Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.mft
File: OJehKeNgcDqAL9KNkQv6hNowKaA.mft (raw, json)
Hash identifier: GO6TtvcZbRmbktK0aboZf2dtBQdRRpbthp769MzXnrk=
Subject key identifier: 03:61:72:2F:6E:68:0B:83:B1:62:58:E0:45:D0:F2:3F:46:91:8C:B2
Authority key identifier: 38:97:A1:29:E3:60:70:3A:80:2F:D2:8D:91:0B:FA:84:DA:30:29:A0
Certificate issuer: /CN=3897a129e360703a802fd28d910bfa84da3029a0
Certificate serial: 019D25F1AC65D2840729BE896355F9630739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJehKeNgcDqAL9KNkQv6hNowKaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.mft
Manifest number: 0D
Signing time: Wed 25 Mar 2026 17:01:28 +0000
Manifest this update: Wed 25 Mar 2026 17:01:28 +0000
Manifest next update: Thu 26 Mar 2026 17:01:28 +0000
Files and hashes: 1: 9J4WhJU8xeDrSSOcg_wxEbasVbk.roa (hash: BemndY3hRh+XxhZrf5Kkuo7O8IjD5PRmJSBt4L95bOo=)
2: OJehKeNgcDqAL9KNkQv6hNowKaA.crl (hash: ahY/fn3xr6s3c2pCyo8lzZ2ioDyZocLPnMU+aspJsu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJehKeNgcDqAL9KNkQv6hNowKaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ac:65:d2:84:07:29:be:89:63:55:f9:63:07:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3897a129e360703a802fd28d910bfa84da3029a0
Validity
Not Before: Mar 25 17:01:28 2026 GMT
Not After : Mar 26 17:01:28 2026 GMT
Subject: CN=0361722f6e680b83b16258e045d0f23f46918cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:75:a3:74:e6:fb:b5:40:60:79:a0:e4:b3:
7b:d6:3e:33:15:9a:18:a9:80:13:59:40:6c:fd:4a:
1a:0d:d4:b4:f9:62:b0:23:05:24:d1:57:0c:13:b3:
65:ad:aa:01:d6:6f:41:a4:55:d3:55:bd:b9:9a:f1:
d6:53:ca:3f:1d:a3:69:97:ae:8c:dd:76:13:1d:1a:
9b:01:41:bf:f9:b6:17:43:3e:b1:d4:8d:b9:f5:1e:
5a:fe:71:fe:cf:88:0c:c9:62:ab:7e:46:04:2e:92:
23:95:6d:0e:71:3c:29:9c:e7:a8:66:09:54:3c:60:
7a:25:3f:14:5e:53:a7:d5:69:7a:06:b3:2e:b8:8c:
fe:72:53:35:0b:7e:b5:91:8b:9e:0e:50:07:5e:31:
52:cc:c3:6e:f0:6a:96:66:2a:05:92:9d:ea:ce:c6:
15:75:43:29:0d:91:6a:51:8c:c9:f3:0d:b9:90:f8:
33:b4:28:03:a3:bc:fb:db:78:e4:d0:12:59:30:a7:
3d:9a:bd:b9:44:dd:e0:20:00:0d:33:72:ae:d1:0d:
d3:4b:ae:9d:a1:e4:25:a4:4e:75:2e:01:de:09:d1:
e8:08:07:92:ff:87:2f:a7:63:92:19:22:dd:7c:4d:
9e:9b:61:c4:e3:78:8a:b4:c5:a0:7a:22:b0:5b:bb:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:61:72:2F:6E:68:0B:83:B1:62:58:E0:45:D0:F2:3F:46:91:8C:B2
X509v3 Authority Key Identifier:
keyid:38:97:A1:29:E3:60:70:3A:80:2F:D2:8D:91:0B:FA:84:DA:30:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJehKeNgcDqAL9KNkQv6hNowKaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1a:db:8d:2e:90:80:78:05:ae:27:03:5c:0d:75:1e:b5:7a:
b2:41:50:e7:2a:49:75:32:ce:2e:3a:4b:af:ee:ee:a0:b4:22:
23:03:42:b2:e6:71:48:39:58:72:a7:05:4e:c3:ca:c2:0a:99:
16:32:2e:a3:ff:76:e7:4c:50:e2:ba:f6:c3:95:d5:d5:dc:a8:
e1:e9:a7:f1:f7:59:33:c0:8e:5f:70:6a:e1:e1:ef:13:33:4f:
d2:5e:09:bc:9d:08:ad:d1:0a:b6:77:66:37:e3:ab:8e:72:66:
3e:8f:10:f4:94:ef:a5:af:eb:6e:e8:09:7d:11:38:58:ec:ca:
e8:65:e1:f7:1b:44:e9:5a:3c:b8:60:b6:83:aa:ff:2a:1d:16:
95:c2:e5:a8:5e:51:60:33:3a:06:c8:02:9a:57:29:da:75:d9:
8e:52:21:f9:4c:ee:a3:6a:cc:4e:22:82:60:fd:cf:af:36:53:
33:95:86:05:bd:e3:c5:ea:84:cd:42:15:67:20:4e:df:4c:08:
b3:86:de:4b:29:ab:86:fc:35:0d:45:a5:52:b4:22:99:ef:c5:
ea:06:90:67:98:bf:3a:3b:d1:b3:38:1e:b5:d0:f3:25:ec:23:
fa:46:73:27:af:e6:8a:f2:ca:71:95:ed:2e:31:94:7d:09:b8:
df:de:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:17 2026 by rpki-client