Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: 3ouKNz1ElAoE01ZbQgWZF44xu9Qjfv8sG00Wy9w65UY=
Subject key identifier: 2B:A2:4D:93:BB:61:26:53:2A:FF:4D:4B:6E:1B:28:89:37:2D:FC:27
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 01A172B80E1C74FD81B68744AA314273B689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 113E
Signing time: Sun 25 Oct 2026 11:00:27 +0000
Manifest this update: Sun 25 Oct 2026 11:00:27 +0000
Manifest next update: Mon 26 Oct 2026 11:00:27 +0000
Files and hashes: 1: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: h0gT+2Gvi36gpcmq3GnebobJCGrhnvh/szO7fC+hqp8=)
2: fSZZKOuB5KK-se0CvAX2ai3vIes.roa (hash: 41qoR63pBaesV73QkxPPfyJWZIs0CCnXJTfBdkmKA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:b8:0e:1c:74:fd:81:b6:87:44:aa:31:42:73:b6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Oct 25 11:00:27 2026 GMT
Not After : Oct 26 11:00:27 2026 GMT
Subject: CN=2ba24d93bb6126532aff4d4b6e1b2889372dfc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:d3:b3:56:ff:54:06:b7:8e:22:c5:30:c7:
b3:d2:45:9e:4f:9b:d3:90:66:1b:37:1a:5c:1a:13:
1a:a5:40:b1:bb:2d:b3:57:b2:8c:be:b3:4a:b4:4d:
6d:e3:2c:9c:3e:7e:5a:37:17:70:d6:97:c2:a2:a8:
7f:24:25:8e:73:0d:88:bc:48:0b:64:d7:7b:2c:42:
98:8a:37:4c:92:df:30:6e:f5:23:bd:64:e3:41:3d:
43:9a:3f:b6:35:11:98:10:2e:99:52:ec:ce:e0:09:
68:57:3e:6a:74:a7:af:f5:9f:11:05:98:ce:9f:ad:
2a:a1:f7:a7:5d:e7:c6:77:fa:57:38:af:c4:43:84:
64:8c:ea:58:1a:c6:67:01:78:b3:ce:bd:f5:b5:bd:
c4:62:f9:45:be:d1:08:fe:a0:8e:84:fd:c0:66:bf:
b3:da:7d:0b:7f:7c:27:6a:d8:a8:17:18:45:6d:ea:
48:3c:22:6a:de:18:2a:bf:ed:08:e0:04:55:1e:71:
25:61:ab:79:6d:f8:94:20:b1:9f:d5:2c:23:74:1b:
2d:08:12:8f:6d:bf:15:48:f2:ee:93:1c:6e:c4:c9:
03:01:25:c5:df:44:81:db:b8:67:a2:dd:07:e0:6e:
82:b7:0a:3f:50:22:21:95:3b:fa:23:94:97:f5:66:
78:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A2:4D:93:BB:61:26:53:2A:FF:4D:4B:6E:1B:28:89:37:2D:FC:27
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ec:c4:29:46:b0:64:02:fc:41:3c:ea:b6:aa:df:db:bf:6f:
85:a2:00:92:8a:ec:ff:81:44:63:77:dd:95:37:a5:da:9d:ec:
36:db:0c:f7:9a:1e:2c:cb:fc:6d:9e:e1:fa:c9:6c:51:30:62:
a9:ec:b1:d0:04:0d:5f:d6:4c:fb:b5:ed:ec:6b:64:3d:db:b8:
88:2d:18:ba:56:56:fd:4e:e6:b2:d5:32:fa:92:83:02:33:9e:
03:c8:9e:4a:37:b8:bd:79:ff:55:2f:ea:aa:f5:68:c0:1f:94:
df:d7:c5:87:79:d3:9d:fe:65:85:6d:1b:d3:55:1e:cd:b7:9c:
60:3e:4a:73:26:92:c0:e4:2b:b6:d6:d5:8d:2c:3f:10:d0:ea:
21:e1:53:92:95:a2:52:37:e3:8b:3b:a9:c6:70:df:7b:3a:6a:
ce:53:9e:12:ec:a2:9b:46:46:8f:f6:b4:98:5a:6c:9c:12:4e:
8d:c6:27:00:67:b8:9b:bc:c9:86:60:4c:e0:d8:36:72:81:1a:
4b:89:0a:a6:41:ae:21:dd:ed:75:55:96:3f:2f:f8:c4:57:0d:
4b:a0:ee:6a:37:15:ac:b0:c5:6f:b4:aa:ec:39:f7:32:9f:c6:
4a:be:2b:5a:f9:0e:4e:e1:a9:9e:02:ec:57:fc:c1:68:13:9b:
4e:4e:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:25:06 2026 by rpki-client