Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: uW09OwbRUGYYCXiM84Y4p4NM0hK9YBllwAuY2NYzfSw=
Subject key identifier: C9:3D:1D:66:65:E7:D7:48:57:54:1F:0D:E4:B7:AC:12:65:4B:C5:6F
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 019D26287A0FCB7E3BA367FC835EFD6BBC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 0F9B
Signing time: Wed 25 Mar 2026 18:01:20 +0000
Manifest this update: Wed 25 Mar 2026 18:01:20 +0000
Manifest next update: Thu 26 Mar 2026 18:01:20 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: N/Rx7AXKz5YZqlZY0Iq/JHE8IhvJLu5aeS0eVw4+pk0=)
2: cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa (hash: kFvba9VnGvbidEsHHI8Wcjcp/+eUykc2W3uRbNK02kM=)
3: qjdtJXvKqrFdakYUQsqmx-Vy5fY.asa (hash: 2+W615O+Y4gCKbasO+JnvmCUxJ0u10AqlRNALnO9hbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:7a:0f:cb:7e:3b:a3:67:fc:83:5e:fd:6b:bc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Mar 25 18:01:20 2026 GMT
Not After : Mar 26 18:01:20 2026 GMT
Subject: CN=c93d1d6665e7d74857541f0de4b7ac12654bc56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:bf:39:2e:53:73:88:6d:51:6a:a7:a9:17:
59:a9:a7:7f:fb:56:07:40:35:86:4a:10:96:79:fb:
5a:94:cd:00:0c:67:74:f4:d7:04:12:3d:a6:55:37:
59:dd:d5:47:94:96:e6:e7:dc:12:9c:39:44:3a:56:
1b:4f:cd:59:69:95:f1:40:bf:1f:e5:16:6d:7e:d1:
76:45:d5:4b:c0:d5:11:58:02:84:28:51:b0:76:9b:
69:ad:2f:ae:fb:b9:0b:fa:c9:ec:eb:cb:cf:19:48:
a7:8c:69:da:e2:7c:c2:b5:70:46:20:bc:3a:d5:76:
cf:fd:27:44:c4:07:7d:38:9a:62:36:0f:e0:cc:a5:
92:32:7f:06:c8:79:9c:d4:83:c1:b2:31:da:5c:0b:
92:06:8f:cb:85:de:bf:41:fc:ce:0d:11:25:f8:93:
42:b3:69:4e:11:bf:f1:97:68:7d:68:67:d9:29:66:
34:7f:02:d9:72:3f:46:e5:c8:bc:1f:b8:14:2d:77:
6a:fb:a0:d1:e8:67:11:f1:89:0a:54:ea:d1:ba:a0:
10:22:c4:e2:3e:69:8b:d1:0a:bf:03:dd:7f:e5:eb:
d7:67:50:04:08:0b:43:5a:e2:44:9c:75:3e:96:08:
5a:fa:22:8e:3d:7f:d1:f0:2e:e5:f7:24:63:1e:de:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3D:1D:66:65:E7:D7:48:57:54:1F:0D:E4:B7:AC:12:65:4B:C5:6F
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:38:6a:3f:46:32:e7:28:2b:98:0c:bb:93:31:62:af:b1:ea:
48:8a:72:cf:0f:90:60:5d:a5:e9:5a:7f:3e:1b:e5:05:cd:f1:
b5:b4:8a:34:46:89:24:4f:6a:b3:47:b0:99:b2:24:db:da:87:
bf:e1:7f:ef:81:8b:a2:ed:25:5a:ff:4e:b0:58:89:ce:a4:e6:
29:ef:07:4e:65:dc:20:60:51:86:07:2f:1a:f2:9a:b0:fd:ce:
8c:26:04:f2:a8:fb:39:34:bd:8f:42:f5:e9:9f:71:26:fb:a9:
b5:db:2f:40:bf:42:63:22:cb:3a:fd:53:14:89:41:7b:85:ac:
67:28:dd:40:d5:33:2f:50:2d:54:7a:ca:95:4d:da:3a:8a:c1:
8c:ea:f2:2c:d7:7b:e7:93:42:21:1e:b0:1c:f1:9a:b1:88:3c:
f6:d9:80:81:f2:a6:9b:3b:96:f3:35:9c:29:df:6c:f0:bd:1d:
29:14:18:32:37:f5:75:7b:ad:30:a6:f0:c6:88:c9:f4:36:3a:
54:4d:b4:75:6c:a4:d4:c7:09:f9:13:e0:d4:7b:7e:eb:c6:de:
4a:6b:f4:2f:04:b9:6d:4c:21:25:20:85:8e:86:18:b7:2c:ac:
d1:08:f4:c2:cd:22:c2:21:78:ee:71:c9:21:c9:cb:8c:b4:3f:
8b:a3:0e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:17:40 2026 by rpki-client