Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: iQFwPlOtZ7Dw/anF/nA3zsKibXhrCM4pYAkDWjD0iAU=
Subject key identifier: 58:46:AD:A9:B9:8D:B9:16:89:1E:46:C3:BE:57:A8:05:72:88:07:D2
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 019E1EA35DA33574C8C58648467B89461C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 0B28
Signing time: Wed 13 May 2026 00:01:23 +0000
Manifest this update: Wed 13 May 2026 00:01:23 +0000
Manifest next update: Thu 14 May 2026 00:01:23 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: QYPtU1CnVnFng27gk4bFZtghPuwXfJYBhOzlT94uxbo=)
2: a8XnUOfpz8ZY7eKp-4bvRwhsoUk.roa (hash: ezF+mZ7l6Eoc1jbkNrsOHMCf2Y5Hcn8BAe23t9pa+WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:5d:a3:35:74:c8:c5:86:48:46:7b:89:46:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: May 13 00:01:23 2026 GMT
Not After : May 14 00:01:23 2026 GMT
Subject: CN=5846ada9b98db916891e46c3be57a805728807d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:97:0d:35:2f:79:99:c1:04:e9:90:96:5a:
e3:b4:95:c3:69:c1:9c:cc:bc:be:d4:3c:3c:b6:c1:
2f:78:e1:34:7e:38:81:3c:ba:4d:03:f9:2d:c3:bd:
4e:21:ba:b1:5e:be:0b:eb:d7:f0:46:76:32:e5:40:
25:f6:9a:24:84:a8:55:4e:2b:73:fa:e3:46:d8:57:
f9:cc:8d:fd:93:31:a5:56:77:29:ca:28:a6:2e:be:
74:6f:db:38:33:99:21:a3:39:81:45:57:63:88:bf:
1b:4d:66:10:86:45:f2:d4:49:8d:33:4c:90:3a:39:
5f:d4:9b:40:53:5f:77:27:b2:cf:a8:49:40:cf:cd:
ac:81:7f:6d:e4:ae:d5:b6:f5:0b:f1:f5:c9:22:6f:
a2:8a:43:06:13:18:71:fb:38:02:60:37:54:54:86:
8e:f3:c9:1a:5b:9b:49:e8:01:ac:6f:ee:85:02:17:
c9:96:b9:40:d0:25:fb:84:bf:a1:d3:49:22:a5:e9:
94:13:5f:df:90:07:6d:7d:c3:6d:b7:ff:53:83:91:
e5:ad:f6:44:26:8c:a0:3f:a6:34:1c:20:6f:42:f5:
ec:5c:7c:c2:7f:56:ae:40:99:c7:7f:e7:ff:40:d4:
b8:72:42:88:c3:f8:63:f4:60:8c:4a:bd:9d:2e:90:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:46:AD:A9:B9:8D:B9:16:89:1E:46:C3:BE:57:A8:05:72:88:07:D2
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:7b:27:56:12:94:8b:68:32:9c:26:a8:3f:4e:a7:88:52:a7:
44:da:fc:37:86:32:66:7f:66:25:4b:08:c6:ee:4e:a4:8c:a2:
e9:17:69:40:53:64:4c:54:92:f5:38:79:2d:cd:e3:11:60:2c:
dd:1e:35:dc:36:0e:d2:6e:fe:23:4d:70:fa:41:bf:72:36:d2:
52:dc:a1:e4:b4:64:8d:06:bf:12:80:90:98:b2:78:e2:fd:30:
a5:ab:19:31:81:a9:b9:98:df:55:82:44:bf:7b:9c:1d:d0:bd:
4f:e3:ac:75:2b:81:09:0b:5e:89:04:5e:77:48:3a:dd:5e:55:
b0:a0:69:8f:a0:33:bf:64:09:03:ca:57:47:78:21:0b:b5:23:
dd:4f:80:a5:85:b6:de:12:19:bc:6b:c6:03:58:cf:95:8f:39:
d5:43:93:a7:f7:52:99:05:ec:9d:b6:00:85:a3:fc:43:f8:d2:
dd:77:a1:ba:07:47:9c:8b:75:a5:a7:77:47:85:fc:28:f0:7c:
22:c7:04:53:a5:34:90:9c:21:aa:fa:c4:bd:3d:5c:5b:27:e0:
3f:56:d5:90:c5:36:16:41:98:db:27:c3:c3:b9:71:f4:c6:d3:
93:c9:42:ba:c2:98:63:6e:83:46:40:fd:07:f5:63:a7:ef:cd:
9c:eb:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:03 2026 by rpki-client