Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: wm8RAh9lzsp+kXOfBcXOavhpw6T+5ASS+ZaDfwV0qcU=
Subject key identifier: 73:29:3D:AD:93:30:AE:5D:2F:3C:0E:A8:32:D3:0D:C6:AB:7E:6B:1A
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 019D28BB67E8C5E24A6929183CB65A3989EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 04AD
Signing time: Thu 26 Mar 2026 06:01:03 +0000
Manifest this update: Thu 26 Mar 2026 06:01:03 +0000
Manifest next update: Fri 27 Mar 2026 06:01:03 +0000
Files and hashes: 1: 7jGC3eByRg_Kov58Z9afFa1zFhk.roa (hash: 01p3EgWoHQZuC7lRAyeIevnlE5QEkxh9vvqWiCkIFPs=)
2: JiK8psPNS7Q8TSWjkJH1pP9BmF8.roa (hash: 3M1URB5bq4S79c9mtyyaPbUG6/SErUNxltBv4XVCKoY=)
3: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: ueM/mVlU0/QoQNLMMkSgHzHsBfBQQiZL9wPNJhLh96w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:67:e8:c5:e2:4a:69:29:18:3c:b6:5a:39:89:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Mar 26 06:01:03 2026 GMT
Not After : Mar 27 06:01:03 2026 GMT
Subject: CN=73293dad9330ae5d2f3c0ea832d30dc6ab7e6b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:4a:f1:12:92:3b:05:10:05:ba:fa:c9:83:
b0:28:8e:1d:55:93:ff:c9:f9:bd:73:04:61:ae:89:
79:7f:ee:36:80:62:ea:9e:47:51:32:64:13:6c:b5:
b7:36:c6:5a:0c:dd:da:ff:52:dc:5c:ce:03:86:41:
2b:ce:ea:e9:16:e7:21:93:1c:5d:52:87:06:bc:7d:
e6:95:38:90:dc:e0:dc:70:a3:fa:84:b6:6e:01:5e:
c5:ad:1b:98:3a:97:27:cb:20:ce:ff:7f:29:e6:34:
b8:7c:e5:c2:e2:ce:f5:0b:fb:49:05:67:4f:6b:0f:
24:ee:55:c4:4c:6b:f7:8a:6a:50:42:66:a0:63:ba:
92:54:4d:43:4a:d1:45:7f:0e:1f:a7:d0:1a:7c:83:
d1:e0:5a:de:75:88:0e:a3:01:64:75:f5:aa:77:3a:
8c:1c:6b:14:b4:f6:67:55:9d:53:0c:f4:67:99:bb:
af:f7:3f:07:3d:98:aa:c1:c6:0b:02:cf:76:5a:68:
1b:d4:79:bd:52:bd:91:5d:6f:02:5c:ac:3b:b3:2d:
6d:8c:5f:8f:7d:5e:91:64:35:6f:64:d9:42:66:8e:
81:f9:34:38:51:e8:e3:bf:76:49:7d:e0:ec:ee:27:
42:75:db:c5:d1:fa:3e:52:2f:ba:e3:7c:81:67:9f:
0b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:29:3D:AD:93:30:AE:5D:2F:3C:0E:A8:32:D3:0D:C6:AB:7E:6B:1A
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:03:f8:f9:0d:05:cf:a1:19:8e:81:88:e6:31:3c:51:83:69:
b3:b5:64:60:f7:3e:57:3d:b7:a1:40:ab:05:b1:69:39:8a:56:
2e:ea:1a:7c:cf:9a:a0:99:e2:d0:72:24:54:6d:f6:2d:b3:7a:
e7:1e:9e:93:cd:61:de:d2:09:51:4a:3b:1f:05:6b:9d:67:e8:
15:e2:cb:73:31:79:fb:72:89:8f:b8:26:c1:09:ef:1f:f5:88:
5d:38:c5:c9:c7:7f:95:a4:dd:e3:cf:88:60:a5:49:1d:dd:49:
a7:00:4f:98:4f:5e:a1:54:1d:47:00:2f:55:08:8a:ef:e4:05:
0e:ff:76:82:63:61:79:b6:34:da:03:f2:dc:b5:28:c2:ce:ab:
ee:88:e1:20:84:d1:85:c0:36:88:74:38:83:73:60:12:55:16:
ac:13:ae:b7:a8:d2:f6:63:76:52:5e:08:a7:c4:49:2e:02:39:
bc:23:b3:f4:39:b7:f7:87:3a:ce:b0:cd:b6:18:e4:9d:c6:8b:
23:e8:8b:f3:24:bb:91:23:0b:e5:87:bc:c3:84:8f:d7:ae:73:
2b:d5:83:ef:ee:c1:f6:d9:3a:8f:36:6c:f3:7f:20:46:59:ba:
3f:c1:4b:fd:57:fc:b7:96:8a:99:fa:9d:2c:3d:d0:08:f1:e3:
ed:a1:55:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:58:55 2026 by rpki-client