Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: CpOBCml+tiyOuvrJosnNMVckn+R+DtYlDVH5cdccKJI=
Subject key identifier: F9:82:FD:93:B8:CD:E6:D0:C1:A3:88:2A:58:31:BC:7C:CC:FD:01:27
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 019D270491A887A3F438E1735EE2062D427E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 1897
Signing time: Wed 25 Mar 2026 22:01:43 +0000
Manifest this update: Wed 25 Mar 2026 22:01:43 +0000
Manifest next update: Thu 26 Mar 2026 22:01:43 +0000
Files and hashes: 1: C53oCg7kRoBXocgajR_ZpGWJqn4.roa (hash: PkakGt0bbQY/2tn/r6YJVwwmAKETiXnq03+IjFLAZQs=)
2: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: gMo203ZDFHD8TFxM2WmlE8NdQDWqauYhjpzRh/Wd4/0=)
3: SNyntTwsIIpefS6otR0nRSZTl0M.roa (hash: 7Q0juJOhLraTf25d8amnxUBMIjfjOKD/x6SVvjGWFnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:91:a8:87:a3:f4:38:e1:73:5e:e2:06:2d:42:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Mar 25 22:01:43 2026 GMT
Not After : Mar 26 22:01:43 2026 GMT
Subject: CN=f982fd93b8cde6d0c1a3882a5831bc7cccfd0127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b3:43:e9:a0:ce:cd:a6:80:47:82:5b:df:08:
68:7e:6a:02:e6:03:41:cb:c4:65:9f:af:46:5b:c0:
8c:07:4d:c3:f5:16:b2:cb:0a:ec:43:f4:27:dc:16:
a3:c9:90:ad:0b:86:84:2e:b8:3a:f2:17:95:c4:dc:
cb:07:65:0c:b2:2e:36:bf:fa:96:59:a5:72:04:0a:
04:9b:88:78:c3:e3:c6:c4:ba:99:92:6f:be:2f:58:
ba:20:fb:f1:f2:8c:16:df:bb:36:b8:d0:e1:ae:bb:
80:0c:4f:d3:3e:86:81:dc:ce:29:9f:be:4b:79:d7:
09:19:a1:b1:6d:82:0a:52:e8:d5:40:2d:7c:36:58:
76:00:29:92:85:51:5b:83:bc:57:96:cb:df:50:4c:
da:07:ba:06:18:70:91:44:90:31:0b:26:43:45:d4:
ac:f2:90:4b:6a:bb:a3:a5:28:f1:8b:59:32:a5:3b:
99:9e:2c:52:af:48:29:f4:a4:3f:f2:59:65:68:da:
46:42:ea:fc:ef:f7:1c:87:69:d4:b9:05:63:c2:cf:
f4:28:2b:93:be:7f:61:d7:d1:f6:af:ba:07:b2:9b:
02:a6:d4:29:59:51:52:65:ef:1c:96:15:3d:2b:e3:
eb:e5:e4:99:b2:31:5b:3b:43:7c:74:59:9d:24:84:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:82:FD:93:B8:CD:E6:D0:C1:A3:88:2A:58:31:BC:7C:CC:FD:01:27
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a0:14:bf:4d:cf:94:12:27:f5:ce:e8:ee:7f:27:10:16:bf:
0b:e0:0c:db:6e:d8:62:74:03:53:de:df:37:7b:15:51:90:44:
fa:3a:cc:2d:7b:88:f6:a6:2a:35:7f:a2:f5:9b:98:58:de:06:
fb:92:1f:d9:81:e5:94:43:ae:a4:aa:c4:4b:55:22:d1:d9:88:
9c:db:1d:35:8d:36:8f:1a:90:72:21:3a:8a:d9:88:7a:eb:90:
19:a4:9e:cb:a3:fa:1c:c4:e8:6a:53:99:03:a8:1e:ef:e0:dd:
15:29:a8:41:0f:83:73:89:b5:b9:a0:ee:9f:94:4c:db:a4:35:
69:ba:34:b6:84:5e:91:df:a7:ff:1f:f4:eb:c7:45:bc:f6:59:
bc:a5:3e:0b:f9:6d:54:73:5b:48:c2:03:8c:57:78:21:51:92:
19:7e:1f:7e:93:01:35:72:a3:71:67:3e:d7:c7:e3:5d:ed:c7:
d5:7f:b6:d9:e8:f4:64:df:1c:4a:6f:21:bc:6c:7e:a1:2a:0d:
b3:f6:cc:3a:6f:0c:1d:38:1c:c0:1c:8c:ef:8a:cc:84:b2:6f:
a1:e1:33:7e:20:68:9d:0d:7e:07:98:5b:ef:e3:cf:7f:0f:d9:
3f:c7:fa:01:3c:2e:b0:37:70:8f:b7:72:f6:90:b2:6b:d7:cf:
26:e6:1e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:55 2026 by rpki-client