Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: ttm37WjgWyYhVm/QgBGM2T9TO+IuV5KPFx9nXOZp1l8=
Subject key identifier: FB:95:55:61:8D:3E:EE:3A:A6:E8:55:19:DC:1F:68:C8:4D:98:C4:D9
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 01A12BB2122AF5AE35E03F9F971CF9CEBF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 1132
Signing time: Sun 11 Oct 2026 16:00:52 +0000
Manifest this update: Sun 11 Oct 2026 16:00:52 +0000
Manifest next update: Mon 12 Oct 2026 16:00:52 +0000
Files and hashes: 1: 8RlFcN6gLbpUc6FFzlURVV6HRUw.roa (hash: Tx6IxgxGtMFyzuZm5nI4v5qQk6SBxlPImSdMh1gmEkw=)
2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: 1LCx2U4CLZlQoEHROwwScXt7M/v336+6TQWpfenxqOI=)
3: dvF-ax6xW9w6QlzjTOaIlgyWKik.roa (hash: E53mXDTZAgvYtLPLUqhUWEPa5aOM6nnfYCB3KgCjcD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:12:2a:f5:ae:35:e0:3f:9f:97:1c:f9:ce:bf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Oct 11 16:00:52 2026 GMT
Not After : Oct 12 16:00:52 2026 GMT
Subject: CN=fb9555618d3eee3aa6e85519dc1f68c84d98c4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:61:71:bd:9c:e0:08:31:ae:99:cf:e9:2a:
f3:de:f1:be:c2:db:17:3f:0d:43:7e:32:38:19:20:
27:67:12:90:c3:76:6b:1a:9b:d1:ec:ba:68:8c:0f:
ef:77:08:7d:10:58:61:d3:a2:c5:02:55:58:6d:2c:
b4:3b:04:88:9c:c3:e5:0c:58:3b:d4:7e:b2:d6:23:
b4:7e:4e:5b:55:a1:2f:27:e6:85:04:4b:6f:ad:6a:
9c:9e:25:37:3c:3e:00:df:63:ba:a2:80:4e:9c:d3:
8c:8d:5d:bf:ee:38:cc:aa:7a:cc:2f:dc:94:e6:76:
6c:83:4b:b4:60:63:db:63:8d:8b:16:ed:6c:20:8b:
3a:27:4d:b2:84:f5:59:b7:a9:30:ac:46:08:0d:69:
fb:39:be:c7:36:dc:24:1b:37:eb:4f:8d:12:79:94:
1f:c6:fa:45:0d:4a:2f:02:d7:0f:6a:b6:e3:98:1c:
c7:80:b4:51:16:18:99:74:c1:2d:54:40:e0:2a:d9:
9d:ec:49:b9:e4:f1:b1:6a:68:40:45:86:4b:52:30:
21:a2:f9:e7:ce:68:47:d0:cf:33:dd:10:83:b6:9f:
e7:26:ba:2b:3e:9e:9a:8d:36:e3:d8:59:43:c9:42:
e1:50:07:6c:c7:04:5c:0c:eb:d2:e9:16:e3:34:54:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:95:55:61:8D:3E:EE:3A:A6:E8:55:19:DC:1F:68:C8:4D:98:C4:D9
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c8:a0:65:ea:a2:26:70:fa:3e:3e:39:aa:b4:92:68:d3:46:
d2:b1:fb:2e:b0:27:90:9f:d6:9a:06:17:13:3c:a0:0e:9b:00:
53:34:8a:72:54:98:aa:eb:89:d9:87:a7:08:86:d0:14:79:0d:
8d:3d:a5:65:a7:0e:bf:14:46:03:93:4b:9e:51:f2:50:54:fd:
fd:91:2c:02:45:ff:87:f6:54:0c:39:04:2c:3b:1b:78:d3:b0:
21:c7:08:ee:4b:f6:1f:c8:0f:af:fb:2c:69:a3:8b:c2:41:06:
42:2b:51:01:37:47:84:cd:17:3a:d2:21:0f:fb:a1:73:9a:29:
fe:1c:59:9f:df:55:d4:7c:1f:2e:b2:42:bc:86:58:05:c8:b5:
04:81:d7:b5:ca:dc:4c:09:0d:2c:62:13:00:30:c1:d2:40:c6:
e0:6d:53:41:90:84:bb:20:2e:73:6d:db:3b:97:33:5c:6d:0b:
9e:54:df:4f:55:e3:6f:40:58:c3:61:44:ba:96:bb:6e:e9:ad:
a3:9d:c1:0f:1a:c7:8f:5b:00:41:07:ed:c0:85:2b:f6:79:a5:
69:9c:86:97:d1:49:c7:85:de:52:8b:33:3a:c4:94:52:ea:28:
5e:ac:90:12:07:b4:9a:ec:52:f2:ad:03:a4:05:94:53:52:42:
8d:2b:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:59:40 2026 by rpki-client