
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
File: OXMtzQw1QmFE-fAmdUF5366-iVg.mft (raw, json)
Hash identifier: 9flW7BRfpO9lGS3R9SUc9/QYnp4sJgwpaos0KqqZoTM=
Subject key identifier: 36:74:51:B3:94:07:71:FA:36:A9:7C:FF:1D:E4:B5:C0:AF:57:29:D4
Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
Certificate issuer: /CN=39732dcd0c35426144f9f026754179dfaebe8958
Certificate serial: 01A18F7960E6956321FE874641FCC1DCF6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
Manifest number: 1AC0
Signing time: Sat 31 Oct 2026 01:00:58 +0000
Manifest this update: Sat 31 Oct 2026 01:00:58 +0000
Manifest next update: Sun 01 Nov 2026 01:00:58 +0000
Files and hashes: 1: 58FQk9XlWFWt_nTgS_BZ-o3ufG8.roa (hash: HV8V9oTjMmtSDQrOPyii7uMO61tXElSbpadVB9OFkKU=)
2: OXMtzQw1QmFE-fAmdUF5366-iVg.crl (hash: GgpDJlkqMRQgJfE6KaB72Gg06lv7eZhS+K1j3kub52I=)
3: alsVPKZrpQmUXj0uEcZT1N8yiVg.roa (hash: 09uKm4BmAwWDMsqvYSjsTw7MlQ2Dn7dIn/6Gf+Scpew=)
4: ts8WeGjGg3wwHGhPi2mxnwkcFTw.roa (hash: xg5lwYc2/XUF5liNH+ui3OtMGbwyGCJPDg20ByKgo34=)
5: zGS1iGBGVdelcYyC8IZVLuo4YF8.roa (hash: xNhCCvgxABfH6yRt+p+v0793m+1n0z/VA8lzriBuOf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:79:60:e6:95:63:21:fe:87:46:41:fc:c1:dc:f6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958
Validity
Not Before: Oct 31 01:00:58 2026 GMT
Not After : Nov 1 01:00:58 2026 GMT
Subject: CN=367451b3940771fa36a97cff1de4b5c0af5729d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c1:f4:82:36:1c:4a:5a:fb:62:b2:3a:a5:b6:
8c:ca:da:ef:d0:c8:88:8e:dc:a5:db:4b:a1:e3:fa:
39:e5:77:14:54:e8:8e:28:7c:ff:1f:20:c5:d5:2f:
e5:33:51:d3:15:66:92:7d:92:ef:be:fc:92:5b:73:
fb:4d:23:c1:f2:04:db:12:4f:bb:2d:8d:1d:c0:bb:
f6:fe:2a:b5:c7:91:01:52:5c:0e:8c:24:74:a3:48:
e5:78:8b:6c:a1:8c:81:8e:93:9f:92:3f:94:28:71:
04:e0:8b:ff:57:cb:cd:fd:68:93:c6:e8:d9:14:6d:
d8:47:44:af:fd:32:39:40:1c:b0:40:26:e5:aa:e5:
c3:da:41:d6:28:ba:bb:6c:dc:df:75:f5:4a:19:24:
da:b3:2d:c9:0b:92:6b:f0:3c:b1:a4:05:cb:08:ed:
b4:5d:4c:75:59:9d:6a:b3:30:ff:2b:80:17:b3:79:
6e:12:66:74:24:6c:21:a7:ad:59:3e:99:32:39:71:
02:16:62:1b:54:bf:ab:63:b9:48:93:58:e1:b5:d1:
30:5a:cc:14:5a:9b:7d:fa:67:77:a9:a3:2b:ee:1c:
7e:a0:c0:be:97:04:6d:30:b8:40:ad:8e:75:2e:ed:
74:57:0a:d6:c8:ce:82:95:d8:f0:51:f2:03:1f:65:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:74:51:B3:94:07:71:FA:36:A9:7C:FF:1D:E4:B5:C0:AF:57:29:D4
X509v3 Authority Key Identifier:
keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0a:3f:bb:ee:f9:04:8a:53:38:3d:33:21:c6:3a:75:0d:4d:
3a:6c:10:fe:47:6d:89:b0:d5:82:ac:a3:a2:2a:5d:bd:c0:57:
cf:a7:9f:67:7e:7b:54:72:a0:29:77:09:8c:51:01:d6:8c:44:
04:f7:2a:bb:e7:52:1a:9a:84:d8:01:38:99:76:a5:7c:a8:d1:
f0:e2:a6:f0:7f:ac:1b:80:00:75:d3:a7:1f:cb:1c:7c:76:d6:
df:dc:e5:94:9b:02:b3:c4:a5:98:e3:1a:91:e8:e6:60:9e:a1:
e7:5b:20:07:09:b6:f3:b5:23:9c:f6:62:97:41:00:2f:65:cc:
71:00:cd:d3:fe:12:2e:5c:28:f6:cf:ca:5b:67:c2:8e:4a:b1:
c6:76:37:6f:52:a0:a4:fb:8f:6e:4f:d6:ba:a3:a3:ae:c9:40:
b7:43:6a:a6:72:8e:c8:05:fa:af:48:11:7a:80:ff:c7:8d:d7:
c5:1f:6e:88:30:5c:ef:79:fd:2b:cc:96:50:fe:bb:d9:cd:73:
8c:71:43:40:a9:3a:f5:2d:c3:28:56:44:64:7e:8d:74:07:32:
c0:d8:af:68:a5:ca:b7:03:f0:d2:fe:5e:ff:6e:6a:c9:76:bf:
fa:59:d4:37:69:68:e4:29:1c:f5:fe:28:ed:63:11:37:57:c0:
a1:c0:a9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:56:29 2026 by rpki-client