Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
File: OXxQHi_zsKtTS0hMOpKNHwk10bE.mft (raw, json)
Hash identifier: rctznaxJpzsjCdwH1AmDxZ5Dudua68r/tsW/LjAOe7I=
Subject key identifier: 40:EE:79:59:B5:6A:7D:98:A5:79:9F:2B:DA:CC:CE:94:34:51:A7:FB
Authority key identifier: 39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
Certificate issuer: /CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Certificate serial: 01A0201E6DC48B216E8359FCCF405DB5E511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
Manifest number: 0258
Signing time: Thu 20 Aug 2026 17:01:00 +0000
Manifest this update: Thu 20 Aug 2026 17:01:00 +0000
Manifest next update: Fri 21 Aug 2026 17:01:00 +0000
Files and hashes: 1: OXxQHi_zsKtTS0hMOpKNHwk10bE.crl (hash: rty2ZLvz5uqyOUi2QTRhnkQcvpOo9SotpVKlz0p88io=)
2: gLMnpAvJYDZgw8CMi1ywBPu8HKA.roa (hash: HfvKqfxiDqSfDMKCc4gBb3RHAJZd+tjrpFoCaU5J9O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1e:6d:c4:8b:21:6e:83:59:fc:cf:40:5d:b5:e5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1
Validity
Not Before: Aug 20 17:01:00 2026 GMT
Not After : Aug 21 17:01:00 2026 GMT
Subject: CN=40ee7959b56a7d98a5799f2bdaccce943451a7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:64:8a:45:54:92:ef:dd:56:83:17:05:a5:
d8:4f:ef:8e:b8:7b:fd:ca:dd:55:65:41:1f:c0:71:
9c:4a:77:89:5d:9c:31:d8:81:73:a5:5e:eb:57:4e:
4d:7a:b9:87:63:9b:a0:52:81:92:67:79:d0:5b:be:
e7:27:e8:b7:7a:2c:fc:67:cb:aa:6f:81:3c:29:88:
2e:a5:21:fd:c1:6b:a3:c9:b5:20:f6:87:1d:ca:c2:
cd:27:e3:6b:2e:d8:a5:9e:29:1d:84:3f:a8:4a:90:
ea:b4:75:e8:be:62:9b:88:11:e7:81:82:41:75:ac:
a1:bf:08:5f:bf:b1:26:66:e6:4e:aa:6e:92:3d:f8:
b5:ad:5c:90:c3:ea:48:ea:37:c2:ed:07:bf:7f:d5:
4a:b9:87:88:cd:e5:ea:c4:bb:ec:31:15:e8:e1:db:
b0:f0:0c:66:4a:19:5d:c1:d4:11:17:72:6f:ac:9a:
9c:a8:a5:21:2e:e3:b4:61:39:f4:00:43:8a:d5:14:
34:42:ee:49:29:15:c0:03:aa:d8:9c:54:1d:13:54:
56:67:92:d6:9b:c0:56:5b:08:9a:25:9a:02:ce:a0:
c9:81:5a:b6:6d:07:dd:45:f9:e4:fa:60:3a:6e:89:
03:07:8f:b7:9e:79:2b:44:4e:cb:d2:d3:a4:92:23:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EE:79:59:B5:6A:7D:98:A5:79:9F:2B:DA:CC:CE:94:34:51:A7:FB
X509v3 Authority Key Identifier:
keyid:39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:17:20:ce:55:0d:41:67:29:66:d8:0d:42:fe:1f:65:87:3f:
b1:6f:e7:c8:e6:22:e5:8d:ac:b8:5c:f8:9a:54:a9:5b:c4:c6:
63:9a:a6:3f:99:b4:81:6f:a9:89:77:05:83:98:90:0f:83:a0:
9f:79:07:95:0a:ba:50:84:40:13:8f:43:dc:59:71:9e:4c:aa:
f7:d3:af:86:55:42:78:44:49:ac:52:2f:56:d2:07:f9:cb:48:
35:4a:82:4f:40:78:14:61:f8:3b:8a:b7:9d:c5:bc:03:17:6b:
96:96:8e:be:52:16:d8:0d:9a:e4:a8:40:78:9a:9b:07:2a:80:
3f:3e:eb:fb:4f:03:4a:59:64:af:41:ba:95:70:c6:06:f8:1e:
18:34:34:c0:33:4e:4c:51:a1:78:c8:34:e8:e1:c9:19:d7:ed:
12:23:94:46:cd:1f:4c:75:89:18:ee:61:0c:2b:8b:c8:f0:59:
8a:da:9c:aa:8f:fa:7f:5c:d3:53:b6:66:d4:59:54:1b:c2:c7:
0a:f5:d6:5f:45:fb:bf:74:11:14:17:2c:05:25:52:ce:a8:bb:
41:da:2f:53:fe:55:20:ae:3a:4a:52:d7:fd:98:54:9f:c3:11:
44:47:ad:b0:20:02:ea:89:91:28:5f:15:5c:dd:5e:eb:d5:5f:
08:2e:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:32:40 2026 by rpki-client