Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier: aFMty8pIYgDcu5AVMVYmG2A8oXSfv69M/tNW0M8mvAE=
Subject key identifier: 68:51:B2:29:41:71:F7:54:B7:04:99:F5:1B:48:B3:58:2F:4C:22:8B
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 01A173CAF7175E2DB4CC0DC1A3EF5C1C36F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number: 1AC4
Signing time: Sun 25 Oct 2026 16:00:43 +0000
Manifest this update: Sun 25 Oct 2026 16:00:43 +0000
Manifest next update: Mon 26 Oct 2026 16:00:43 +0000
Files and hashes: 1: IkpqFJlNa2437VP_tcxeJyVAPMM.roa (hash: mlTIEBNdJZbIbhX3NLDEQ4pnepBeofaptKU6NdPs/uI=)
2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: M1Q6x0mZan0CBEHHvas/LglUleh5G1p6aMrzXCFOEl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:ca:f7:17:5e:2d:b4:cc:0d:c1:a3:ef:5c:1c:36:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: Oct 25 16:00:43 2026 GMT
Not After : Oct 26 16:00:43 2026 GMT
Subject: CN=6851b2294171f754b70499f51b48b3582f4c228b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:68:69:9e:f5:52:bb:e3:a7:59:26:39:06:
2b:5e:b3:43:f6:96:2d:d1:f2:a0:dd:96:d5:ef:66:
c8:2e:e4:b4:d2:99:a5:12:4a:5a:7e:ac:d0:26:1c:
8d:ff:4c:19:9c:5e:ff:5f:71:3f:d6:b3:44:22:3e:
cf:86:9c:08:bb:f7:c7:fd:03:76:3a:06:83:4e:37:
a0:69:61:ad:6e:9e:7d:8e:cc:88:02:de:99:aa:57:
63:a6:57:db:62:58:24:01:db:27:5c:47:e7:05:2b:
d4:da:5b:d0:46:f9:60:2e:c7:ce:af:b4:4a:ec:1c:
0a:26:84:86:b7:cc:1a:bd:99:2c:ca:d6:0d:ea:5b:
a8:67:b1:91:e3:47:ad:7b:bd:37:8f:c7:d6:e1:a2:
2b:cd:c0:24:5f:01:85:d2:85:86:01:80:46:da:3f:
5b:c7:24:a3:4e:04:c3:8c:3a:58:37:3f:44:6c:97:
b6:16:7b:bb:18:4d:fd:4f:9b:4c:95:35:e7:bb:58:
9d:b5:bc:da:d8:c3:4d:f0:dd:57:f9:79:00:de:6d:
a9:55:1e:48:3e:f3:5c:cf:4e:26:94:21:88:63:db:
55:75:7a:06:e4:0b:d3:53:ee:80:83:9a:c0:7b:af:
11:d9:7a:1a:b9:1a:d9:a4:98:ad:f0:2b:fd:92:43:
62:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:51:B2:29:41:71:F7:54:B7:04:99:F5:1B:48:B3:58:2F:4C:22:8B
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e5:7b:93:e4:e5:da:a7:8f:44:d1:ec:d4:9b:17:55:2e:f0:
9a:64:e3:25:de:3b:5a:18:dc:0f:27:28:d0:46:59:33:0c:18:
72:0f:ef:60:98:1e:6c:3c:98:29:17:de:0a:21:9e:00:9c:9d:
4a:c8:39:16:dc:e0:ec:f8:07:24:e3:1a:be:f1:e2:2b:0d:a9:
df:a7:96:44:fc:70:cb:c5:2c:15:40:50:48:e2:0b:35:1f:77:
77:c4:66:c8:1e:84:36:16:2d:75:a5:17:f1:76:84:a3:e7:db:
94:82:e3:3a:2a:de:e2:0c:71:83:81:9d:87:3d:92:77:3b:f5:
29:71:c2:7c:b7:a0:fc:ee:db:e1:9c:d0:8d:48:95:43:30:f8:
e5:a2:17:e0:4e:43:ff:93:c1:f1:f5:02:73:e6:bb:db:c4:29:
e1:51:35:82:6b:f5:43:aa:6e:73:0b:88:6b:d9:4d:9b:c9:37:
79:4e:76:2c:7f:16:63:66:0d:01:00:e5:b1:30:34:ad:8b:07:
47:dd:a0:67:85:f4:9e:4e:69:08:12:bc:7d:c8:0a:57:7c:22:
8a:33:cf:83:27:bb:21:90:d3:04:09:6d:59:38:ea:b2:6f:68:
e7:e0:06:55:c0:ae:1b:f9:07:ea:2e:40:ac:b4:d5:13:8e:83:
94:31:e9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:42:58 2026 by rpki-client