Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: 7ZNYtLa4pEOnk8er049LyhDHls8Ws+1b4Wy4AqIEhag=
Subject key identifier: 00:19:C5:80:21:19:A5:FE:0C:EE:97:F0:AB:E8:55:0E:E2:60:D1:58
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 019D26CD6E73B192AFF2BCB0C1C25E43203E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0DA9
Signing time: Wed 25 Mar 2026 21:01:30 +0000
Manifest this update: Wed 25 Mar 2026 21:01:30 +0000
Manifest next update: Thu 26 Mar 2026 21:01:30 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: JmFINvugCiDqTab627+PQnNDvUNmfVUQFEeOr590xSg=)
2: UFBgy25q3CguK3nxfqwvatepW1g.roa (hash: m6Q6Vl1NfvutDppfODeVLNYdAatkJRM43X4ANyU2Y1Q=)
3: opow8uP9IKSNWNqVgii4cTwADfA.roa (hash: +b/EweslPo3iR9ssvZX7aiO4HVHajEP37IxcMi09yZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:6e:73:b1:92:af:f2:bc:b0:c1:c2:5e:43:20:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Mar 25 21:01:30 2026 GMT
Not After : Mar 26 21:01:30 2026 GMT
Subject: CN=0019c5802119a5fe0cee97f0abe8550ee260d158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:25:74:aa:f2:0d:5b:b6:e6:f2:3b:5e:2f:
39:53:31:a9:90:f6:05:72:f3:49:49:21:ca:87:96:
ec:6d:49:cd:ae:c4:ef:66:36:cf:77:68:de:df:f4:
84:07:ce:96:6a:55:52:fd:60:99:08:00:3d:6a:7b:
c3:e7:a5:44:37:f3:cc:ed:39:24:70:1d:b9:e9:3a:
7c:52:78:81:05:f2:23:4f:40:9f:54:de:05:65:9e:
2d:63:be:4c:b1:07:83:3e:83:5d:45:0a:c6:07:59:
3f:c7:e1:97:f0:22:b8:29:37:34:36:96:e6:69:37:
23:da:4c:c1:2f:b7:34:77:de:c7:ed:40:4c:e6:41:
ce:db:3e:d4:8d:78:af:1e:fe:35:58:f5:5e:62:c2:
81:46:fd:20:6d:07:a7:bc:4e:3d:a3:4c:23:ac:b9:
f9:4b:e1:d8:76:50:52:13:0f:6b:e4:f4:ec:cd:b6:
24:fe:79:12:f0:d4:f1:a6:70:b5:63:00:e4:7a:fc:
82:c9:06:6c:7f:d3:86:da:59:b9:38:f9:92:fa:56:
ca:30:55:52:c0:0b:7d:f9:ba:62:ae:38:cf:d7:b8:
23:ef:86:55:7b:00:05:8a:e3:c8:3d:0e:6b:3a:2d:
0c:de:b9:72:47:46:34:a8:c9:f0:f0:79:64:2d:9c:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:19:C5:80:21:19:A5:FE:0C:EE:97:F0:AB:E8:55:0E:E2:60:D1:58
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a3:24:28:c9:95:cc:aa:e5:97:be:9a:00:ae:84:5b:c5:df:
34:93:2b:10:be:65:9e:84:c1:36:76:b9:c1:66:69:29:c7:13:
0c:8c:b5:70:4a:0c:11:00:6a:14:bf:be:b7:10:8d:59:53:a9:
42:5a:10:d9:9c:78:46:f5:a1:aa:23:40:74:72:3c:5c:e5:ab:
71:37:64:60:9d:9f:9b:7c:0b:0b:af:54:c9:a1:71:75:3c:5a:
51:fe:bc:59:ac:b6:40:cc:2f:36:94:0b:d9:21:9b:fc:de:a5:
93:d3:ef:7f:bb:ff:c3:65:59:3e:6a:31:de:37:8d:2b:d0:7e:
be:ad:20:4d:9d:a3:d6:a1:23:60:41:72:f6:b9:50:74:b5:cb:
d5:9a:2e:02:92:b4:db:7e:83:90:ee:e7:28:a3:c5:8f:21:a8:
1c:43:a0:40:fc:15:5d:a4:32:7e:e0:16:d5:d3:1e:f0:8e:72:
81:a6:ed:ef:e1:69:1b:0d:22:a0:d0:23:84:c0:c8:13:ba:80:
11:65:41:cc:c1:2d:1f:d1:af:b8:41:4a:be:5d:e7:69:ce:c5:
bc:50:67:0b:96:60:c4:05:07:c5:fd:2e:53:d2:cc:c7:1a:9b:
3d:70:20:6f:13:44:20:cf:bb:51:ac:9b:65:37:b0:d4:f1:68:
d3:fc:57:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:37 2026 by rpki-client