Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: e4zR4I1fKZf38QgNKjPt957mx6j66pxLfZrRIdkdbcw=
Subject key identifier: 03:AA:5C:EA:05:41:FE:E1:2B:A5:26:8B:E8:93:E6:C7:DC:B3:46:FC
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 019D25BA9A443F58B7EF0C982F97AF7D82DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:01:19 +0000
Manifest this update: Wed 25 Mar 2026 16:01:19 +0000
Manifest next update: Thu 26 Mar 2026 16:01:19 +0000
Files and hashes: 1: 1-A4EU1ApAufBvEjd-muSLr7ANu8.roa (hash: RnoopnV8A6AgkKLGp6MuOa3nwgjKcYP0z+JNGgWdgZU=)
2: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: nEFbV9ILRUwtk6uFmT0FktNSN9XYj/W1Z3OMfcezeiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:9a:44:3f:58:b7:ef:0c:98:2f:97:af:7d:82:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Mar 25 16:01:19 2026 GMT
Not After : Mar 26 16:01:19 2026 GMT
Subject: CN=03aa5cea0541fee12ba5268be893e6c7dcb346fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:a4:02:a1:e8:b2:8a:a0:ef:78:51:29:dc:
ff:72:e7:49:f5:e2:ed:69:c8:8c:11:64:a6:91:f6:
0a:85:dd:c9:86:30:41:08:07:0b:42:46:28:2f:c0:
98:ad:4c:f0:c6:46:f4:62:29:3a:f4:27:c8:03:99:
69:3a:8b:3c:d2:aa:00:a7:07:fe:f3:6d:a0:b8:05:
14:6b:22:7e:f8:6d:20:02:d5:6b:7e:6c:c7:81:a5:
d4:6f:6c:1c:b4:8e:6f:3d:ef:1f:b6:27:17:61:c0:
e8:81:76:e4:35:d0:0f:0e:8a:6c:81:b3:3c:bc:ae:
c4:5a:fc:3e:4e:2f:91:db:96:59:37:ce:e1:c9:a1:
eb:34:9a:1d:39:1e:b7:87:52:48:60:19:b9:65:e5:
a5:ca:1a:fd:3d:ff:8e:23:47:26:72:a5:47:d8:32:
07:7c:8c:04:44:d2:4a:41:61:c5:e2:65:d3:3d:02:
cc:85:37:6e:64:8c:31:6a:e4:72:56:5d:da:62:42:
aa:b6:9e:0a:38:30:5b:63:36:3b:73:2d:2e:03:4f:
e8:8f:f0:ef:d1:02:f2:1a:c9:dd:f4:97:ea:5c:39:
56:dd:cb:de:6c:ce:3c:05:85:98:c6:35:fb:0d:1f:
07:61:66:74:16:64:dc:2b:f3:5a:08:31:38:0d:06:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AA:5C:EA:05:41:FE:E1:2B:A5:26:8B:E8:93:E6:C7:DC:B3:46:FC
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:68:98:0e:a7:b3:a0:67:d6:03:33:84:52:6b:6c:99:99:3b:
6d:ae:8b:02:8c:2a:c7:02:d8:ca:d6:c9:33:24:91:18:aa:d1:
56:22:75:3e:d3:41:43:2e:89:6f:55:e0:ef:23:93:d4:28:c4:
df:bb:fa:c8:d1:34:c4:36:01:48:13:b4:0a:4d:48:68:5f:2c:
ea:63:2d:3b:81:10:19:fa:1c:14:43:9d:04:e7:02:52:30:5d:
5f:f9:b3:b2:31:b2:56:f5:77:a6:bf:d1:04:46:10:ec:15:94:
72:17:41:bc:e6:eb:4a:a2:35:4d:06:6c:33:12:ab:fe:01:5e:
65:05:db:72:78:65:50:28:14:53:df:14:1d:00:19:7e:86:1e:
7d:e7:8c:e6:4e:e2:26:9e:51:46:f2:70:55:0e:fb:fc:e5:dc:
19:ea:40:ab:e0:c0:04:89:06:9e:c4:09:c9:56:a1:8d:1b:00:
0e:d2:2a:a2:d0:eb:80:c2:6c:c2:12:6c:7a:3f:bc:25:d0:99:
c7:71:48:c5:fa:46:99:41:bb:36:e6:7c:ac:19:6c:1f:55:52:
2c:07:5e:64:16:e3:17:56:40:0f:7b:d0:2b:98:1f:46:bb:a3:
6c:86:6c:e1:0c:03:d8:f2:a2:1d:96:dc:e3:31:ea:4f:96:06:
aa:c8:06:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:42 2026 by rpki-client