Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
File: ojKhc4Do4liY3qnCIzIaKs5SNvE.mft (raw, json)
Hash identifier: gHQZ9sQb5ajR3uOlbeWIfZI60DHUWaWr7dKtWJlNbfs=
Subject key identifier: FA:5F:3E:5F:49:35:56:E5:80:25:8D:EF:83:06:A5:43:12:3C:D7:7D
Authority key identifier: A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
Certificate issuer: /CN=a232a17380e8e25898dea9c223321a2ace5236f1
Certificate serial: 01A08BD636F35942A0DB10262F22A1359D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
Manifest number: 0188
Signing time: Thu 10 Sep 2026 15:01:06 +0000
Manifest this update: Thu 10 Sep 2026 15:01:06 +0000
Manifest next update: Fri 11 Sep 2026 15:01:06 +0000
Files and hashes: 1: ojKhc4Do4liY3qnCIzIaKs5SNvE.crl (hash: xmIuMLRJebP3tv1yaosRjzWBiJ5gAup7PJ3dk0DhT18=)
2: xyoH9R_BmdJ-gyu7Oy-9rS-zs-0.roa (hash: HGNIvY3ULeEgQ68bK1r/+JhRNbs682fuQL9Y7B95gbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:36:f3:59:42:a0:db:10:26:2f:22:a1:35:9d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a232a17380e8e25898dea9c223321a2ace5236f1
Validity
Not Before: Sep 10 15:01:06 2026 GMT
Not After : Sep 11 15:01:06 2026 GMT
Subject: CN=fa5f3e5f493556e580258def8306a543123cd77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:a3:eb:c3:e3:1b:03:c3:d4:a7:c7:79:37:
8d:d1:c8:df:1f:28:c0:87:5a:53:57:db:d7:3e:2d:
97:87:cb:7e:e2:69:cc:00:d0:a5:1d:08:46:37:f0:
29:a0:90:f3:28:19:4e:93:77:3b:cc:f8:64:a0:1f:
f4:f1:46:96:c7:97:0c:08:b7:94:29:e8:6d:9d:7f:
58:86:89:5d:e7:4f:b8:43:40:f8:72:84:c4:d6:4c:
88:ea:56:9d:8f:36:11:ed:6e:35:71:11:6c:72:be:
5c:30:a2:c2:ee:33:71:7b:3f:ac:79:7b:fc:31:af:
66:99:f8:fd:60:9f:75:ec:7e:d5:18:2e:31:ac:2c:
f2:5c:e0:c1:37:e6:21:19:4a:c6:e7:fc:be:ad:fd:
73:eb:eb:89:78:70:85:ec:10:0a:49:52:30:51:0e:
90:b1:50:27:27:fa:44:5e:14:db:c1:68:74:26:fa:
05:c1:71:6e:c9:ec:e5:f6:9f:2a:4c:f9:de:f3:58:
f3:b7:81:54:f5:ae:23:82:66:2a:c9:99:c6:bc:21:
9e:a2:27:e2:6d:8e:67:ca:a9:28:32:5a:ba:fc:6f:
00:b3:12:d8:51:ed:ef:ad:a0:8a:e1:6f:a0:71:46:
76:24:41:57:16:13:78:27:00:59:1d:c3:b6:9f:4d:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5F:3E:5F:49:35:56:E5:80:25:8D:EF:83:06:A5:43:12:3C:D7:7D
X509v3 Authority Key Identifier:
keyid:A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cf:41:33:f4:ca:d1:3f:38:0d:f8:6f:1f:2b:23:3c:87:27:
33:48:d0:6d:3a:7b:6b:a9:60:ee:04:57:ed:03:b4:8d:bd:8a:
69:6e:9b:7d:d9:90:f3:c7:d6:67:13:9c:23:3b:4a:9d:18:2e:
77:bc:7e:b8:26:a7:29:dc:9d:80:84:b8:75:63:45:75:ae:98:
35:e0:41:9f:14:24:6b:f5:0d:3e:04:e5:87:03:32:31:63:00:
66:b4:62:4b:05:ac:7d:c5:35:43:5d:c0:70:4e:0f:c1:9e:ed:
20:0d:01:51:87:9e:bc:a1:bb:4e:a8:63:c9:15:8e:fa:6d:72:
df:d1:ac:c2:93:73:9e:cd:3d:b8:4e:f1:90:64:e4:8d:b8:6f:
4a:4c:79:a6:1b:17:85:8a:2b:11:4c:3b:00:9a:01:75:05:7b:
87:d5:0c:23:e2:d4:c5:60:2f:94:c1:38:80:7f:fd:3c:7d:e7:
99:10:4e:3c:42:cb:c3:f3:ba:eb:51:d8:80:39:95:f1:e3:8b:
94:a7:79:45:b5:16:4c:0e:fe:1f:b6:b7:f7:36:4e:75:90:95:
14:71:5a:51:9c:55:af:65:86:c8:53:00:62:f5:f5:60:83:10:
f1:a2:bc:1c:d4:ce:49:5d:ba:e4:3f:57:ce:42:77:50:60:6f:
7b:83:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:30:49 2026 by rpki-client