Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
File: OAonDZR7c0BD17LSUhTx3DDwEd8.mft (raw, json)
Hash identifier: Pf6E0/In2FVWyL5hJU8XJ6DFAOIDuHfwuN4F8mYcTvs=
Subject key identifier: FB:D8:60:87:60:F0:94:05:3A:B0:31:6A:06:60:4E:D0:D1:04:78:58
Authority key identifier: 38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
Certificate issuer: /CN=380a270d947b734043d7b2d25214f1dc30f011df
Certificate serial: 019D265F49B14BAE984A5981B9ADC9B0A624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
Manifest number: 87
Signing time: Wed 25 Mar 2026 19:01:12 +0000
Manifest this update: Wed 25 Mar 2026 19:01:12 +0000
Manifest next update: Thu 26 Mar 2026 19:01:12 +0000
Files and hashes: 1: NxhSUvfOXXEFbfZPGuAjsjHBuoA.asa (hash: lQuAqzmZHKPPnlJhgUigZTqLHkETETb1Ge6jDBuicw4=)
2: OAonDZR7c0BD17LSUhTx3DDwEd8.crl (hash: 5t3BX0Y3r+GrvaKmY6vRs+biK22248I74PLp7TW+M/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:49:b1:4b:ae:98:4a:59:81:b9:ad:c9:b0:a6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380a270d947b734043d7b2d25214f1dc30f011df
Validity
Not Before: Mar 25 19:01:12 2026 GMT
Not After : Mar 26 19:01:12 2026 GMT
Subject: CN=fbd8608760f094053ab0316a06604ed0d1047858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:28:93:4a:1f:df:38:0f:bb:39:1f:cd:49:
29:59:88:c0:1a:75:d4:e8:3a:a9:71:16:2c:f8:d6:
93:cc:f7:c8:f3:11:ff:e8:b4:dc:fe:9d:80:a4:62:
5d:50:82:65:01:17:1a:ce:fc:7a:97:72:f0:d5:3a:
65:ec:16:e4:8f:ac:d0:4e:3e:47:65:99:cd:c0:ad:
3c:3b:86:bb:03:a4:94:19:fb:11:49:18:24:67:c0:
e7:77:a4:01:29:92:33:bb:1a:db:85:f6:e4:25:2c:
64:2a:e8:28:9c:78:f5:94:54:36:a0:c8:c1:89:b5:
31:72:52:1e:5c:ec:55:e3:bb:35:af:1e:07:57:99:
f2:ff:8f:b1:cf:da:e3:c5:d6:0b:0e:4f:9d:52:71:
82:7c:99:44:bb:c1:c7:bd:fc:a1:12:8e:0b:59:46:
06:df:b5:af:fd:69:44:89:a3:1e:d2:01:af:aa:b6:
5b:35:96:fb:fc:37:be:20:6f:02:b4:dd:ac:52:07:
ea:de:e3:2b:44:a7:96:6b:7c:07:f9:1a:7a:53:7f:
75:6e:81:f9:7e:ae:bd:01:82:be:75:2b:99:b2:c4:
b1:5e:f9:0e:54:4e:f8:ee:3c:91:94:53:82:f8:1d:
e1:28:76:cd:77:98:6a:66:b0:bc:3a:b1:79:d7:c1:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D8:60:87:60:F0:94:05:3A:B0:31:6A:06:60:4E:D0:D1:04:78:58
X509v3 Authority Key Identifier:
keyid:38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cc:31:e1:3a:0d:d7:dd:61:65:2d:5d:1e:d5:fe:f8:f9:03:
ed:07:b5:bf:3d:e4:b5:e1:62:99:59:dc:23:0d:65:2e:e1:e7:
3d:7d:38:db:4d:3f:3f:2c:79:98:4c:35:43:99:b2:48:c9:e3:
8d:ab:09:08:01:1a:3f:3f:21:4d:6b:43:11:3d:f6:59:1b:f5:
ff:1f:ea:6e:a7:07:52:80:51:23:6c:3b:69:5e:09:4a:2d:3e:
aa:dd:f2:d6:05:fb:77:ee:85:83:ed:b0:fb:95:e3:b4:ce:49:
69:45:81:49:fe:51:44:ca:35:02:d9:f5:36:7c:ca:12:25:f7:
f3:30:d2:b6:9c:f9:1e:56:4e:c5:dc:ae:67:0b:0a:bc:bc:fc:
dd:e2:f8:56:e9:66:00:7d:b5:1f:f6:ed:64:8c:39:45:3a:d6:
1d:77:82:54:50:16:36:28:18:2d:36:96:2c:f8:c0:f4:40:c2:
c5:bd:d9:f2:01:01:e2:78:4c:b0:e3:23:46:1e:26:65:b7:d6:
5f:9f:02:61:6c:06:4c:4a:a8:10:a4:8d:db:5c:83:9c:c5:20:
16:00:38:a3:e8:fa:8e:32:f8:9e:4e:cc:dc:0e:a6:e2:51:d6:
0a:00:84:00:48:cb:a0:b4:50:8a:42:3f:25:17:e0:27:ac:65:
93:7e:11:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:47 2026 by rpki-client