Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
File: oikngd9NLEc3PD_fY_u8mSdL2ds.mft (raw, json)
Hash identifier: NVjWefDNpltJUfy2jrruOuaqQrMbgUe9aF7KSj7ijvk=
Subject key identifier: 5A:BC:CA:6D:AE:33:03:EB:36:3E:1B:5C:45:CC:79:A8:97:0B:5B:AA
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 019D29976838256A0FADF93771AC006C414F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
Manifest number: 4C
Signing time: Thu 26 Mar 2026 10:01:21 +0000
Manifest this update: Thu 26 Mar 2026 10:01:21 +0000
Manifest next update: Fri 27 Mar 2026 10:01:21 +0000
Files and hashes: 1: 8IaNzILRluMfhJGh9Sp2iK5EyEM.roa (hash: 3vEUGcIacC6NznoAP1opqDvHOyB7wnzG3LAD/dsWwPU=)
2: gD1shI7_ncKmAHHzuQDRToVphgs.roa (hash: b21XJdYw0N5m8mPRwkbYiHzi3HRna1r0I2/FnRhaR68=)
3: oikngd9NLEc3PD_fY_u8mSdL2ds.crl (hash: hGr0Ei8W/5afuDjDwqv31MwKU1ZFVuUdBZS7hrzfepo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:68:38:25:6a:0f:ad:f9:37:71:ac:00:6c:41:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: Mar 26 10:01:21 2026 GMT
Not After : Mar 27 10:01:21 2026 GMT
Subject: CN=5abcca6dae3303eb363e1b5c45cc79a8970b5baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:82:d0:28:be:33:e5:82:41:31:ce:a6:8d:
d7:9c:89:86:ea:4a:bb:86:5c:6d:76:10:5c:9a:ac:
20:8a:fd:a2:e0:8b:7d:2e:96:ae:fa:e9:5e:91:94:
96:7d:70:48:13:4c:db:03:81:0c:94:e1:d8:e6:47:
cf:94:53:fd:47:d3:bd:50:11:b1:45:5e:fa:a8:38:
34:eb:e8:4c:d3:fa:fb:e7:e5:8e:d2:f4:0b:2c:c1:
b5:fb:7e:74:c5:c4:72:18:89:11:ab:50:f3:4b:0e:
57:57:c5:ae:a6:5f:b7:4c:91:d8:a2:2e:7e:a7:d6:
d0:44:e0:c6:9c:9e:d0:d9:fc:80:11:ea:9b:46:5c:
d6:a6:bf:d9:fb:2f:de:15:6a:f1:36:cf:b8:53:a5:
4d:ab:fa:de:56:00:be:34:a4:66:ba:9e:3b:22:7b:
0a:23:ec:5d:34:d2:ad:d3:aa:44:48:89:bd:2f:a9:
4a:5f:9a:28:a1:0c:9f:17:81:2d:fe:3b:44:5a:b2:
55:24:50:01:c0:6c:94:f2:2f:89:be:17:dd:7d:15:
d1:f7:7d:3f:27:6e:ea:a6:f4:8d:9a:9f:55:e9:1a:
0f:19:ee:02:86:38:e9:06:5c:1e:75:01:63:88:9c:
67:a9:43:23:3b:d8:40:4c:e7:15:38:64:33:82:22:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:CA:6D:AE:33:03:EB:36:3E:1B:5C:45:CC:79:A8:97:0B:5B:AA
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:dc:a7:26:6e:22:cd:a5:55:22:c4:c9:19:85:98:70:27:84:
20:29:be:2f:1b:53:e0:76:23:51:7b:a1:b3:4a:1a:63:a4:08:
88:1b:0b:a0:98:89:1c:c2:2a:2c:93:86:33:c5:19:c5:3b:76:
c9:e8:4a:69:ef:a1:e8:83:0b:29:cf:00:d7:f3:52:dd:e5:cd:
42:91:b8:99:8c:c5:95:f2:71:8f:9d:cf:83:6b:c3:13:af:8f:
fc:4f:6d:d2:ab:ae:72:67:ba:b1:08:91:3b:96:25:b8:7c:32:
53:88:2e:4b:58:a9:86:3f:a5:7f:a3:70:ef:3d:66:c1:75:5c:
1d:99:7f:1a:4e:49:0e:f9:b0:3f:18:7b:70:61:9a:5d:3b:ea:
ac:97:c2:fa:20:05:c0:ea:73:42:e5:3e:d2:2a:98:ef:de:78:
2e:68:01:33:7a:99:54:ff:a9:2b:89:0c:ef:44:2f:04:f5:d0:
ab:28:9e:02:dc:ce:8b:af:b8:24:c7:f9:df:e3:7e:4f:c4:d9:
b9:ae:5e:a8:6a:a7:2d:07:6a:a4:fc:4d:75:ee:9f:90:0a:8c:
71:c2:4b:c9:d4:6f:8e:1c:c2:b2:c3:73:7d:42:be:d9:50:53:
4f:25:aa:dc:41:11:13:ad:1a:99:35:e4:73:65:61:ce:9d:6f:
29:db:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:31:37 2026 by rpki-client