Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
File: oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft (raw, json)
Hash identifier: fG3Nc/835G3Td0ixyCSQHsIysTdWXVRcrXRAMLX/Qt4=
Subject key identifier: E0:D2:89:B0:48:09:11:A0:E1:D1:36:5D:FC:F0:CC:2E:BD:01:24:08
Authority key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
Certificate issuer: /CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Certificate serial: 019D296129626E77C644E6620BC95F8B95BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
Manifest number: 14D4
Signing time: Thu 26 Mar 2026 09:02:06 +0000
Manifest this update: Thu 26 Mar 2026 09:02:06 +0000
Manifest next update: Fri 27 Mar 2026 09:02:06 +0000
Files and hashes: 1: oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl (hash: o3Hv1/o0QEqAQ7FuiAeXjBzfA9KCX6oXBiFM4qk/KOY=)
2: xks2n5Kx6d8ZaVpYHBQ2NPGXK3k.roa (hash: rww+81/SW0ndwpHTHVsuT/JrOFux1abaoYGEanDzrqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:29:62:6e:77:c6:44:e6:62:0b:c9:5f:8b:95:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Validity
Not Before: Mar 26 09:02:06 2026 GMT
Not After : Mar 27 09:02:06 2026 GMT
Subject: CN=e0d289b0480911a0e1d1365dfcf0cc2ebd012408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:25:8e:64:ec:f3:79:00:81:d3:df:88:44:f3:
98:d5:7d:f0:e2:04:0b:0f:19:46:8d:75:94:0f:ea:
0b:0e:23:fa:19:e6:8b:c0:17:9b:0a:37:c2:23:27:
4e:8e:7a:b4:e2:8e:10:1d:d2:97:50:f6:64:ad:3d:
62:0b:03:1b:20:4e:d6:86:2b:93:40:24:95:cc:b7:
db:68:8a:45:d1:dc:fc:97:c6:a9:ff:6f:6b:ba:e3:
d0:91:ca:71:3a:27:39:3e:69:00:34:dc:98:e7:2f:
0d:4f:89:be:e1:46:2a:03:9f:55:72:80:15:ea:cf:
b6:20:93:6e:56:3b:6a:d1:a3:ff:14:e1:55:3b:e2:
5c:7f:9a:30:76:78:ff:ba:01:b9:24:c9:61:f5:80:
10:d6:fc:26:3a:bb:bf:95:51:69:2c:06:78:75:2b:
69:94:3e:24:6d:15:28:a4:26:08:a1:21:c2:e2:bd:
d5:6a:97:f6:5c:a5:a1:ad:5b:3b:99:17:15:91:fe:
40:0a:eb:87:fd:39:9a:34:eb:d0:7b:80:65:dd:7f:
fc:e4:6b:fe:8f:c5:4e:88:ae:70:76:4f:41:05:35:
70:c0:4b:fe:4d:91:47:d1:ee:23:68:fc:9a:be:75:
34:b1:24:16:a3:bb:12:76:4e:b4:3d:3a:85:d3:17:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D2:89:B0:48:09:11:A0:E1:D1:36:5D:FC:F0:CC:2E:BD:01:24:08
X509v3 Authority Key Identifier:
keyid:A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8e:52:80:ae:0a:e7:cd:a9:53:b6:26:df:3c:eb:b8:be:ba:
10:b2:39:27:e8:da:0a:70:8e:c6:f6:37:01:2b:fb:e3:6d:0e:
6d:af:4b:e4:49:38:49:36:4c:22:46:12:f1:ea:5a:47:f9:1f:
02:9d:87:c0:64:54:61:0c:28:16:d5:6a:7e:3f:f6:b9:ee:e4:
f3:fd:2d:0c:0f:1b:51:eb:3d:bc:69:3b:70:a1:7c:0a:5b:3f:
98:af:39:69:9b:9f:d4:b9:0c:5d:4c:29:b5:97:f6:d9:8b:e8:
4d:dc:31:b6:15:75:78:3a:f7:39:a2:8b:8c:50:13:97:1e:b6:
d2:55:63:c7:65:14:1e:b4:20:0b:b4:00:37:73:0c:58:3d:b1:
40:ea:06:53:90:c3:da:6f:27:8e:c6:57:4c:cb:60:22:92:15:
71:3a:d7:ea:ba:1d:9a:54:e9:b4:b9:fc:12:8f:17:11:71:7e:
cd:67:36:d8:15:8a:41:b3:11:98:fd:c4:d4:30:8d:0d:6c:47:
0b:a2:e9:ca:35:c2:1e:26:d6:22:a0:d3:21:2f:2b:94:12:89:
8a:45:10:93:e7:9a:46:5c:5c:02:33:af:0b:c0:58:6d:04:b8:
a5:dd:3c:04:8c:13:e9:0d:43:86:66:81:8e:02:92:4e:6c:a0:
13:8d:3e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:10 2026 by rpki-client