Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
File: OJDnpFSaVx9otoja1PXO2OUpBos.mft (raw, json)
Hash identifier: Yx6oim5/xQVZ07hN5PFBsdN5yi6g+UoNfNZas8wHmzc=
Subject key identifier: 8A:17:31:4D:8C:AC:5C:19:13:8C:15:51:72:6D:68:1A:9C:36:56:C4
Authority key identifier: 38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
Certificate issuer: /CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Certificate serial: 019D29970798D7E4661F1D457F00F184BB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:00:56 +0000
Manifest this update: Thu 26 Mar 2026 10:00:56 +0000
Manifest next update: Fri 27 Mar 2026 10:00:56 +0000
Files and hashes: 1: OJDnpFSaVx9otoja1PXO2OUpBos.crl (hash: XZ4ykTb74wC4Gy0b5nRhDgvhpeTotzboyZFSyzR6cVU=)
2: YyuaBUM2DfGwrhhloV5aHuzBCI4.roa (hash: CVz/owS5fTPJx5btZA+MB4GhmLyvwbOLmAgKI8HaW2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:07:98:d7:e4:66:1f:1d:45:7f:00:f1:84:bb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Validity
Not Before: Mar 26 10:00:56 2026 GMT
Not After : Mar 27 10:00:56 2026 GMT
Subject: CN=8a17314d8cac5c19138c1551726d681a9c3656c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:49:c1:3f:69:cb:1b:3e:6d:03:ee:c0:a8:
64:61:59:55:4f:51:11:54:f4:ee:9f:c1:df:fe:f7:
11:94:a6:c2:9f:0a:7b:55:88:08:28:8a:50:dd:c1:
76:75:8e:c2:6d:06:8c:41:b5:82:1b:96:8d:38:58:
0d:38:79:c5:34:38:d4:da:55:7b:5e:02:d3:47:78:
1d:e1:21:98:a4:c8:bd:e4:d9:54:d4:87:a2:78:c5:
34:1c:28:c0:f3:40:b2:50:37:6f:d4:2d:ec:04:fa:
b7:1b:b5:d4:3f:0c:20:2a:ba:0c:47:04:44:98:91:
d9:da:95:3d:8e:e7:46:37:37:d9:4b:1a:81:6b:23:
2d:33:22:57:0a:54:41:3a:bc:ae:ed:14:ab:fa:92:
51:03:5d:9f:27:85:25:85:99:76:39:f9:75:b6:0e:
bd:d1:a1:bc:3b:09:f4:1e:0c:c9:b8:90:a9:10:ab:
7d:e5:45:46:86:ab:e6:83:e7:3d:d9:45:a1:37:a8:
75:d0:10:2a:83:cc:9c:e1:ea:35:fa:d4:e4:e3:46:
8d:ee:13:36:47:2c:cd:c5:3e:8e:ed:95:f6:a3:9b:
89:86:e9:2d:5e:57:8c:2a:8e:92:a6:75:c1:b0:ce:
7d:48:de:41:75:77:72:f4:81:0b:d6:2f:5f:c6:5d:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:17:31:4D:8C:AC:5C:19:13:8C:15:51:72:6D:68:1A:9C:36:56:C4
X509v3 Authority Key Identifier:
keyid:38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4b:73:a7:86:ba:65:09:9e:09:ad:fd:91:1d:c5:a1:12:ba:
92:7d:6d:41:b2:71:8d:4d:e4:69:5b:77:c1:b4:10:a6:dc:dc:
81:da:37:60:f6:5b:1a:f8:9d:04:0c:92:73:ef:64:30:b3:da:
73:b6:5a:40:5f:c8:2b:46:4a:f2:31:7b:51:33:ae:22:d0:3f:
22:db:21:4f:83:aa:9d:41:75:9e:3f:9c:c1:c7:bb:e1:aa:4e:
48:a9:5e:da:48:3d:f7:11:ab:8e:86:35:f1:ad:91:0a:7c:64:
17:b2:d1:9a:b8:26:f9:47:ee:20:cc:bd:92:62:16:4c:9c:ba:
9f:90:cd:50:ba:6c:a0:62:92:e4:08:5b:d5:d5:05:a2:87:8f:
01:9f:3d:06:49:c1:99:35:fd:90:54:20:41:6c:0f:2f:f5:42:
f8:28:41:a9:0f:b6:3e:b8:5d:31:32:8f:45:6d:84:7e:4e:83:
20:d6:df:1b:99:08:37:69:7a:de:29:b1:b8:43:96:47:7c:35:
0a:56:0b:3d:03:ff:c8:26:d9:0b:95:09:04:10:5d:f9:81:13:
bc:d1:e1:f2:85:43:49:2b:20:0c:1c:bc:5d:5c:ff:e1:89:d1:
b0:84:c2:83:7a:b0:19:8d:a2:e1:33:9e:cd:78:20:d1:22:8a:
dc:67:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:47:59 2026 by rpki-client