Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
File: oiw84jcbnyHFfgw6V4fZWnNctQA.mft (raw, json)
Hash identifier: s0lM9WXEJckiRudBF07/ZFDc0ITs01oYT+ZMUMbsVzc=
Subject key identifier: C2:8B:55:CE:35:51:2C:56:EF:B5:06:0D:B4:31:16:86:5D:55:D6:EA
Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Certificate issuer: /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Certificate serial: 019D28BBD18CDB78DB90B3F1FD71633E164B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 06:01:30 +0000
Manifest this update: Thu 26 Mar 2026 06:01:30 +0000
Manifest next update: Fri 27 Mar 2026 06:01:30 +0000
Files and hashes: 1: Kva8pOVZlkquTrmEhbp1bVFcO6k.roa (hash: RxzZTraMVAKkP8ewUU+x3bHJ3Ubv/2C3lu8vqzkWAJU=)
2: oiw84jcbnyHFfgw6V4fZWnNctQA.crl (hash: h0Ei3sg6obDLLcE7S0RfsHQKh7tAQ69hpY4mvnvLYR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d1:8c:db:78:db:90:b3:f1:fd:71:63:3e:16:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Validity
Not Before: Mar 26 06:01:30 2026 GMT
Not After : Mar 27 06:01:30 2026 GMT
Subject: CN=c28b55ce35512c56efb5060db43116865d55d6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:08:bc:3d:61:a6:b6:5e:76:81:aa:0f:93:
83:5b:c3:47:95:5f:13:74:26:27:da:84:a4:39:a8:
d2:c3:8c:82:54:5b:bc:d3:c5:bb:5e:5b:98:07:3a:
e5:38:c4:e4:f9:1e:5b:89:15:eb:ca:ad:9b:b2:34:
75:8b:91:6d:26:25:28:89:13:10:d5:0a:22:ac:1b:
ef:7f:fa:05:73:e5:46:d8:35:a2:30:89:79:bf:bf:
f0:07:2e:d6:34:16:02:90:8d:4a:12:1e:79:85:80:
ee:4e:31:8b:0c:ae:9a:8e:2f:47:cf:e6:5f:97:23:
c3:5f:1c:92:a8:df:8e:c7:64:fc:b2:a5:73:9a:7f:
13:ff:33:b8:5d:0b:a0:5b:40:01:3d:90:30:44:91:
dc:0d:dd:c0:d0:38:7d:05:a5:a3:a7:12:50:19:48:
20:1e:95:06:23:f0:fd:d6:b6:a3:1e:e6:c9:ee:86:
d9:63:17:f6:71:a7:1e:45:30:a9:24:32:7f:2c:01:
d4:ba:e5:29:82:b9:98:9f:2a:56:f0:c2:a8:ad:68:
57:25:b6:c9:03:cc:5c:20:18:cd:b5:13:7f:f8:ed:
13:77:5e:73:bd:15:88:4c:19:bb:a5:de:33:51:d7:
89:01:26:3c:69:ff:9a:60:17:7b:d2:f7:1a:03:ae:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8B:55:CE:35:51:2C:56:EF:B5:06:0D:B4:31:16:86:5D:55:D6:EA
X509v3 Authority Key Identifier:
keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8a:8c:41:48:a7:80:e8:5a:d0:c8:c7:e3:53:db:fd:3f:13:
ab:58:1b:ac:16:59:30:8c:31:02:e3:21:8d:68:bc:50:ac:b8:
85:8c:98:c0:0b:5e:0b:50:f1:4a:ae:39:99:af:54:59:31:b9:
a2:e0:13:22:6a:15:3d:a9:57:94:f4:b2:ee:17:ce:1e:e4:33:
21:a7:0f:21:8a:f3:a3:67:2e:93:18:a3:5f:d8:fd:16:9e:b7:
17:b9:63:cc:1f:0d:b0:0e:c1:ab:f6:ca:64:cd:d1:05:63:89:
94:8d:ba:a8:7e:88:f2:50:e7:1d:6d:bf:4c:a8:05:6a:25:1c:
9f:ae:81:0c:d0:cd:09:40:b1:41:33:ea:c7:d8:59:33:10:1e:
17:14:3c:fa:1f:d9:d8:d6:20:10:2e:a5:21:d4:e7:1d:d5:98:
7f:a8:a0:0c:5b:22:42:6c:8c:34:10:3a:78:3e:56:d8:cc:58:
49:0c:cd:41:a6:be:d9:73:3e:65:1e:64:0c:a6:28:88:1d:61:
86:e5:68:3b:78:96:93:de:47:39:6f:7b:2a:1d:b5:24:c4:15:
ac:78:c9:dd:ba:56:9c:10:1e:d8:70:bd:84:5f:15:bf:7a:fc:
90:7e:3e:d2:14:a9:32:1e:7a:ee:5a:ea:e5:bb:92:3a:a5:eb:
a4:f0:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:33 2026 by rpki-client