Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
File: OXMtzQw1QmFE-fAmdUF5366-iVg.mft (raw, json)
Hash identifier: YsKBhmw/GhmOXvGgOBE80Iufp7wOH3wQFZ0ZjLR9sFU=
Subject key identifier: B1:2C:2A:F7:E0:13:08:AE:CA:E1:6F:82:84:23:6F:A4:0F:37:53:1B
Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
Certificate issuer: /CN=39732dcd0c35426144f9f026754179dfaebe8958
Certificate serial: 01A19167C3FCE5A66F15CCC83C5E27586594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
Manifest number: 1AC1
Signing time: Sat 31 Oct 2026 10:00:59 +0000
Manifest this update: Sat 31 Oct 2026 10:00:59 +0000
Manifest next update: Sun 01 Nov 2026 10:00:59 +0000
Files and hashes: 1: 58FQk9XlWFWt_nTgS_BZ-o3ufG8.roa (hash: HV8V9oTjMmtSDQrOPyii7uMO61tXElSbpadVB9OFkKU=)
2: OXMtzQw1QmFE-fAmdUF5366-iVg.crl (hash: 4prbrwgxQ5Avy1/2IAdH089Izxyfagbyzr4KCfUcOyg=)
3: alsVPKZrpQmUXj0uEcZT1N8yiVg.roa (hash: 09uKm4BmAwWDMsqvYSjsTw7MlQ2Dn7dIn/6Gf+Scpew=)
4: ts8WeGjGg3wwHGhPi2mxnwkcFTw.roa (hash: xg5lwYc2/XUF5liNH+ui3OtMGbwyGCJPDg20ByKgo34=)
5: zGS1iGBGVdelcYyC8IZVLuo4YF8.roa (hash: xNhCCvgxABfH6yRt+p+v0793m+1n0z/VA8lzriBuOf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:67:c3:fc:e5:a6:6f:15:cc:c8:3c:5e:27:58:65:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958
Validity
Not Before: Oct 31 10:00:59 2026 GMT
Not After : Nov 1 10:00:59 2026 GMT
Subject: CN=b12c2af7e01308aecae16f8284236fa40f37531b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9c:c6:da:35:08:56:5f:9d:6c:3f:92:49:e0:
3f:cc:70:3f:12:16:af:bc:0b:b4:03:9f:da:a4:c2:
4b:a4:5f:ac:ab:34:91:25:b1:69:dd:36:f6:43:a4:
3a:86:56:80:2b:9c:14:b0:04:27:09:b8:20:71:42:
1f:71:9c:27:b3:ea:fa:bc:7d:a4:74:29:53:ac:75:
6e:0f:02:f1:05:23:f6:8e:c6:6e:70:94:6f:19:dc:
d0:5a:55:e0:ef:a7:f8:15:90:0e:e4:80:5d:de:a4:
9a:80:81:5b:59:bb:4b:d2:2b:36:1f:1b:0f:02:82:
55:69:63:10:7d:8e:d9:11:19:ed:45:c7:a0:48:f0:
d8:54:97:76:49:ce:71:7f:16:ab:08:95:20:b3:65:
eb:65:4c:2e:34:3b:75:b3:81:e9:17:b9:46:74:6e:
74:56:98:2b:ef:2b:de:d3:64:dd:2d:2a:07:4e:a2:
ab:9d:0f:e0:ed:1e:8f:57:96:ba:57:f5:55:08:15:
e4:a5:fd:26:b2:8f:ec:d1:38:7b:7c:73:96:e4:c9:
15:b2:66:57:7e:ca:a2:37:df:ed:19:d7:f2:25:0b:
58:de:dc:f9:90:bf:08:97:78:1e:fd:1d:f9:e4:d0:
4a:72:5b:0d:8f:01:3d:4d:2b:a8:ac:39:2d:90:fd:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2C:2A:F7:E0:13:08:AE:CA:E1:6F:82:84:23:6F:A4:0F:37:53:1B
X509v3 Authority Key Identifier:
keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c9:30:95:01:17:49:94:58:0b:b0:e0:94:3b:b6:49:37:bb:
ff:fa:7e:63:22:83:97:b8:ee:4f:f5:85:e9:33:72:11:d5:28:
ec:72:7d:bb:1e:88:b9:54:fd:4c:d6:da:73:56:00:1c:78:6a:
2f:0d:02:b7:d1:d8:06:17:5b:6a:ff:5c:09:a8:ab:4b:4a:7d:
a0:83:85:17:4b:39:41:8c:e0:37:d4:e3:77:f7:7d:5c:ff:fb:
29:3f:d7:c2:e4:74:5c:18:a0:e6:e5:96:e5:67:82:6e:01:4c:
19:f0:13:90:d1:ae:b4:5e:27:24:82:78:f6:c9:de:87:b1:ec:
60:d1:86:7d:ae:2f:98:81:27:4e:3e:26:59:c9:60:04:0e:2d:
f2:f1:30:c0:79:6a:c7:41:e2:08:4c:7d:f5:aa:f6:34:7f:72:
b8:82:97:e8:d7:4d:70:7a:72:4d:d1:e1:c9:a5:b3:e8:c2:24:
3c:30:31:7a:4e:72:4f:b5:e3:5f:e9:d4:4a:52:e3:c0:1a:f9:
76:05:23:e8:11:8f:f2:b9:63:22:27:c5:eb:b5:34:c4:84:f0:
6c:a4:01:d6:29:33:f5:47:a3:f6:d4:59:a1:ea:8b:e7:e3:12:
69:71:55:2c:5c:af:d8:0c:0d:3b:84:6e:65:5f:34:8f:62:49:
be:b7:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:12:19 2026 by rpki-client