Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
File: oab8cmK6eC3V9kMIWYK102cD2_s.mft (raw, json)
Hash identifier: PeVr4lOwE9imKMGRfeJENGdHsmGevqlqRMI7W0PX7zg=
Subject key identifier: E4:32:34:78:53:37:10:E7:6D:9A:84:C1:10:B7:EA:55:0A:10:A1:AF
Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Certificate serial: 019D284D55EE296295928CC15ACF87D528BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
Manifest number: 1470
Signing time: Thu 26 Mar 2026 04:00:50 +0000
Manifest this update: Thu 26 Mar 2026 04:00:50 +0000
Manifest next update: Fri 27 Mar 2026 04:00:50 +0000
Files and hashes: 1: 1Pk2KOHLdvr4CicnUNuBzH_2gyo.roa (hash: MhgKH4XXLplgDoi9ekQYp8OVpGYhKa65h2GVlb4h3zY=)
2: oab8cmK6eC3V9kMIWYK102cD2_s.crl (hash: Qf++OasYBheeYFczLWG+DVXfObkw13IwGvMFy7Sw6yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:55:ee:29:62:95:92:8c:c1:5a:cf:87:d5:28:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Validity
Not Before: Mar 26 04:00:50 2026 GMT
Not After : Mar 27 04:00:50 2026 GMT
Subject: CN=e4323478533710e76d9a84c110b7ea550a10a1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:f3:38:1e:51:09:1a:e9:d2:83:e4:c1:31:
75:06:22:e0:d0:fb:28:58:a6:b8:76:c7:1d:08:49:
9e:0c:99:33:cc:b0:2b:13:17:c6:97:03:6e:e4:38:
e0:8f:8e:b7:ff:5d:28:34:47:33:ad:18:ed:37:14:
a7:cf:26:2e:50:80:cb:c2:2b:63:c7:a4:de:0e:32:
76:a0:f0:6c:cc:d9:5b:28:5f:88:af:18:64:25:4e:
26:4a:05:a7:35:5d:ee:86:b2:9b:94:73:30:3f:48:
62:42:5a:eb:04:e1:94:1f:4a:6e:47:30:1e:d6:bd:
5e:16:5e:ec:b2:2d:13:59:73:c3:a5:85:cd:a2:c2:
90:0d:be:4d:6c:35:3e:b3:57:c0:dc:0e:34:14:37:
50:e7:a7:8a:77:60:56:8c:67:7c:8d:a5:60:93:04:
21:97:b8:f9:80:c0:f7:24:96:2e:50:99:80:5f:d9:
49:f7:e6:b4:4e:d1:09:c0:92:ab:b9:4f:03:b7:1b:
df:eb:66:db:7e:28:50:c9:40:29:6b:5f:3c:76:f8:
55:d9:e6:c2:15:ed:da:c1:a1:e9:97:36:19:bc:d2:
d7:f8:19:10:d1:a6:c6:d8:db:24:49:5d:86:9f:ab:
ae:31:44:35:62:45:6e:87:82:c0:80:d0:91:55:b7:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:32:34:78:53:37:10:E7:6D:9A:84:C1:10:B7:EA:55:0A:10:A1:AF
X509v3 Authority Key Identifier:
keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5b:6b:8c:f8:b6:9d:b2:43:2f:b8:63:6f:66:42:ab:41:e0:
82:4d:7f:20:a3:38:c4:cb:6b:cf:c0:ba:0d:a3:42:5b:87:73:
c8:23:f9:5e:54:1f:5d:1f:6b:cb:80:b6:99:4a:db:68:b5:62:
a9:65:ee:fc:eb:41:2e:00:f3:c9:e4:ff:45:33:4f:98:b9:66:
2b:ee:18:fc:8d:b7:ab:a4:b8:f2:37:a1:84:31:f4:a3:4b:a5:
c8:88:b9:1b:ba:04:dd:a3:1a:0e:8d:1c:72:e2:06:e5:b4:55:
65:fe:b7:5c:6c:b4:a7:00:79:7b:36:d1:54:9c:1a:ec:c4:ec:
93:ae:90:f1:1d:31:76:21:79:59:34:06:45:48:92:a4:25:13:
61:de:d1:1c:ae:90:d9:c8:6a:ae:f3:cf:4b:89:bc:34:21:cf:
55:82:74:99:ae:1d:61:5f:f5:e4:17:f8:e1:0f:84:10:a6:cd:
f7:42:c8:12:9e:0e:72:b5:dc:3b:d2:22:61:cf:87:a9:34:f3:
3d:60:10:7f:aa:c0:df:8c:fc:7f:53:f4:00:05:52:2f:9b:04:
1c:36:77:bc:2d:f6:23:91:39:59:ce:02:79:cb:99:51:2a:7e:
14:45:fc:f9:98:52:76:60:9d:6b:46:80:a2:aa:c1:e2:2a:07:
9f:79:ed:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:00 2026 by rpki-client