Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
File: OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft (raw, json)
Hash identifier: 5Laf7hC6R5uAcJazst53grLiOv2njZUqY7vgwTni3uk=
Subject key identifier: 7D:3C:A8:A2:D8:7C:2F:32:31:64:95:02:81:91:54:6F:B7:CE:44:EB
Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98
Certificate serial: 019D2816DB21D93F19376C18D03645BDAAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
Manifest number: 151B
Signing time: Thu 26 Mar 2026 03:01:19 +0000
Manifest this update: Thu 26 Mar 2026 03:01:19 +0000
Manifest next update: Fri 27 Mar 2026 03:01:19 +0000
Files and hashes: 1: 4l0Qm7hiBf49LBhzNTcelNcpnnQ.roa (hash: fwyySipc+KRVGtJdEtG/OeuQDdMJxdBVXvf+3AzPh0w=)
2: OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl (hash: 07US+1UiwVvU3rPy2NPb+FY2oPfMsSgCjNFmEj/I1aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:db:21:d9:3f:19:37:6c:18:d0:36:45:bd:aa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39abeb591716e908345d329fffd3700352315b98
Validity
Not Before: Mar 26 03:01:19 2026 GMT
Not After : Mar 27 03:01:19 2026 GMT
Subject: CN=7d3ca8a2d87c2f32316495028191546fb7ce44eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:e1:0e:91:97:10:1e:41:70:f4:cc:90:02:
d9:bf:4c:17:84:2f:a9:96:43:d2:94:7d:5d:c4:ff:
c5:d4:59:6d:8a:e5:c6:8d:87:ae:ca:8f:b0:3b:21:
79:71:9a:50:20:46:9f:e8:a7:05:b5:4f:c0:b2:39:
a7:93:7a:31:c3:fa:75:68:26:a1:6d:ee:35:aa:67:
c0:c7:d0:31:26:47:16:30:a2:23:dc:e2:5b:c4:16:
6a:87:74:b0:8a:1a:14:c6:94:23:5d:b5:1d:df:b3:
23:dd:66:ea:0c:b5:3d:01:57:bc:ac:bd:c4:4c:94:
ac:29:40:a7:63:75:c7:1f:39:1f:87:93:42:40:e4:
ad:6e:d9:63:fd:15:6f:99:97:6e:88:5b:33:6e:5c:
a7:66:73:27:78:b0:a2:35:9f:bb:07:81:12:9e:21:
4a:a7:b5:cd:0d:ef:5d:9b:05:be:1f:fb:4f:73:8d:
1b:6c:36:44:26:a9:8c:e3:08:84:09:aa:80:40:37:
11:be:6f:85:97:40:aa:9c:bc:ae:db:26:91:2a:1a:
c1:9f:61:7f:b0:9a:19:23:fd:2d:fb:bd:aa:49:ae:
e4:f4:95:08:82:43:a4:b5:6e:d5:dc:74:ae:28:f6:
62:09:02:7d:8b:e3:3e:8b:6d:cb:49:f5:27:24:de:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3C:A8:A2:D8:7C:2F:32:31:64:95:02:81:91:54:6F:B7:CE:44:EB
X509v3 Authority Key Identifier:
keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d9:b9:b6:c0:2a:f7:4a:aa:fe:ef:4c:23:8d:a7:1b:fa:1f:
f4:16:f7:e7:19:99:98:fb:44:9a:ef:df:6c:87:c3:14:dc:4f:
b5:f3:5b:87:e9:82:bb:e7:a9:fb:ef:67:3d:28:62:b3:ac:93:
43:ba:96:53:48:38:f9:a7:0f:09:2d:63:08:21:8e:24:db:84:
1f:b6:e9:bf:95:af:e9:1f:82:5d:07:c8:d5:fb:0c:29:07:92:
0b:e7:5c:7d:92:ab:9f:50:a6:3f:67:4f:7f:c9:97:b5:66:ff:
1b:13:e8:d4:a5:d8:34:cf:54:fa:4b:6d:c9:d7:8f:4a:02:05:
10:15:ed:73:79:b9:98:ef:f8:bf:51:6b:5e:48:9f:6b:9a:65:
50:11:98:3c:83:17:cb:96:ed:46:9f:6a:ce:1c:67:ca:c4:16:
4c:da:71:b3:2e:b9:06:cb:33:54:eb:37:0e:38:7c:99:1f:61:
c8:74:37:57:81:e5:b8:a0:47:f4:6f:47:a8:3f:fe:e0:57:e8:
57:c8:f2:8a:6a:8a:27:e0:05:23:6e:b5:02:27:ef:a4:cf:c5:
61:40:73:a4:6a:09:e4:56:78:f0:70:c8:b4:d7:ce:42:f1:ef:
2d:f5:4a:94:d7:83:5e:98:96:91:81:c4:da:99:44:f2:71:90:
86:43:58:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:55:04 2026 by rpki-client