Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: KBjGB1uJkctAMkHCe4PgfmO49VvAPiGAQs8tHq+i5RE=
Subject key identifier: 64:54:36:D1:80:DC:1C:89:E5:83:EF:B3:1B:42:B7:BE:4F:C4:5B:FB
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 01A0AE61E40B775E72F5807FCE351807A6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1A64
Signing time: Thu 17 Sep 2026 08:00:45 +0000
Manifest this update: Thu 17 Sep 2026 08:00:45 +0000
Manifest next update: Fri 18 Sep 2026 08:00:45 +0000
Files and hashes: 1: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: HlHiMGLzWSQSzW0ETOkXrZWxbmYMqbArXO7WvHjf5XU=)
2: WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa (hash: ZvSkcDxGhvi+aJsfbms5jhxFpHcmll85L+dtrGm8zwg=)
3: csloCIt3CTSVgebL58dJpxOdtC0.roa (hash: esH7P1ArdXIQnwu6qXLQUiXFhHbcU/4jPuyvpFcE9cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:61:e4:0b:77:5e:72:f5:80:7f:ce:35:18:07:a6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Sep 17 08:00:45 2026 GMT
Not After : Sep 18 08:00:45 2026 GMT
Subject: CN=645436d180dc1c89e583efb31b42b7be4fc45bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:e4:07:e3:2f:e5:a9:2a:f8:33:16:a8:bb:
25:ef:a8:9a:5f:7c:f0:23:09:d5:c1:89:b5:47:0f:
a5:43:91:7f:97:c3:fc:84:e1:9e:fb:90:9c:30:f3:
e2:8e:d2:de:19:a6:cb:6c:d2:42:db:aa:5a:61:23:
e1:11:18:eb:f4:67:66:5e:47:21:2b:b7:74:88:6f:
9a:c7:51:44:74:19:57:6c:f5:4c:17:e9:32:ff:88:
e0:15:cb:0f:93:f5:ef:f5:dc:58:4f:c9:7b:0d:3a:
ba:05:a9:c5:b8:44:ee:90:24:5b:39:ee:62:0f:4f:
83:9b:0f:56:69:58:82:8f:a7:bd:d8:26:38:89:93:
26:25:ba:d0:fe:7f:33:0b:c6:54:0a:0d:22:9a:c9:
5d:ab:ff:74:39:49:33:8d:af:c9:73:b9:aa:f0:82:
c2:e4:e5:6e:fc:c2:43:7b:29:1e:5f:ec:34:e5:bc:
23:3e:fe:2c:84:af:be:57:53:cb:c9:d5:54:90:84:
51:56:3c:91:16:ba:f6:b3:b1:6a:ef:f0:80:38:59:
41:bc:be:d4:17:60:e0:3e:31:68:36:ae:ef:f0:18:
de:af:e9:f2:2a:72:3c:2e:5a:db:62:b7:fc:5f:68:
4e:c2:3b:52:75:2d:83:3c:1c:50:cb:fb:e2:65:bb:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:54:36:D1:80:DC:1C:89:E5:83:EF:B3:1B:42:B7:BE:4F:C4:5B:FB
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9c:4f:93:a5:72:42:8a:5c:45:06:04:17:13:a7:e5:d8:4f:
c3:f1:9c:2f:73:03:fa:03:cb:f0:18:62:46:1f:e4:ec:43:98:
f1:73:97:96:cc:5a:f5:f3:99:49:8c:d6:11:6f:60:18:44:e9:
15:f5:ae:e2:4d:ca:8b:ea:01:1c:05:bf:1f:ea:71:b2:99:65:
08:8d:51:eb:a1:c8:15:7e:51:5c:12:08:42:2c:76:17:70:89:
00:c6:b0:34:81:57:f4:50:0a:64:0a:35:26:47:b5:df:20:52:
29:3b:d4:6a:ea:75:e8:39:e0:f8:38:fb:15:aa:87:06:de:1d:
8d:b1:4e:a1:fd:ed:24:fa:af:ef:4a:79:9a:80:6d:d2:b6:49:
d6:8e:df:6c:5a:7f:c6:83:e9:e7:18:bb:5f:9f:f9:84:c8:e1:
a2:18:69:73:7d:11:2e:6b:39:55:6c:23:42:3f:fb:b4:7d:32:
3e:25:80:db:60:e9:7a:e6:73:9c:f6:25:79:40:34:ef:30:fd:
11:e8:72:89:4d:86:aa:e5:ff:c5:2e:04:e2:3c:5e:ff:75:7f:
8d:8a:a2:db:8e:25:f2:59:ae:4b:76:f5:a1:89:2a:03:e1:f2:
25:7c:6c:b1:37:2e:8a:4f:85:e4:84:5a:f4:20:97:32:46:b6:
89:e7:34:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:15:18 2026 by rpki-client