Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
File: OXxQHi_zsKtTS0hMOpKNHwk10bE.mft (raw, json)
Hash identifier: 58aM/4dKXimdwcVqYbot86fR0fKKxHtJIh3L/N1FhBQ=
Subject key identifier: 2F:2A:80:32:12:E9:E6:18:96:96:34:E5:81:BC:F8:22:53:2B:D9:76
Authority key identifier: 39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
Certificate issuer: /CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Certificate serial: 019EC0A46EAF7233642875BDCEB4D0267229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
Manifest number: 01A2
Signing time: Sat 13 Jun 2026 11:01:02 +0000
Manifest this update: Sat 13 Jun 2026 11:01:02 +0000
Manifest next update: Sun 14 Jun 2026 11:01:02 +0000
Files and hashes: 1: OXxQHi_zsKtTS0hMOpKNHwk10bE.crl (hash: Rs+qzLC0Ads28MZYIZmgkhFzrk6ocAJi4GbwQukkZvA=)
2: gLMnpAvJYDZgw8CMi1ywBPu8HKA.roa (hash: HfvKqfxiDqSfDMKCc4gBb3RHAJZd+tjrpFoCaU5J9O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:6e:af:72:33:64:28:75:bd:ce:b4:d0:26:72:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Validity
Not Before: Jun 13 11:01:02 2026 GMT
Not After : Jun 14 11:01:02 2026 GMT
Subject: CN=2f2a803212e9e618969634e581bcf822532bd976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:04:82:9e:d9:d9:76:20:c0:a9:c2:dd:35:25:
98:cf:f0:f8:33:cc:bf:59:db:24:32:f1:d5:26:1c:
73:ad:d3:f3:3a:1e:1b:65:db:1c:2e:15:ee:7f:2e:
fa:97:b1:e9:7e:2d:12:21:e0:80:a8:5e:5e:1f:1d:
c6:81:71:00:c0:0b:27:1d:6e:02:53:3e:48:2d:85:
85:70:25:a1:69:8d:54:4e:8b:46:e4:f3:e0:00:51:
a2:41:d7:f6:4b:65:8a:a3:77:41:ce:a6:b0:c6:e6:
42:d6:98:a9:d5:a4:85:94:96:eb:4f:e5:79:da:d0:
5c:40:a3:47:26:48:4b:15:3e:b1:27:32:a3:0d:2b:
9e:aa:5e:d9:35:f8:a8:8d:f6:57:18:95:93:2f:09:
50:4c:cb:f0:0a:98:95:34:ec:43:0f:6e:2b:9c:50:
d7:e8:27:02:89:95:20:51:b9:15:7a:a8:6d:0a:2d:
2c:cb:d0:3f:8f:9e:37:4d:9b:50:49:86:28:60:00:
40:42:aa:42:8b:dc:f2:67:5d:cb:84:83:d5:b6:47:
0c:58:2f:18:4a:b6:a7:0f:5c:7c:3d:64:10:f9:90:
65:89:68:f6:90:b6:30:0a:ab:0c:c0:d9:02:f5:f8:
d3:fa:dd:87:36:60:89:35:d3:98:2a:8c:cc:9e:b2:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2A:80:32:12:E9:E6:18:96:96:34:E5:81:BC:F8:22:53:2B:D9:76
X509v3 Authority Key Identifier:
keyid:39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1a:70:be:a7:bc:20:e0:36:69:27:93:d1:6b:79:51:65:31:
24:c8:f1:06:cf:b3:2c:cb:91:fb:1d:d9:37:64:06:32:41:a8:
f6:e1:8c:0b:9a:31:4e:cd:5c:b3:4e:87:05:23:32:ec:1d:57:
58:10:d4:40:cb:6d:fc:c2:e8:1a:15:3d:be:57:c9:46:13:74:
26:8a:18:b3:97:49:41:f2:2a:29:07:b7:d9:4a:4c:4d:4b:71:
97:88:07:84:16:e0:37:c8:7f:af:cf:7e:fc:11:55:2d:9a:df:
77:b4:a8:3c:20:ca:c5:2f:04:ca:8d:40:1c:90:88:2b:ef:7e:
00:76:9b:a2:d1:81:13:03:4a:c4:3a:e4:07:bb:e3:e8:6b:5b:
92:77:c2:59:9c:b1:68:8f:f7:54:1d:26:4c:ec:a1:6b:0a:07:
6c:c8:85:f4:bc:3f:de:1d:a6:c3:02:f0:51:91:50:05:63:bf:
05:2b:65:a4:07:82:1f:72:f2:87:2d:38:ba:a6:1e:26:3c:f3:
ef:ec:fd:e7:27:83:ec:06:14:f8:f2:66:79:cb:3f:34:75:07:
99:38:0e:15:83:32:f3:69:cb:59:20:2b:b1:45:59:fa:f5:db:
41:cc:fe:e6:ce:15:0d:33:f6:ab:0a:d0:72:3b:fc:f6:d7:04:
fd:92:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:28:14 2026 by rpki-client