Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
File: oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json)
Hash identifier: +ZsvI2RpFE/f+1gcPJRMjBd+pCALjSnaRT7P7EOC6X0=
Subject key identifier: E1:60:26:32:B7:96:6B:21:25:D8:94:BD:59:B2:C1:E0:9B:A7:89:2A
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial: 019D26CCAAF4A98A764A1C41D316166DAB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
Manifest number: 1282
Signing time: Wed 25 Mar 2026 21:00:40 +0000
Manifest this update: Wed 25 Mar 2026 21:00:40 +0000
Manifest next update: Thu 26 Mar 2026 21:00:40 +0000
Files and hashes: 1: MkHKmr1CCJc2BcOqw-KghmADjCc.roa (hash: mZUESDCQ7pThBi0ruZGxU2DBV/MKZ2Q9xt3I5e6sTr0=)
2: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: 4+EJViEzXcc62soHSGVwgflzvW3IKi1IqkBtdPLIEck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:aa:f4:a9:8a:76:4a:1c:41:d3:16:16:6d:ab:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Validity
Not Before: Mar 25 21:00:40 2026 GMT
Not After : Mar 26 21:00:40 2026 GMT
Subject: CN=e1602632b7966b2125d894bd59b2c1e09ba7892a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:33:86:8f:c8:5e:64:17:b7:12:ca:d7:24:
53:fd:c4:41:93:7c:a3:7c:d9:5c:b4:6c:f9:83:d7:
13:ec:87:bc:31:c9:31:5b:c5:ba:15:12:ad:c9:6d:
ad:aa:94:05:d4:54:d6:0e:ac:f0:ef:14:d0:5c:e3:
6c:7d:cf:22:33:d1:31:63:01:96:69:da:d1:7f:4f:
77:23:74:45:5b:d9:82:b6:89:cb:7a:df:e1:0a:da:
4f:38:8b:59:a9:86:2a:c7:8c:2c:8b:b1:c9:76:17:
56:88:b7:52:57:8c:5c:09:c0:e3:c3:6a:eb:4a:35:
9d:69:e3:da:ee:fb:95:bf:26:83:c1:c1:da:da:ba:
2b:d9:1c:fa:59:f2:d1:c1:12:c1:73:30:1b:54:ae:
19:1d:d3:f1:4d:6f:25:1e:93:e4:29:eb:f1:32:b9:
e4:51:9b:db:51:e0:4c:3b:68:5b:2b:4b:82:44:df:
de:1a:11:0a:17:7c:ea:f1:7c:85:10:b5:68:f5:df:
84:19:52:fc:b5:b3:dd:3e:52:d7:98:30:bf:48:e9:
a8:18:18:1b:ea:7b:0f:69:ae:8e:c1:55:72:8d:32:
65:62:1a:d3:90:38:75:52:9e:49:88:d2:e5:1c:c8:
a9:2e:ce:3c:35:20:70:d1:82:55:f6:17:59:e2:b5:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:60:26:32:B7:96:6B:21:25:D8:94:BD:59:B2:C1:E0:9B:A7:89:2A
X509v3 Authority Key Identifier:
keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:03:f6:3e:b3:9a:a6:9c:39:9b:bc:5a:b6:89:58:5b:4a:3d:
1f:5c:8a:48:f2:eb:a4:2c:a1:9c:29:ba:55:74:b1:d6:cc:9b:
26:c4:3e:38:54:d0:3b:8e:84:3d:3f:0d:e4:d0:fe:18:40:35:
61:b9:bd:15:83:80:21:b3:1c:8e:58:b2:4b:af:a4:17:65:dd:
7e:d4:57:71:2c:97:be:ec:ad:66:cc:20:ba:c3:d1:e4:39:50:
a2:7e:e0:e2:80:16:cb:c6:36:bc:34:34:b9:61:be:97:85:bc:
98:6c:3b:77:e2:6a:f8:5e:1b:c0:5d:12:4b:61:e7:66:a3:e9:
81:28:ec:19:26:0a:4a:a5:a1:17:cc:8b:00:3e:06:c6:25:cf:
58:34:2f:6c:0c:53:db:3b:88:1f:68:ef:a7:2c:80:33:eb:62:
ca:65:16:df:90:65:f9:43:08:88:54:f1:f8:2a:98:ba:6f:19:
79:44:67:0f:11:0e:e0:15:b9:ec:a7:19:c9:ae:67:02:0e:38:
c0:a9:5c:ea:e4:9f:e8:3c:3a:b7:ca:b1:68:31:aa:3a:70:15:
0b:97:69:dd:95:2d:c1:b6:eb:b6:00:e7:14:9d:03:a1:4f:73:
c2:d3:89:47:c2:72:cc:50:bf:e3:8a:d3:28:f8:f6:dc:b0:8d:
e5:a4:cc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:14 2026 by rpki-client