Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/OJLjXtbZqTquuqBvc20uzGoAibg.mft
File: OJLjXtbZqTquuqBvc20uzGoAibg.mft (raw, json)
Hash identifier: Owxyu2LoHdDnWANchiSnH2f5z6nFXEKeWj9ucQxsatk=
Subject key identifier: 9B:CC:FE:0A:7A:AC:CA:8E:6A:E7:38:AF:F8:9F:6A:D0:03:69:C7:BB
Authority key identifier: 38:92:E3:5E:D6:D9:A9:3A:AE:BA:A0:6F:73:6D:2E:CC:6A:00:89:B8
Certificate issuer: /CN=3892e35ed6d9a93aaebaa06f736d2ecc6a0089b8
Certificate serial: 01A15D0C45AC48D3D78D6B2218EF77FBAD2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJLjXtbZqTquuqBvc20uzGoAibg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/OJLjXtbZqTquuqBvc20uzGoAibg.mft
Manifest number: 012E
Signing time: Wed 21 Oct 2026 06:00:47 +0000
Manifest this update: Wed 21 Oct 2026 06:00:47 +0000
Manifest next update: Thu 22 Oct 2026 06:00:47 +0000
Files and hashes: 1: 2zlKB2FmqzSnVerKeenYffIq4Ww.roa (hash: AromkeG9Ku6U1AGMbOjCq8GwJmgJayRG3XjiVCT4Cck=)
2: OJLjXtbZqTquuqBvc20uzGoAibg.crl (hash: QphnCUbCscMAJWt4b7ceHD5L/DxW7ZTCgSglgS64Geg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/OJLjXtbZqTquuqBvc20uzGoAibg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/OJLjXtbZqTquuqBvc20uzGoAibg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJLjXtbZqTquuqBvc20uzGoAibg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:0c:45:ac:48:d3:d7:8d:6b:22:18:ef:77:fb:ad:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3892e35ed6d9a93aaebaa06f736d2ecc6a0089b8
Validity
Not Before: Oct 21 06:00:47 2026 GMT
Not After : Oct 22 06:00:47 2026 GMT
Subject: CN=9bccfe0a7aacca8e6ae738aff89f6ad00369c7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d0:e5:a3:14:08:ee:2b:00:e6:34:7b:ea:7c:
bd:0e:f2:65:68:43:c4:a0:1f:50:2d:33:c7:e9:98:
a5:67:1d:b3:ae:31:44:1a:f0:a9:2a:62:c7:ea:3c:
4f:ad:a0:b2:4c:c2:c4:88:26:1a:d0:fa:ce:3b:de:
11:10:cd:c6:c0:b9:7c:bc:f9:71:d9:a5:19:9a:f0:
af:1b:f3:0d:6c:f7:b9:55:e4:b7:4d:39:37:61:ae:
8a:00:d3:1a:06:8f:f2:99:35:b2:99:dc:78:5f:b4:
32:b4:c8:52:9b:02:72:c0:b5:47:ad:0f:1e:6c:d0:
f3:c4:08:bc:a4:f5:cc:24:af:cb:69:08:29:1a:a0:
f4:f3:5b:50:44:75:08:8d:4a:63:f2:43:53:e5:63:
f8:71:d1:10:27:e4:4f:15:f2:89:ea:4f:0a:53:da:
c1:5b:ab:2a:79:74:49:9a:9a:3e:3e:c3:53:a7:c6:
18:d9:2a:b4:94:0b:c5:20:8c:90:01:13:b1:58:97:
c0:38:8c:ad:e2:6d:f3:6f:ec:5e:2b:48:91:27:20:
e2:3a:f0:88:48:e9:00:a9:40:44:45:ce:06:48:2c:
95:bb:f1:13:8d:73:08:41:cd:9c:1e:6c:62:4f:14:
5b:0b:fe:79:5c:7e:53:70:41:16:c2:52:88:ea:ce:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CC:FE:0A:7A:AC:CA:8E:6A:E7:38:AF:F8:9F:6A:D0:03:69:C7:BB
X509v3 Authority Key Identifier:
keyid:38:92:E3:5E:D6:D9:A9:3A:AE:BA:A0:6F:73:6D:2E:CC:6A:00:89:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJLjXtbZqTquuqBvc20uzGoAibg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/OJLjXtbZqTquuqBvc20uzGoAibg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/OJLjXtbZqTquuqBvc20uzGoAibg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7e:17:7c:02:7f:00:32:44:ea:71:4d:3e:fc:27:f3:3b:e1:
85:43:4c:c4:31:99:96:62:31:25:1e:d8:15:94:3b:25:bd:38:
53:70:ca:59:7b:a1:82:87:64:68:2e:00:aa:86:9d:5b:7e:99:
21:8e:68:df:0f:2a:19:db:5f:02:27:75:07:d5:1e:7c:85:e3:
33:ef:fb:b7:8c:6c:b1:ee:63:f9:e5:67:6e:05:a2:7e:d5:95:
1d:e3:0d:3b:4e:8c:64:00:82:93:10:5b:56:ef:46:97:18:7f:
16:4a:71:cf:b7:74:84:ee:9e:65:bc:44:6f:1d:70:4d:98:50:
f1:9b:67:1b:ba:bb:c9:74:0f:8f:4e:83:12:dc:1e:51:d2:ab:
f4:10:95:9a:90:03:2d:55:eb:89:16:e1:57:d7:0c:14:13:df:
ca:69:84:f1:67:46:86:e4:62:36:58:cd:0e:15:e9:93:1f:6d:
99:a4:54:82:06:5e:8d:11:13:82:31:72:de:a5:c0:5a:08:12:
14:39:62:a5:6c:2c:67:ac:a2:b2:cd:8b:20:2b:cf:43:c4:fa:
24:00:10:81:d9:5d:c1:71:71:7a:3e:7a:bc:7c:e3:78:9d:8f:
66:35:49:af:b3:1e:66:41:25:dd:af:21:e1:5c:30:52:ee:06:
38:75:cb:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFdDEWsSNPXjWsiGO93+60sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OTJlMzVlZDZkOWE5M2FhZWJhYTA2ZjczNmQyZWNjNmEw
MDg5YjgwHhcNMjYxMDIxMDYwMDQ3WhcNMjYxMDIyMDYwMDQ3WjAzMTEwLwYDVQQD
Eyg5YmNjZmUwYTdhYWNjYThlNmFlNzM4YWZmODlmNmFkMDAzNjljN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NDloxQI7isA5jR76ny9DvJlaEPE
oB9QLTPH6ZilZx2zrjFEGvCpKmLH6jxPraCyTMLEiCYa0PrOO94REM3GwLl8vPlx
2aUZmvCvG/MNbPe5VeS3TTk3Ya6KANMaBo/ymTWymdx4X7QytMhSmwJywLVHrQ8e
bNDzxAi8pPXMJK/LaQgpGqD081tQRHUIjUpj8kNT5WP4cdEQJ+RPFfKJ6k8KU9rB
W6sqeXRJmpo+PsNTp8YY2Sq0lAvFIIyQAROxWJfAOIyt4m3zb+xeK0iRJyDiOvCI
SOkAqUBERc4GSCyVu/ETjXMIQc2cHmxiTxRbC/55XH5TcEEWwlKI6s5E5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvM/gp6rMqOauc4r/ifatADace7MB8GA1UdIwQY
MBaAFDiS417W2ak6rrqgb3NtLsxqAIm4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0pMalh0YlpxVHF1dXFCdmMyMHV6R29BaWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMt
MGRlZDA2ZTQwYTc1LzEvT0pMalh0YlpxVHF1dXFCdmMyMHV6R29BaWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMtMGRlZDA2ZTQwYTc1
LzEvT0pMalh0YlpxVHF1dXFCdmMyMHV6R29BaWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqH4XfAJ/
ADJE6nFNPvwn8zvhhUNMxDGZlmIxJR7YFZQ7Jb04U3DKWXuhgodkaC4AqoadW36Z
IY5o3w8qGdtfAid1B9UefIXjM+/7t4xsse5j+eVnbgWiftWVHeMNO06MZACCkxBb
Vu9Glxh/Fkpxz7d0hO6eZbxEbx1wTZhQ8ZtnG7q7yXQPj06DEtweUdKr9BCVmpAD
LVXriRbhV9cMFBPfymmE8WdGhuRiNljNDhXpkx9tmaRUggZejRETgjFy3qXAWggS
FDlipWwsZ6yiss2LICvPQ8T6JAAQgdldwXFxej56vHzjeJ2PZjVJr7MeZkEl3a8h
4VwwUu4GOHXLoQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:58 2026 by rpki-client