45:43:95:1f:04:63:61:
9d:89:5a:f4:6a:53:84:fb:cb:4a:52:c3:36:a5:5d:95:b9:01:
fe:cb:92:cc:2e:72:97:80:df:e3:3d:c6:ad:8e:ab:dc:40:8e:
6f:59:c4:f1:dd:aa:93:3a:af:17:d6:40:19:90:06:5f:8c:55:
da:7b:ae:88:d6:55:22:e5:0e:1c:83:71:db:12:31:f0:5f:5b:
52:71:17:60:62:1f:72:0d:52:10:b1:f6:07:71:aa:51:62:1b:
bb:65:05:98:ce:d0:a5:27:62:78:29:63:c4:89:14:bf:b4:86:
e0:1b:3e:c7:a2:4b:37:8d:b0:e6:31:8e:b8:df:fc:27:b8:ee:
02:36:75:48:21:93:57:63:46:b7:c6:05:7f:27:79:8c:95:50:
36:c0:c6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 01:30:00 2026 by rpki-client