Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
File: oJRwOdnwgKQn91JcXQZvbPYhNPM.mft (raw, json)
Hash identifier: Mih1nNStX5OeHre0cECh3Tp6bDwk4+HbhBxvQcYq9JI=
Subject key identifier: 7F:50:BC:0F:23:E0:07:67:B6:B1:07:E3:1F:2C:0E:F9:56:FA:18:3A
Authority key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
Certificate issuer: /CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Certificate serial: 019D284DA288FA649BFB3AD97D43BE01530C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
Manifest number: 0A01
Signing time: Thu 26 Mar 2026 04:01:09 +0000
Manifest this update: Thu 26 Mar 2026 04:01:09 +0000
Manifest next update: Fri 27 Mar 2026 04:01:09 +0000
Files and hashes: 1: YQbAqJ7asgFGYO3z_k0v9YgK57g.roa (hash: RmvGtF2+R8JrPIka6fJbEr327La/wJJ+N/n7t1M8mPI=)
2: oJRwOdnwgKQn91JcXQZvbPYhNPM.crl (hash: Q9rJsaPdaoc2vbvHMgdR8GXU46GMPlhLyx0C87PGfZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a2:88:fa:64:9b:fb:3a:d9:7d:43:be:01:53:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Validity
Not Before: Mar 26 04:01:09 2026 GMT
Not After : Mar 27 04:01:09 2026 GMT
Subject: CN=7f50bc0f23e00767b6b107e31f2c0ef956fa183a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:ec:d3:b3:e7:5b:fa:ee:e7:25:09:2a:36:
51:a2:cd:6d:56:6a:74:dd:cb:01:23:0b:25:fa:fb:
b7:4b:b7:06:0f:83:46:a1:a1:a6:ff:cf:dc:c1:95:
79:7a:6d:27:ac:aa:16:d5:01:e1:cf:ee:5e:31:da:
3d:a8:b9:d5:a8:db:9f:40:ca:b5:42:0b:ff:79:3f:
e9:34:05:03:28:25:e0:c9:f6:95:b1:28:88:86:29:
c0:a6:2b:4d:2f:88:85:05:83:4a:df:2b:18:a1:a7:
a6:0c:65:87:e1:fb:c7:2c:a3:7a:9e:90:2a:d9:9c:
5c:a2:41:b8:fe:ab:5f:78:d9:91:96:22:7b:2f:07:
f2:17:af:ce:b3:22:62:da:fb:a8:64:69:2a:20:c1:
ac:a4:b2:c0:94:7b:cd:4b:83:29:a8:5e:3b:b9:e1:
6c:9a:31:28:ab:b5:48:bf:48:01:14:82:4d:69:16:
c7:b0:de:5d:c3:e6:b8:cd:79:c7:b7:07:a5:10:d7:
dd:f6:ab:88:bb:ee:d7:79:a6:90:e1:6e:82:50:69:
85:bf:3e:b6:8b:e9:35:e0:0a:a0:3d:56:34:49:78:
52:c9:57:14:b9:af:63:b6:db:45:37:f2:4e:01:15:
b7:de:ce:93:c6:72:7e:12:0b:8b:f1:d2:19:8d:1d:
d3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:50:BC:0F:23:E0:07:67:B6:B1:07:E3:1F:2C:0E:F9:56:FA:18:3A
X509v3 Authority Key Identifier:
keyid:A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8b:4e:09:a4:d3:5c:25:a1:e6:25:4d:18:4a:eb:2b:31:87:
48:57:e5:93:50:12:8b:14:60:13:e6:e2:b8:4a:57:38:c8:f0:
44:3f:f6:0b:8a:d2:55:4e:30:62:ed:17:90:57:f1:a3:fa:4d:
75:19:e0:8f:cd:1d:37:38:23:42:34:85:2f:f1:53:c9:da:ee:
b3:e3:1c:3f:2a:e4:9a:1a:5e:52:22:d0:dc:ea:db:5a:e4:16:
17:b1:92:5f:d9:b1:5c:0a:3e:79:14:e0:00:85:11:77:3c:5c:
6f:63:ad:90:7b:d2:e8:fc:ed:2f:3f:72:19:69:3c:a6:d5:d3:
4e:e9:aa:63:04:85:9c:d6:3f:85:07:22:78:24:bf:04:a0:72:
c1:d5:b7:dc:9e:d1:66:64:d2:97:8f:92:b7:51:ef:93:71:4f:
cb:69:87:66:0b:c8:98:dd:22:69:c7:4b:65:bc:17:1d:05:46:
03:0f:2e:fe:d6:22:77:88:41:e6:dd:ec:d0:6e:8c:d7:21:25:
30:99:12:90:65:52:06:8a:9a:63:90:53:eb:c9:59:5d:97:56:
af:ab:0e:9d:ae:99:96:93:f5:a4:a5:30:e8:94:9f:90:6f:c8:
41:bc:7d:0a:74:60:b3:7d:88:95:f2:08:05:77:dc:cb:52:49:
2d:9b:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:31 2026 by rpki-client