Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: OLtXSYkpuASZLCOLA+iscweH4sbnvIecOBjn18BrU+M=
Subject key identifier: C4:1D:EF:98:10:0E:33:BD:E9:FE:C9:CD:36:2C:9F:A0:78:A4:6A:34
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 019D27E06BE16070F4FF26A8F7F4868F1BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:52 +0000
Manifest this update: Thu 26 Mar 2026 02:01:52 +0000
Manifest next update: Fri 27 Mar 2026 02:01:52 +0000
Files and hashes: 1: acv-v2eHqlrCvjloaRGiMlCidZI.roa (hash: oC/VXdmhm0cHY+VKvZYv7E0OaLtC7J/ULHsMcrTf+MI=)
2: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: JtF/WrLDuIVDDiX9dW+03JR39+hphtiOVsL/LVk0vSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:6b:e1:60:70:f4:ff:26:a8:f7:f4:86:8f:1b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Mar 26 02:01:52 2026 GMT
Not After : Mar 27 02:01:52 2026 GMT
Subject: CN=c41def98100e33bde9fec9cd362c9fa078a46a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:ab:d6:88:96:df:93:74:58:bf:24:3f:f2:
c5:38:82:73:72:5f:32:6e:a8:9f:3b:75:1e:41:31:
8b:5d:19:8d:19:b7:3e:1c:47:58:a9:1f:c8:03:37:
80:1a:0f:f5:2a:29:c4:72:7e:cb:cd:83:90:a1:9b:
1b:72:13:57:9a:64:17:46:9f:a9:c3:14:7b:f3:d1:
6a:9f:33:ed:48:ba:f6:8d:21:a3:20:a0:38:c5:68:
08:24:c9:40:09:04:6c:a9:71:91:36:14:f0:f0:c3:
43:1a:7e:19:c3:f0:89:ec:64:2f:c3:d3:58:76:a5:
a2:67:61:36:62:67:97:55:dc:ef:41:5a:6a:81:42:
a1:33:37:3e:02:cf:3b:a2:da:51:5f:e0:30:53:bb:
00:4b:e6:2f:41:b8:18:2a:2c:63:f4:23:5d:54:67:
c5:96:6e:6a:82:99:4f:38:23:59:2c:83:16:e4:e8:
ad:7f:5d:a7:22:91:22:18:ea:75:6a:2f:d5:41:03:
e0:bd:63:fa:b4:ea:08:85:8c:11:44:ed:90:83:a2:
e6:43:43:ca:d5:f0:d6:cc:82:ff:b1:8f:d0:01:99:
e1:51:d2:67:75:4b:3b:97:0d:93:be:22:35:26:ee:
e9:64:f8:15:24:b7:62:c1:97:72:11:94:42:e0:98:
55:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1D:EF:98:10:0E:33:BD:E9:FE:C9:CD:36:2C:9F:A0:78:A4:6A:34
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4f:96:01:fd:c0:09:f5:40:94:44:28:07:f4:04:3c:73:b1:
a9:dd:cc:05:97:48:ab:9b:d8:48:ec:b2:06:8e:a4:3c:5f:9f:
30:7d:55:ab:3a:35:44:bf:c3:35:af:f7:8f:9f:93:8f:16:3e:
3c:51:aa:34:85:c6:f0:8b:16:cb:df:d9:aa:d4:1e:d9:b8:c5:
3e:ab:15:01:8d:16:73:e4:20:49:24:48:03:01:c3:fa:45:b5:
ea:25:ea:f5:89:ba:03:bc:33:07:23:d2:65:0d:07:5e:df:85:
72:f8:c7:7d:a3:98:07:e4:64:d8:2a:d2:67:f3:f7:81:3c:02:
ea:d1:63:e3:f1:13:bf:b1:95:63:01:00:b5:c2:76:5a:1b:7c:
c9:71:9a:33:b1:41:59:98:97:18:42:ac:0f:df:fe:c4:55:e8:
de:df:58:2b:f6:14:80:9a:6c:70:62:3c:6c:55:46:a3:2b:ec:
9f:5e:35:4b:4a:6a:a3:bc:19:41:03:34:86:d3:ea:0b:70:66:
40:c7:07:7f:8e:57:9b:2f:7d:fa:2e:36:b7:5a:09:50:35:9e:
07:4b:4f:fa:38:8d:a5:99:18:85:4a:76:4c:d1:68:ae:8a:08:
a1:78:9f:20:18:1c:e0:0e:4f:79:9a:23:a9:94:7d:cc:24:69:
a5:46:7a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:24 2026 by rpki-client