Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/379f00-d853-49f3-92b9-f66ac607adb0/1/oUtidFNb-FN-QtArFYCkaMLdgFo.mft
File: oUtidFNb-FN-QtArFYCkaMLdgFo.mft (raw, json)
Hash identifier: QL7M9FWB6FE+HtiULN3ZRMpQs9zidDlmd80ShvyhTUg=
Subject key identifier: DE:1D:6F:F6:60:9E:CA:10:51:88:4E:44:BA:DA:65:3A:A9:36:85:9F
Authority key identifier: A1:4B:62:74:53:5B:F8:53:7E:42:D0:2B:15:80:A4:68:C2:DD:80:5A
Certificate issuer: /CN=a14b6274535bf8537e42d02b1580a468c2dd805a
Certificate serial: 01A18909D460368D8E8AAEA781C8B949A745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUtidFNb-FN-QtArFYCkaMLdgFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/379f00-d853-49f3-92b9-f66ac607adb0/1/oUtidFNb-FN-QtArFYCkaMLdgFo.mft
Manifest number: 5D
Signing time: Thu 29 Oct 2026 19:01:25 +0000
Manifest this update: Thu 29 Oct 2026 19:01:25 +0000
Manifest next update: Fri 30 Oct 2026 19:01:25 +0000
Files and hashes: 1: JZ_2Gis8_FYFbLaeL2m8DGyq5Nc.roa (hash: HE49+Sd04GoBpLYwZc7b9NpqXUFTQByK5MoLgflEpag=)
2: oUtidFNb-FN-QtArFYCkaMLdgFo.crl (hash: catRMP6Ex88BH4BT4RLoxTRmGNkd+2DWpmmaom7iKk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/379f00-d853-49f3-92b9-f66ac607adb0/1/oUtidFNb-FN-QtArFYCkaMLdgFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/379f00-d853-49f3-92b9-f66ac607adb0/1/oUtidFNb-FN-QtArFYCkaMLdgFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUtidFNb-FN-QtArFYCkaMLdgFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:09:d4:60:36:8d:8e:8a:ae:a7:81:c8:b9:49:a7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14b6274535bf8537e42d02b1580a468c2dd805a
Validity
Not Before: Oct 29 19:01:25 2026 GMT
Not After : Oct 30 19:01:25 2026 GMT
Subject: CN=de1d6ff6609eca1051884e44bada653aa936859f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:c1:d1:d7:8a:74:fa:be:f3:45:e9:0a:50:
e2:e1:4a:fb:ae:87:34:ba:f1:56:d3:d8:7c:c6:1d:
df:d0:94:9c:aa:86:89:ec:05:24:6f:03:40:77:6a:
45:74:1e:23:77:13:ed:f9:f2:c5:b8:9d:9d:cd:b7:
91:d0:6e:c9:5e:c9:59:43:20:d2:14:20:e1:63:7f:
94:ec:3e:f8:dc:b7:74:47:a1:6c:d6:57:7e:80:9e:
f5:55:9f:2d:8e:cc:75:05:0f:97:28:2f:20:b0:8c:
15:83:62:8e:0a:a5:b4:4b:b7:fb:2f:74:bb:07:bb:
47:cc:86:ae:6a:db:91:1a:96:04:bd:31:f4:89:bb:
b5:65:4f:54:0d:2d:1f:6a:c9:97:93:a6:5e:d6:18:
1a:f3:54:5f:7c:cd:b1:44:e5:66:63:89:80:1b:6c:
28:e3:66:bd:b5:fb:f9:a2:bc:c5:08:d9:0a:e2:51:
90:ac:bc:74:3b:a9:bc:2d:2c:9d:ce:03:69:ce:3c:
b5:27:3c:e0:d4:82:0d:75:80:f8:bc:24:bd:44:7e:
cc:ba:44:63:70:90:88:9d:1b:90:b4:99:5a:69:2e:
98:3d:6e:65:29:62:23:6c:91:ab:b4:a8:17:13:ac:
88:20:cc:ee:d5:fb:e2:c3:c4:88:95:d8:2d:5c:02:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1D:6F:F6:60:9E:CA:10:51:88:4E:44:BA:DA:65:3A:A9:36:85:9F
X509v3 Authority Key Identifier:
keyid:A1:4B:62:74:53:5B:F8:53:7E:42:D0:2B:15:80:A4:68:C2:DD:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUtidFNb-FN-QtArFYCkaMLdgFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/379f00-d853-49f3-92b9-f66ac607adb0/1/oUtidFNb-FN-QtArFYCkaMLdgFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/379f00-d853-49f3-92b9-f66ac607adb0/1/oUtidFNb-FN-QtArFYCkaMLdgFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1e:1f:85:9e:e7:c7:5e:d2:94:9b:bb:e8:3d:07:04:86:ff:
53:1f:6e:2c:eb:17:6c:85:fd:10:20:1b:b5:ff:81:2d:84:32:
33:c5:2e:da:27:18:ae:ff:8b:2a:a5:2d:88:5a:40:8c:78:15:
5c:95:a8:d6:77:0e:fc:7e:01:50:54:bc:77:b8:b0:7e:76:63:
83:a2:e5:77:da:0e:94:06:46:44:fa:d8:24:ee:df:1b:47:ae:
cb:ba:d0:a8:c2:27:a3:88:71:cd:be:27:0a:31:95:0b:1c:82:
63:c4:fc:d6:c5:9c:f4:37:8c:a5:39:ad:b3:b5:94:31:04:1b:
22:47:03:0a:2d:48:1d:12:48:d3:c9:a2:39:c9:33:cb:c1:23:
b0:50:8e:25:6b:6e:27:90:9d:dd:07:2d:88:96:a3:44:b8:73:
1b:39:ce:df:38:8c:4f:e6:4d:ec:eb:91:b6:9b:f1:8c:89:a9:
a1:03:02:eb:fd:dc:3b:d5:4c:44:fe:8a:98:b1:9f:b1:64:3e:
09:7c:a7:19:e7:99:29:f4:4d:e4:3c:6b:16:2e:6d:d4:97:c5:
9a:da:33:19:82:73:e7:7b:43:bf:06:7c:ef:5e:44:cf:dd:0e:
6b:34:49:60:e6:4c:f2:af:bd:04:12:9e:04:f1:af:cc:b5:85:
8f:7e:b8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:06:52 2026 by rpki-client