Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: G1ESQqyYVadcQWgE0UeZ2eI6neHqj4KfEjB1I4eails=
Subject key identifier: D9:D4:7B:95:22:B9:7C:CF:6C:44:A0:E8:59:DB:36:DB:F0:52:33:17
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 019D2583DCD4EB921C6433C5691FEDC3202F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 0824
Signing time: Wed 25 Mar 2026 15:01:31 +0000
Manifest this update: Wed 25 Mar 2026 15:01:31 +0000
Manifest next update: Thu 26 Mar 2026 15:01:31 +0000
Files and hashes: 1: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (hash: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: MrxUb/3U0vzYp9LzUoAcnCj+4JebR1QeN3wB+CjFB4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:dc:d4:eb:92:1c:64:33:c5:69:1f:ed:c3:20:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Mar 25 15:01:31 2026 GMT
Not After : Mar 26 15:01:31 2026 GMT
Subject: CN=d9d47b9522b97ccf6c44a0e859db36dbf0523317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:04:04:7b:65:5c:15:00:24:a1:44:21:a9:05:
c8:da:0f:67:2c:61:4a:6a:82:79:82:1c:bb:41:92:
0f:5f:81:69:e8:47:88:f8:08:58:d1:28:04:cc:d9:
f3:e9:95:8d:25:b5:ea:f2:32:83:d4:25:9c:2b:d7:
73:55:49:60:d6:43:ea:17:ff:2f:9c:52:28:79:23:
6e:f6:76:4e:19:88:ed:aa:91:3e:79:c3:2d:62:57:
7e:03:7b:12:46:da:09:ea:1e:4e:49:41:bf:b3:1e:
c1:89:41:28:7c:d7:b6:b9:57:16:7d:60:af:d5:b9:
9c:3a:86:bc:5c:77:0c:1f:8b:61:bb:8d:5a:dd:e9:
80:f1:69:55:a2:a0:df:b6:30:3e:cf:5d:6a:75:ad:
af:67:fa:db:c5:ba:16:70:f0:ba:34:3a:d4:a1:a8:
87:13:73:be:39:00:21:1e:5c:01:6d:56:c3:ea:5f:
35:e1:bb:f9:d6:67:76:17:de:81:9a:87:99:e7:54:
4a:b6:88:5f:13:be:6a:93:1c:2e:a4:62:56:4e:e5:
bf:ff:51:4b:ad:93:14:3f:83:a6:01:b2:f7:11:cc:
e5:3a:0f:be:2b:9a:f9:4b:6d:48:32:3a:85:51:4a:
a4:dd:26:7a:a4:d5:7e:e3:b2:09:4e:0a:50:1d:90:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D4:7B:95:22:B9:7C:CF:6C:44:A0:E8:59:DB:36:DB:F0:52:33:17
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7e:af:41:68:3f:57:08:68:2a:a2:b3:1b:e2:0f:49:d3:79:
94:0e:a1:24:cd:e0:bd:f1:48:09:4b:3c:40:8c:ed:57:0b:d1:
74:0e:15:bb:cd:f8:be:19:8e:c5:53:bf:f1:10:48:3a:77:a1:
ff:0e:f6:73:6c:7a:cf:8d:b3:7c:3f:f5:da:81:39:be:b1:d3:
69:75:ab:1d:91:13:49:b7:e4:76:79:3c:f4:97:c7:f9:ff:d1:
06:c5:75:98:d0:66:b0:2b:bd:35:a1:1d:a4:ee:6e:42:6a:26:
d7:ef:4a:34:e1:88:70:36:b4:66:fc:10:e3:93:33:c9:fa:7f:
ac:aa:27:90:f0:5f:23:3d:94:29:b3:d3:b4:f9:c0:1f:cb:33:
81:92:07:aa:c2:f7:29:82:c5:89:52:f4:cc:46:6e:74:93:d2:
f0:d9:f9:ef:51:47:ee:1e:33:11:da:6d:c7:31:b4:71:f3:86:
9e:8f:6a:c2:5c:2d:02:63:21:b6:c1:9f:48:39:32:36:24:bd:
38:02:6e:50:f0:f6:b7:7e:9d:32:32:6d:30:83:29:e5:3c:e9:
09:6b:d8:01:f3:4d:c8:37:be:95:61:04:f1:13:7a:93:d8:35:
d9:2f:66:77:4e:46:f1:cf:21:fa:2b:a6:78:da:a9:20:d5:31:
e5:c9:aa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:30 2026 by rpki-client