Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
File: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft (raw, json)
Hash identifier: uSUmHzVz/fJkhQnY4Aeoz5JT6YVU3/mtww8+0A0KvdQ=
Subject key identifier: 82:CB:23:2E:3E:73:06:AA:A1:67:A4:A1:41:0A:32:A0:87:C5:EC:73
Authority key identifier: A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
Certificate issuer: /CN=a231d7b97a07676122f72e465091d23606ae66a2
Certificate serial: 01A16DC8CDDB3DA8ECCB87DA82631743F538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
Manifest number: 0200
Signing time: Sat 24 Oct 2026 12:00:38 +0000
Manifest this update: Sat 24 Oct 2026 12:00:38 +0000
Manifest next update: Sun 25 Oct 2026 12:00:38 +0000
Files and hashes: 1: duR9uQ1SsCstwHLOlmLoUwdbMns.roa (hash: yA4AsbUZ49Idd1b6bOSpb8V75FCHwuh/putB9VxYleY=)
2: ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl (hash: WaNPUV2HY7tCW0gjWHiB5VmNGXR1I1HE75DZ3eMQZ5c=)
3: yMLrlgL_4XGQv4PkP0fKel7Uqa0.roa (hash: WADJFfyNdRhdPfPcKnXU061md0h/PkE/qV2H2/38MPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:c8:cd:db:3d:a8:ec:cb:87:da:82:63:17:43:f5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a231d7b97a07676122f72e465091d23606ae66a2
Validity
Not Before: Oct 24 12:00:38 2026 GMT
Not After : Oct 25 12:00:38 2026 GMT
Subject: CN=82cb232e3e7306aaa167a4a1410a32a087c5ec73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:03:5d:1d:29:b3:e3:da:db:69:e5:36:e7:
42:e6:cc:76:4a:35:c5:b8:2a:a7:5e:ee:5a:54:08:
b6:6b:fa:3f:cd:4f:3e:e3:64:d5:1c:6d:54:c4:aa:
47:19:07:50:66:64:03:66:56:18:05:01:27:70:f0:
4d:65:51:32:74:9e:73:f6:1b:0e:ea:5e:f3:13:5d:
fa:3c:8a:6b:b3:c7:e4:14:9a:a2:52:00:20:66:56:
1a:00:6b:71:4c:15:4d:31:43:9f:de:a3:fc:ca:02:
f0:d2:1e:a2:8d:4f:42:a5:49:01:17:08:f5:7e:67:
7a:87:ea:cf:fd:09:93:26:93:60:d1:d1:e9:6f:ea:
ba:73:ab:de:ef:48:91:f7:ce:3c:dc:e5:78:9e:d6:
11:29:3a:7f:45:34:4c:d2:38:a0:9c:16:c4:74:55:
2f:ef:ab:b4:41:53:b8:31:5f:75:8e:f1:63:38:b3:
77:17:a5:81:c3:32:df:f3:d2:f2:8e:d4:f0:35:71:
0f:42:bd:a6:cd:9f:40:85:39:8a:e8:32:bf:3b:2a:
41:a4:ed:7d:61:23:b4:f5:40:30:d1:93:c5:ee:22:
41:22:b6:07:47:d3:a4:78:37:90:86:8b:64:b4:c7:
bb:b8:85:26:7a:32:b2:98:33:2b:c7:56:87:b7:c5:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CB:23:2E:3E:73:06:AA:A1:67:A4:A1:41:0A:32:A0:87:C5:EC:73
X509v3 Authority Key Identifier:
keyid:A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ae:61:9f:49:9e:00:fb:4b:5f:2a:88:87:10:3f:5e:8d:ff:
0d:a4:9f:0f:57:52:6a:a6:a1:f8:1a:a7:ee:66:b5:80:e2:fa:
3a:f2:33:4d:66:97:58:48:d2:1a:a7:da:f8:b4:1f:fe:20:a6:
f7:7a:4e:3f:b9:76:b2:81:fc:d4:0c:58:ea:8d:f9:10:58:8c:
fa:0c:5e:c0:98:3c:ad:99:b8:4b:b8:2d:e9:9d:c4:e0:8d:77:
2f:81:29:34:04:e1:da:91:d1:7e:f4:91:11:4e:6b:b1:e3:8b:
ec:e4:e9:b4:ab:e1:57:91:09:65:98:bf:95:de:f3:17:af:6c:
a7:1b:f6:b4:c7:2f:f1:c1:ef:b7:51:d2:fa:e9:1b:6c:84:6b:
a5:ba:eb:9c:04:56:3f:56:d7:53:c8:0d:f9:cf:f2:b7:79:1a:
05:ac:ad:e2:5b:91:d6:0f:1c:b0:9c:9e:44:2c:51:f1:7f:e1:
0e:a9:8b:50:a5:71:35:8d:13:49:85:47:5c:5d:8f:a3:d6:f5:
cc:5f:b6:1e:98:3e:52:bb:27:2b:42:93:f5:45:67:ed:a3:aa:
91:09:98:1e:b6:ee:22:31:c0:15:e2:91:67:98:d8:ac:7a:6b:
98:db:29:92:e4:0b:49:c2:68:ea:92:f3:87:1f:dc:e8:af:79:
c1:0b:c9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:43:41 2026 by rpki-client