Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier: 26jmRQfRs563wdllq0aJ0E7j8xmiYe+96oc6S3Tc6R8=
Subject key identifier: 02:55:D4:CF:D5:9B:0B:6C:A1:DD:2B:03:5B:9B:6F:D7:1F:4C:D4:54
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 01A175B9D0A6333F7AC2F3DD777C665E9E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 01:01:14 +0000
Manifest this update: Mon 26 Oct 2026 01:01:14 +0000
Manifest next update: Tue 27 Oct 2026 01:01:14 +0000
Files and hashes: 1: IkpqFJlNa2437VP_tcxeJyVAPMM.roa (hash: mlTIEBNdJZbIbhX3NLDEQ4pnepBeofaptKU6NdPs/uI=)
2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: tPexqWyvgIJ5YInIR68FeFRZTC2N9dxVfnuZSXTIjII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:d0:a6:33:3f:7a:c2:f3:dd:77:7c:66:5e:9e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: Oct 26 01:01:14 2026 GMT
Not After : Oct 27 01:01:14 2026 GMT
Subject: CN=0255d4cfd59b0b6ca1dd2b035b9b6fd71f4cd454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:3c:c3:2d:0d:ce:b3:43:8f:51:9c:f6:40:
df:9a:ce:b3:02:b9:a5:58:94:5a:73:7c:f2:fe:26:
ed:b8:65:0c:d0:cb:ee:b0:d9:f0:f3:9d:e2:e8:1d:
96:b1:93:c1:db:71:56:08:b3:84:a4:36:2f:18:d2:
b9:f2:04:8d:87:3b:d3:ab:8b:5b:4b:53:9d:c1:f5:
36:e9:0f:8b:d1:1b:b3:9f:eb:16:cc:2f:ce:d4:a7:
cb:5e:cd:f7:9d:70:93:41:e1:0c:7f:2d:d5:10:52:
13:7d:9c:b9:6d:ad:9d:ce:17:91:1c:7a:39:38:4b:
f2:5c:8b:d4:79:2b:ce:b7:59:32:05:a7:d3:5e:aa:
d5:1d:12:4a:8c:2b:b1:60:35:94:ed:07:fc:23:ae:
46:35:f4:a2:69:bc:54:7e:31:75:21:a2:b0:8c:93:
ac:37:89:b2:cc:5b:a6:ca:24:ab:d4:0b:69:8e:60:
71:65:ce:ba:22:63:ba:e0:2e:6a:50:23:3e:e7:4c:
19:5e:fe:55:cc:71:66:95:5e:c3:ed:6b:c5:59:3d:
10:b5:7f:50:82:02:1e:b6:d8:ba:ca:62:85:25:89:
d0:c4:ad:50:5e:a8:ae:fd:da:e1:1b:b9:df:ef:62:
89:8a:87:58:20:2f:77:96:2b:94:ce:32:32:f1:73:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:55:D4:CF:D5:9B:0B:6C:A1:DD:2B:03:5B:9B:6F:D7:1F:4C:D4:54
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0c:3d:71:dc:ae:e9:a7:fe:bd:7d:18:bf:9e:89:bf:42:c0:
db:db:6c:fd:0f:e3:be:08:09:07:af:43:75:3a:98:25:11:11:
d7:92:ed:8a:c0:a1:10:ef:82:ef:f5:61:63:c5:07:0f:29:32:
94:14:43:85:8e:63:d4:70:54:1c:3a:93:0a:93:8c:80:ba:34:
fb:1d:d2:ff:af:db:4e:78:db:d4:f2:67:4c:b1:3b:80:fa:d3:
3e:7e:98:b0:d0:33:3c:e3:d1:3a:6d:aa:d4:c2:10:c8:4c:62:
08:23:66:09:e2:29:3b:24:f5:c7:00:24:c6:b9:00:84:ed:6c:
38:23:28:02:f5:f7:89:9f:c1:49:5e:f5:b7:e0:01:f8:be:9a:
a6:06:59:9d:a2:ed:f2:0b:03:2c:17:3b:73:38:67:ee:01:07:
9f:55:5a:ee:83:de:ba:76:81:ae:0b:f6:7a:49:75:be:26:7c:
9d:0b:b1:a5:be:78:ae:00:ab:80:17:51:e8:e9:6c:7b:75:b4:
8b:63:e6:db:34:35:d7:0e:47:e9:81:91:44:d0:01:49:48:21:
6e:47:a0:15:32:54:22:30:2e:06:4a:fc:4d:b5:d3:19:e5:52:
d6:9c:dd:cc:dd:ed:25:1c:b0:26:03:56:f3:01:91:2a:ee:26:
f6:74:bb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:29:27 2026 by rpki-client