Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier: x43rkVGFVtifNVjrYEzEj1PAkrozXYON7EvVLMS88rY=
Subject key identifier: 5C:E4:79:9B:31:3F:B3:8B:1E:D9:09:53:AA:68:90:8C:A7:F7:4D:D1
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial: 019D2816AF51867ABD711C0BF6EBB5CAB84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number: 12C5
Signing time: Thu 26 Mar 2026 03:01:08 +0000
Manifest this update: Thu 26 Mar 2026 03:01:08 +0000
Manifest next update: Fri 27 Mar 2026 03:01:08 +0000
Files and hashes: 1: DSJIzkN5q_rXnrR_sSD03uwjKLk.roa (hash: RgGL0auNuSKpj8cmVmNM1N0Gw/VXT4lpjwBiD7OAxgM=)
2: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: 92XDYNHY8ohnT0d0y3k7H2LPKntnwOPJDk95Rr86ybA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:af:51:86:7a:bd:71:1c:0b:f6:eb:b5:ca:b8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Validity
Not Before: Mar 26 03:01:08 2026 GMT
Not After : Mar 27 03:01:08 2026 GMT
Subject: CN=5ce4799b313fb38b1ed90953aa68908ca7f74dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2b:2a:bb:ca:68:f2:c1:28:70:c5:66:14:1c:
2f:63:1d:40:03:60:e8:6e:77:13:59:f6:16:b5:79:
74:68:bc:c8:a0:e8:85:ac:a7:86:92:92:e0:06:10:
21:0c:fd:f2:ed:75:9f:3f:08:b8:13:ec:24:46:98:
cc:a2:84:b3:b9:fc:3e:c0:10:28:8a:2e:f3:cd:79:
5d:9a:e2:8a:65:02:7c:27:79:29:15:0f:e5:81:f8:
4f:fe:a3:21:04:8b:28:05:8b:99:ea:07:e7:75:16:
68:12:fc:da:8c:fa:7c:ac:86:1e:97:c8:fe:a8:06:
a6:1d:25:16:d3:68:12:e2:f9:b5:ae:d4:cb:b5:e7:
54:96:35:d7:74:19:02:3f:f2:c4:18:a8:c8:4d:62:
50:0f:9a:64:40:cd:4e:62:cc:27:3d:c7:7a:54:db:
72:9c:0f:ee:5d:18:cb:4a:39:73:09:ec:c1:b5:bf:
2a:90:89:73:c6:76:88:83:04:8b:44:77:02:ef:5e:
2a:35:9c:79:e5:47:e3:9b:ec:90:f3:6a:ef:b1:6e:
ed:1f:36:54:f3:9d:6e:4f:00:75:80:73:fd:11:57:
4d:9b:4f:78:6d:c5:b0:1e:83:05:90:59:45:f2:4a:
ce:af:6d:f2:82:a6:6c:42:fd:bf:fc:32:30:b5:2c:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E4:79:9B:31:3F:B3:8B:1E:D9:09:53:AA:68:90:8C:A7:F7:4D:D1
X509v3 Authority Key Identifier:
keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c9:f2:a2:f5:e8:bc:a3:54:64:f7:91:1a:8f:6b:6f:65:2a:
43:55:11:34:a0:cd:4c:94:d6:fa:13:68:82:b1:5b:13:71:89:
cc:7f:d5:58:b1:ad:99:3f:35:55:b3:ed:08:05:ff:a2:3f:ff:
31:f7:f7:20:46:58:e7:e3:b4:7f:b2:5f:69:c3:67:97:5c:57:
d6:91:ab:29:41:14:ee:c0:fd:a6:00:02:d1:98:ed:00:43:89:
ed:9d:1b:c3:4e:e4:ff:ec:44:22:46:92:2a:5f:c5:60:a9:e0:
39:f8:61:b2:b4:50:86:df:d1:2e:09:41:42:dc:d3:9e:20:e6:
7d:3c:d9:e7:b9:b4:2c:82:a3:b7:6a:36:3d:6e:cc:1a:28:47:
78:db:9b:2c:b5:dc:e0:3d:bf:a2:9c:44:81:38:a8:72:ea:24:
23:ac:57:62:f0:cd:14:2b:9b:26:03:ed:22:1f:29:16:48:c8:
92:c8:c6:70:fc:4a:3c:0c:7e:6d:26:4b:b1:33:a3:01:30:fe:
9d:b9:c2:df:89:b9:b1:bd:dd:ba:ef:6f:d5:4e:66:17:3b:d2:
3d:dc:a6:45:de:bc:6e:de:41:15:20:a3:60:6f:ef:88:5e:83:
3b:91:2f:27:ff:c6:a0:ed:c4:f6:6d:e4:eb:80:de:25:4a:12:
81:56:26:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:27 2026 by rpki-client