Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
File: OQJ3OPl4_tokqdh7DLi7mqevVA0.mft (raw, json)
Hash identifier: bsfuLvf958Fe/NnpzdISvhFuPcXSPK14kEft5O8eqOQ=
Subject key identifier: 9A:9D:A1:6D:9B:17:A3:9A:46:33:CD:1B:6D:E3:63:F8:4D:66:16:F6
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 019D25F157B9393678B720732909BECC0D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 17:01:06 +0000
Manifest this update: Wed 25 Mar 2026 17:01:06 +0000
Manifest next update: Thu 26 Mar 2026 17:01:06 +0000
Files and hashes: 1: OQJ3OPl4_tokqdh7DLi7mqevVA0.crl (hash: KE+c9yzc+iTa/kiCCZCyu5Jews8ItI+hcV7SgaHcU08=)
2: jr5zaX72B88EPr7fF-QkGP5Dx98.roa (hash: oiKQk5Ow8W6lhAid4jGIfOCDhwPg0xWcUUAnbvjLz5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:57:b9:39:36:78:b7:20:73:29:09:be:cc:0d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Mar 25 17:01:06 2026 GMT
Not After : Mar 26 17:01:06 2026 GMT
Subject: CN=9a9da16d9b17a39a4633cd1b6de363f84d6616f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:71:f5:b2:65:40:7e:af:0d:5a:4a:59:64:
ce:5a:a7:96:3b:48:1c:97:19:de:63:e8:1e:9f:6a:
57:96:eb:1e:30:4f:1a:17:70:39:4f:25:17:a5:80:
32:ba:ce:a9:dd:8f:e3:c8:47:86:e6:5d:41:f2:83:
f1:f5:db:21:b0:28:68:4b:10:34:c7:4c:b0:2e:cb:
86:de:52:51:a0:91:0c:6a:21:e1:60:a4:18:0a:e8:
c9:20:b9:2c:52:f5:ac:1f:11:7b:9e:6f:b0:c7:11:
e0:6e:63:c1:da:f4:ac:81:da:81:9a:50:4f:38:4e:
d5:d4:2b:f9:6c:53:97:92:21:9f:0e:ae:02:68:01:
77:df:0d:53:36:a6:6d:a8:5a:8e:86:cb:c6:79:c3:
dd:f0:dc:b5:bb:91:55:bf:ba:ac:3b:d7:94:90:27:
12:34:d0:3b:c5:21:e9:b2:cf:a6:0e:1a:f2:f6:b1:
ac:56:d0:fb:86:59:34:c1:6e:0c:dd:0f:5b:30:18:
94:b0:b8:6d:5d:79:4d:58:2e:70:90:33:a2:4a:aa:
86:72:1c:51:4f:50:72:09:5e:da:62:1c:98:90:23:
e4:50:2b:f4:8e:ab:d7:d5:4a:56:2c:4a:90:11:21:
a3:12:87:84:2a:ff:51:67:31:98:6e:d6:90:1f:84:
39:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9D:A1:6D:9B:17:A3:9A:46:33:CD:1B:6D:E3:63:F8:4D:66:16:F6
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0c:af:79:d7:74:66:07:29:74:69:ff:25:ba:79:dc:f8:07:
e9:13:43:ab:9c:29:68:ec:68:7a:e3:eb:f7:dc:b4:7c:36:97:
d4:5e:54:bd:77:fb:a7:39:7f:bf:76:90:74:ef:e3:c0:35:a7:
5d:69:24:f1:e7:00:da:04:86:f8:b3:71:ad:d9:01:16:ad:4c:
3e:a6:56:67:a6:af:2c:57:ad:ad:66:ac:f9:66:6c:38:0e:89:
3f:73:c3:c9:1e:03:60:09:ab:de:1e:bb:37:d2:25:ef:56:fc:
c1:6a:a5:cf:19:52:81:25:f4:74:37:f4:41:a7:f1:a0:78:c4:
b8:43:73:74:af:e1:27:a5:86:25:ca:f5:9e:0a:d7:3b:e5:91:
46:1d:94:3b:10:fa:8b:ff:1a:c3:94:65:58:33:dc:1a:06:73:
1e:c3:2d:a1:62:de:e0:de:b3:49:e2:42:b1:66:1f:c3:39:f1:
16:93:07:46:44:83:59:8a:a0:a2:1e:c4:a8:20:ef:36:4d:a9:
de:b9:90:a8:20:9e:6c:bf:e0:76:81:20:76:b0:4d:e4:d8:6c:
9b:3b:2a:40:6c:54:49:fd:66:ef:19:24:ab:27:7d:b9:0b:c7:
47:a5:90:55:d0:b0:fe:16:51:38:ad:d4:cc:3f:77:b0:d7:1b:
12:4d:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:48 2026 by rpki-client