Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: iA+PnaJzpZKbjM0c1uCykqjVEEsu0FItMoRYerMuHNk=
Subject key identifier: 7F:AF:BB:9B:67:4A:50:BE:CF:D5:1F:F3:DF:ED:85:22:52:FD:A3:F4
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 019D2772576130DA0975C65A4650595E8A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 0AA8
Signing time: Thu 26 Mar 2026 00:01:37 +0000
Manifest this update: Thu 26 Mar 2026 00:01:37 +0000
Manifest next update: Fri 27 Mar 2026 00:01:37 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: cLvq9SEPnoHxLhHWa/aFbif1RyyNlj/oiCJpEGsjLzU=)
2: a8XnUOfpz8ZY7eKp-4bvRwhsoUk.roa (hash: ezF+mZ7l6Eoc1jbkNrsOHMCf2Y5Hcn8BAe23t9pa+WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:57:61:30:da:09:75:c6:5a:46:50:59:5e:8a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Mar 26 00:01:37 2026 GMT
Not After : Mar 27 00:01:37 2026 GMT
Subject: CN=7fafbb9b674a50becfd51ff3dfed852252fda3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:61:6c:48:23:14:09:77:18:81:08:a5:18:
75:85:fa:2a:de:4f:45:68:51:b9:87:d6:b3:fd:c8:
20:03:9d:0b:73:1f:3f:d4:94:f2:95:ba:dc:4b:90:
7f:1d:39:12:73:bb:c8:4e:51:3b:7e:e6:7f:a6:02:
07:fc:cf:a7:67:8e:ea:17:4a:58:de:7a:56:8f:bf:
f8:f9:1d:21:94:f6:46:27:72:85:cf:33:23:3a:ac:
82:76:43:58:d7:99:76:b8:bc:e2:75:ad:96:59:52:
cf:74:76:80:8d:4e:1a:80:f1:74:ba:71:66:52:dd:
59:13:a9:c1:75:ae:54:70:f9:c1:50:7f:e8:c5:2d:
81:00:70:83:4c:e0:c4:60:f1:9b:4e:ca:ae:55:63:
cf:6f:c2:a1:4e:6d:15:94:5e:59:02:89:b8:e5:56:
00:07:d8:ad:03:8b:70:32:0e:45:82:66:d9:85:48:
ad:1b:e7:20:55:4d:01:f3:5e:c6:c9:91:00:7b:fc:
39:82:57:bf:65:07:30:df:9c:8a:c6:8b:72:e1:65:
a1:e7:03:57:1d:6a:f5:83:07:f2:f0:77:1b:82:a5:
15:52:12:6f:f0:b0:0b:93:01:e4:9a:9b:e4:98:bb:
90:12:9c:af:91:2f:4b:6c:df:15:5d:26:8e:8a:ff:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AF:BB:9B:67:4A:50:BE:CF:D5:1F:F3:DF:ED:85:22:52:FD:A3:F4
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:97:5d:ae:0b:de:8e:bf:f3:f4:00:4d:a8:e5:68:2d:e6:bc:
4d:55:13:68:6f:88:0f:a3:1e:2d:db:71:59:51:b9:ac:b9:24:
31:f6:fa:4a:7b:15:32:d5:2f:1a:10:7a:6f:03:7a:4f:b0:2c:
e7:04:a6:42:d3:5d:eb:63:c9:5c:13:e7:ed:3a:24:59:39:a1:
e2:61:0b:30:8f:10:89:93:ad:e2:ff:50:3e:94:98:94:5c:9d:
4f:3f:ad:0a:4d:11:7f:0e:81:60:37:cc:14:52:25:96:51:72:
fd:19:f4:0e:c9:c3:bc:ee:ac:8c:90:d9:c2:1c:c0:af:69:14:
19:a5:99:2d:4b:11:17:eb:68:db:6b:15:6f:ce:d0:1c:73:54:
e0:f0:a1:71:e9:cc:88:76:65:7a:79:87:48:8f:a8:ff:c6:27:
94:3c:65:bd:ef:a3:50:0a:84:9d:82:39:69:8d:8d:e7:59:a2:
ee:1b:c1:d3:0c:24:54:9e:31:cc:00:83:70:cf:0e:83:e0:45:
4b:01:34:47:d2:21:8d:0b:4b:31:05:79:97:34:62:3b:57:38:
a1:9a:d4:19:80:e6:dc:63:2a:e6:f8:e5:22:3e:5e:5a:84:4e:
7f:ba:6b:b9:33:e6:97:d8:e5:6c:f2:56:35:ae:48:13:33:f5:
bf:4c:2c:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncldhMNoJdcZaRlBZXoozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OTZkOWYzOTIwMWE0OWZhMTM2OTU4MmUxOGYxYTJiYjk2
NWIyODMwHhcNMjYwMzI2MDAwMTM3WhcNMjYwMzI3MDAwMTM3WjAzMTEwLwYDVQQD
Eyg3ZmFmYmI5YjY3NGE1MGJlY2ZkNTFmZjNkZmVkODUyMjUyZmRhM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvphbEgjFAl3GIEIpRh1hfoq3k9F
aFG5h9az/cggA50Lcx8/1JTylbrcS5B/HTkSc7vITlE7fuZ/pgIH/M+nZ47qF0pY
3npWj7/4+R0hlPZGJ3KFzzMjOqyCdkNY15l2uLzida2WWVLPdHaAjU4agPF0unFm
Ut1ZE6nBda5UcPnBUH/oxS2BAHCDTODEYPGbTsquVWPPb8KhTm0VlF5ZAom45VYA
B9itA4twMg5FgmbZhUitG+cgVU0B817GyZEAe/w5gle/ZQcw35yKxoty4WWh5wNX
HWr1gwfy8HcbgqUVUhJv8LALkwHkmpvkmLuQEpyvkS9LbN8VXSaOiv9LswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+vu5tnSlC+z9Uf89/thSJS/aP0MB8GA1UdIwQY
MBaAFDiW2fOSAaSfoTaVguGPGiu5ZbKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTIt
ZTgwYTA1ZTM5ZjRiLzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTItZTgwYTA1ZTM5ZjRi
LzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu5ddrgve
jr/z9ABNqOVoLea8TVUTaG+ID6MeLdtxWVG5rLkkMfb6SnsVMtUvGhB6bwN6T7As
5wSmQtNd62PJXBPn7TokWTmh4mELMI8QiZOt4v9QPpSYlFydTz+tCk0Rfw6BYDfM
FFIlllFy/Rn0DsnDvO6sjJDZwhzAr2kUGaWZLUsRF+to22sVb87QHHNU4PChcenM
iHZlenmHSI+o/8YnlDxlve+jUAqEnYI5aY2N51mi7hvB0wwkVJ4xzACDcM8Og+BF
SwE0R9IhjQtLMQV5lzRiO1c4oZrUGYDm3GMq5vjlIj5eWoROf7pruTPml9jlbPJW
Na5IEzP1v0wsKA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:11:07 2026 by rpki-client