Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: RKv+Zvpc0dKBd4lqzHh928a3RmRbh932EpK5tYckHXc=
Subject key identifier: 54:E3:52:2B:14:86:FB:5F:AF:73:0F:5C:EA:81:67:02:E2:37:CF:74
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 019E2738879098E12EDB8C618FB327CB29DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 0FA1
Signing time: Thu 14 May 2026 16:01:16 +0000
Manifest this update: Thu 14 May 2026 16:01:16 +0000
Manifest next update: Fri 15 May 2026 16:01:16 +0000
Files and hashes: 1: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: So2uln5gs2FewNr3kMGN1H37WZGoIez92F5RZ4Ysc+s=)
2: dvF-ax6xW9w6QlzjTOaIlgyWKik.roa (hash: E53mXDTZAgvYtLPLUqhUWEPa5aOM6nnfYCB3KgCjcD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:38:87:90:98:e1:2e:db:8c:61:8f:b3:27:cb:29:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: May 14 16:01:16 2026 GMT
Not After : May 15 16:01:16 2026 GMT
Subject: CN=54e3522b1486fb5faf730f5cea816702e237cf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:ea:cd:3d:e4:33:45:50:aa:3a:f1:ab:fd:
b1:d3:91:3f:0d:41:10:04:ed:ce:4d:de:a9:4d:11:
5c:5b:c6:0c:68:c6:ec:61:c8:a3:75:a6:2a:35:f7:
6e:a3:bb:a5:84:18:20:2e:e9:44:0e:e4:d9:b7:c3:
91:1e:16:38:af:5c:f8:7a:88:b6:6c:db:0c:fa:da:
4e:f1:7a:68:40:fd:4c:13:49:3a:bb:47:85:4c:d8:
3b:21:bd:79:14:5e:53:ed:71:47:e3:fa:14:82:42:
bd:2c:ae:1d:9c:ab:5b:0c:6c:f1:87:3d:ad:e4:d8:
fa:b9:13:43:53:51:25:48:da:7e:8f:d8:1f:7f:88:
0a:73:87:b7:4a:f0:6d:9e:b6:13:ca:64:73:0e:8b:
14:ea:60:11:e2:1b:cd:c2:e0:c0:04:66:1e:e0:c1:
fc:11:6d:00:bf:fa:bd:cd:ff:2d:9d:8f:b4:88:4a:
81:a1:43:dd:b8:56:82:66:46:7c:7e:96:fa:60:d5:
ab:0e:e4:a3:b8:51:9d:9f:5b:f2:fa:92:1b:17:c7:
2b:b2:cc:f1:8e:09:2a:f9:c9:22:0c:a3:75:24:0d:
dd:b0:68:dd:71:ae:8e:7d:41:92:70:20:ff:0e:62:
d4:8c:08:1f:a7:c4:74:05:88:31:52:92:20:a3:01:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E3:52:2B:14:86:FB:5F:AF:73:0F:5C:EA:81:67:02:E2:37:CF:74
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:df:01:d1:04:97:8f:19:1c:77:69:e4:ee:e6:38:10:fe:cf:
8c:72:4d:84:b5:f8:b4:70:fc:c5:eb:4b:08:6e:88:27:1d:e5:
df:9b:f1:50:53:c5:d2:31:04:62:41:e0:d6:54:9b:68:d2:0f:
52:27:3f:45:43:e4:ae:83:d5:8e:91:47:fa:88:b9:25:ec:52:
aa:f1:44:bf:b1:d6:f9:68:64:af:2f:7f:94:59:0f:79:6d:70:
bd:6e:94:e5:16:76:03:d5:ec:11:01:21:56:18:a4:d0:9b:eb:
f1:b5:58:0e:c5:21:38:12:1f:61:61:ab:f6:42:d6:a2:44:22:
8f:f0:80:3e:83:bb:8b:a2:b2:85:c3:38:02:5a:37:d1:91:0b:
3c:4d:5f:7a:20:58:96:c3:61:d3:43:bf:87:8d:0e:57:eb:a6:
67:79:21:a2:7f:4f:c4:86:36:c1:17:44:90:8c:cd:c4:d9:9c:
5d:c3:10:4e:15:64:c4:56:05:2d:ab:55:57:7e:82:42:7a:9c:
fc:e0:4c:d6:c2:c0:82:07:cb:0c:d4:61:f4:84:29:d4:23:0b:
05:ec:7b:d0:4f:bb:6a:89:07:7b:a9:c0:8c:e3:28:c8:45:9d:
a6:f8:b5:78:3d:4d:0c:07:86:36:a0:0c:81:a8:32:e2:54:c2:
67:b6:ac:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 23:13:00 2026 by rpki-client