Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: gvg6elZxzcUOaIJ3uuzJdIVGWbgxkCroQ01hJw1/VQ0=
Subject key identifier: 71:62:18:E5:C2:72:F0:FA:CB:B4:1C:3E:C0:A9:09:11:78:43:7B:83
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 019D269658115C941836E1F1F7982D13B3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 053B
Signing time: Wed 25 Mar 2026 20:01:20 +0000
Manifest this update: Wed 25 Mar 2026 20:01:20 +0000
Manifest next update: Thu 26 Mar 2026 20:01:20 +0000
Files and hashes: 1: AgJDjffcx13iFGg7O-6BTWa5Mi8.roa (hash: F0nKF0WSY8oAZJYmoA/vzmlCpRXcrLqKk16YPUwPz6o=)
2: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: 1p+mmZKn5OJIA+1ACl7CJQmAcgOEDze5WANi7Ch6yKE=)
3: _oWKFee77v9hsdPrrddU5tQ-R0A.roa (hash: RjU3IT8W3Ea39zUeKnm2sOei/TN9Q78ucxQb3LukHT4=)
4: xiMdBnBAVbzMONM7bWyZSTHXags.roa (hash: R9sPzPBlp0RJe+m5WxmViRNBW2hNOa0kbVaZ9zt/4VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:58:11:5c:94:18:36:e1:f1:f7:98:2d:13:b3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Mar 25 20:01:20 2026 GMT
Not After : Mar 26 20:01:20 2026 GMT
Subject: CN=716218e5c272f0facbb41c3ec0a9091178437b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d4:54:fe:3c:83:6e:01:b7:c0:d6:e9:28:15:
04:ff:8f:53:fb:62:13:09:1f:89:11:67:0b:4d:2e:
ca:dd:27:15:1c:88:ec:23:47:ff:63:ee:3b:10:7b:
e8:66:f6:da:92:ac:67:46:1e:b3:97:82:0d:65:fd:
8f:4e:c3:2c:4e:43:a8:eb:72:2d:63:69:19:dd:10:
ff:2a:46:a4:9b:57:45:89:1e:61:b1:80:4d:ce:2d:
62:e3:95:84:26:a1:7e:67:5b:d2:31:34:ef:56:a4:
83:70:d5:e1:a1:6d:d3:79:d0:ad:1e:22:49:3c:0e:
fc:a6:e5:eb:8a:4b:8a:c2:f3:89:f2:e9:31:b1:da:
8d:de:36:40:39:da:34:2b:4f:76:5a:91:5b:14:20:
c1:fd:62:4d:db:95:e1:0e:20:12:05:71:af:e3:99:
8b:97:0e:32:41:47:1c:d6:6a:52:e0:77:78:78:47:
93:3c:06:1c:8a:ae:ab:8e:07:f5:44:83:c4:d8:08:
b2:9d:cd:2f:c8:ed:a6:32:39:da:fc:9b:17:8f:94:
14:d1:bb:b3:07:d6:89:8b:de:25:6b:63:ba:fd:a1:
8a:27:69:2c:b9:9b:19:58:38:a4:fd:b6:c5:95:72:
25:a9:cf:13:75:59:da:47:e0:fc:95:0c:c6:2c:b7:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:62:18:E5:C2:72:F0:FA:CB:B4:1C:3E:C0:A9:09:11:78:43:7B:83
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1d:03:61:11:99:58:41:86:f8:a4:25:cf:1e:2d:b0:c6:66:
24:f4:88:3b:52:cc:36:d1:3b:0e:e6:90:a9:8c:47:5a:bd:aa:
4a:fe:67:75:dd:79:12:6f:54:e9:11:a1:44:6c:31:f5:2c:04:
46:54:6f:6c:a4:a0:1b:c8:9e:60:ef:7f:73:90:1e:8b:53:51:
23:a1:6f:82:66:7b:b3:09:0f:09:da:7d:2f:4f:d9:b7:07:98:
02:31:2e:24:39:56:dd:0c:6a:d2:4e:0a:40:ed:d2:87:68:a7:
79:e6:54:34:ab:b5:d3:79:aa:90:1e:3c:ee:ea:bf:92:54:92:
06:c2:68:c8:49:34:47:98:0a:be:60:88:6b:93:a3:a8:ea:37:
78:11:f0:89:f7:65:65:11:71:06:81:8e:b7:91:dc:14:74:8b:
b0:41:1e:9d:a7:d6:b1:41:52:4b:1c:ef:da:95:69:ba:df:d5:
47:24:6f:52:23:2e:4f:be:e8:59:a9:c9:10:d2:36:56:a6:3c:
45:b2:17:34:e5:d5:40:66:f3:7f:a1:a3:35:cb:ec:54:49:c2:
2a:a4:2e:50:b8:dc:55:94:a1:8a:59:af:c7:b6:fa:1f:b8:fc:
5d:27:6e:ee:29:62:fa:0e:78:fb:78:b3:de:34:6d:45:c5:da:
86:6f:1b:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mllgRXJQYNuHx95gtE7PwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzA0NzY5ZDA4N2Q5ZmU4Zjc5MGE2NTU1Y2I0ZmJlZmNk
MjRkMzgwHhcNMjYwMzI1MjAwMTIwWhcNMjYwMzI2MjAwMTIwWjAzMTEwLwYDVQQD
Eyg3MTYyMThlNWMyNzJmMGZhY2JiNDFjM2VjMGE5MDkxMTc4NDM3YjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dRU/jyDbgG3wNbpKBUE/49T+2IT
CR+JEWcLTS7K3ScVHIjsI0f/Y+47EHvoZvbakqxnRh6zl4INZf2PTsMsTkOo63It
Y2kZ3RD/Kkakm1dFiR5hsYBNzi1i45WEJqF+Z1vSMTTvVqSDcNXhoW3TedCtHiJJ
PA78puXrikuKwvOJ8ukxsdqN3jZAOdo0K092WpFbFCDB/WJN25XhDiASBXGv45mL
lw4yQUcc1mpS4Hd4eEeTPAYciq6rjgf1RIPE2Aiync0vyO2mMjna/JsXj5QU0buz
B9aJi94la2O6/aGKJ2ksuZsZWDik/bbFlXIlqc8TdVnaR+D8lQzGLLcrWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFiGOXCcvD6y7QcPsCpCRF4Q3uDMB8GA1UdIwQY
MBaAFDlwR2nQh9n+j3kKZVXLT7780k04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjIt
ZTQ1MzUwNDE0ZGRmLzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjItZTQ1MzUwNDE0ZGRm
LzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASh0DYRGZ
WEGG+KQlzx4tsMZmJPSIO1LMNtE7DuaQqYxHWr2qSv5ndd15Em9U6RGhRGwx9SwE
RlRvbKSgG8ieYO9/c5Aei1NRI6FvgmZ7swkPCdp9L0/ZtweYAjEuJDlW3Qxq0k4K
QO3Sh2ineeZUNKu103mqkB487uq/klSSBsJoyEk0R5gKvmCIa5OjqOo3eBHwifdl
ZRFxBoGOt5HcFHSLsEEenafWsUFSSxzv2pVput/VRyRvUiMuT77oWanJENI2VqY8
RbIXNOXVQGbzf6GjNcvsVEnCKqQuULjcVZShilmvx7b6H7j8XSdu7ili+g54+3iz
3jRtRcXahm8bqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:58 2026 by rpki-client