Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: tNxN4DwaXcKPAh2Bj/Q6sl+J5IfgvdvM4aGgUHkKM8M=
Subject key identifier: 40:E3:E0:95:30:3F:F4:4A:5F:5F:86:1A:B4:EA:1F:54:1F:09:CF:E0
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 019D27724FE40F0B630168C9C9873644C034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 00:01:36 +0000
Manifest this update: Thu 26 Mar 2026 00:01:36 +0000
Manifest next update: Fri 27 Mar 2026 00:01:36 +0000
Files and hashes: 1: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
2: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
3: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: d9JYSO23v8Qdj93nNWGMQ52uJGjaoJdEzeE+aj5QfPE=)
4: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
5: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
6: a3rA8eGuwHcYBSwVzbbc11I2Urk.roa (hash: cT4DoQsTYje8hNsAaND3rx8+vYRHrFLlE/W9JtRBh+8=)
7: hfXT8LQHaBMfJkasTrm7RdvVn3Y.roa (hash: z2Fk8o05kqf7vSmZOKJV+E6QrC7t6Pe5xa8E+bNZIE0=)
8: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4f:e4:0f:0b:63:01:68:c9:c9:87:36:44:c0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Mar 26 00:01:36 2026 GMT
Not After : Mar 27 00:01:36 2026 GMT
Subject: CN=40e3e095303ff44a5f5f861ab4ea1f541f09cfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:a6:f0:d2:ed:64:52:6b:38:ec:0e:3d:1b:
78:08:d9:b3:f5:e6:a2:93:aa:11:e1:3e:41:89:c7:
b3:71:f8:c1:4f:7b:62:71:fa:fa:ec:9a:be:a7:f9:
ad:24:ba:c3:8b:01:e7:2c:13:86:55:85:0f:5a:98:
0d:f7:7b:c1:67:73:97:0c:60:a7:a5:6e:01:9b:3a:
f0:c4:ef:2d:7d:ef:e6:91:74:6b:8b:41:d7:e7:e3:
8b:18:d2:6d:02:4a:2a:3a:fd:6c:f0:26:c9:8b:2c:
ac:24:7b:8b:cc:16:c2:57:16:27:32:e1:5f:4c:1c:
b8:10:af:02:a7:33:bd:0b:79:d4:a8:bd:d1:e2:43:
0a:de:42:d8:b9:cf:3d:34:15:4a:70:8e:f5:c3:89:
8d:99:39:04:9b:b2:a9:37:3f:cb:07:10:c0:9a:5b:
8f:79:5c:c4:04:a2:77:c0:26:c7:e6:b3:c4:de:92:
38:b3:e8:d9:e9:fa:16:f1:90:1d:a0:12:29:76:9c:
c3:aa:ca:29:a9:3e:f8:ef:43:97:7d:87:58:81:b0:
a7:31:9e:08:14:b8:08:6e:c3:07:76:19:08:e8:8f:
f6:20:a2:f3:6e:11:45:66:04:e6:ab:bf:01:66:98:
63:45:84:34:ec:24:1a:ec:44:95:4c:de:f0:54:c8:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E3:E0:95:30:3F:F4:4A:5F:5F:86:1A:B4:EA:1F:54:1F:09:CF:E0
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1d:d2:63:06:df:c0:94:10:70:be:b4:0e:19:05:0e:c3:4c:
93:18:70:5c:df:7f:2a:60:51:b4:6e:2d:ef:2d:b2:67:a6:ff:
ee:60:98:c6:9e:94:31:91:ed:93:63:e9:29:98:3c:3f:94:d5:
1a:f2:89:7a:6e:42:e0:58:fe:07:8e:07:46:4b:cc:50:58:80:
2b:3d:be:86:c3:ff:2d:7c:d2:e7:d9:44:83:0f:0a:17:86:70:
e7:49:df:dd:02:88:41:b3:96:21:fa:80:7f:1a:b4:17:d5:39:
a9:23:15:b5:ff:b3:90:ca:c6:51:ec:ef:f1:39:09:80:f9:96:
65:f5:d7:64:22:94:bb:0b:ea:f6:60:d6:50:43:8b:06:0c:b3:
0a:97:de:83:35:63:42:b8:fd:d2:a0:0c:f6:97:6c:24:4c:ef:
d6:75:30:af:68:63:ad:4a:f7:80:4f:86:07:d8:e8:d9:fc:d8:
97:5b:54:47:ff:62:0a:54:d6:b5:c5:83:71:5d:be:f8:00:69:
95:18:84:55:75:05:dc:69:91:40:3b:b6:0c:e8:45:c2:e3:5f:
ff:37:b1:bc:8e:a1:07:2d:52:c7:02:44:b9:8b:84:90:56:06:
4f:2f:ff:98:28:51:da:a4:2a:73:ed:36:85:b7:18:61:68:dc:
8e:34:64:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:46 2026 by rpki-client