Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: et2qKCLIO9mQWfrYPpoKnibZ/JU9r1HFvGU8o8TtjCM=
Subject key identifier: 36:13:31:18:3A:DA:DE:DA:23:6A:37:89:3C:29:6B:BF:D7:B7:F7:A4
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 019D284E2FCFB5AF69A9841F63F6841757AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 178A
Signing time: Thu 26 Mar 2026 04:01:45 +0000
Manifest this update: Thu 26 Mar 2026 04:01:45 +0000
Manifest next update: Fri 27 Mar 2026 04:01:45 +0000
Files and hashes: 1: 0SyND4Sf6FWPac9ewDSQ_5ruK7s.roa (hash: uXqH69dDSIWJzyxx0fDzquq4oK/+5ZopLJS3+FhxlOE=)
2: ePSKdM4YEw7nrcVv4bZ9z02JRvQ.roa (hash: bnWD5jhtetwyDhxUQbSnGO43JXVbXQTaCmHV3dR+gF0=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: kCQcaWYIyWqo6It/wfQEoYn5fXX8UMc/H87Q3e7qc6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:2f:cf:b5:af:69:a9:84:1f:63:f6:84:17:57:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Mar 26 04:01:45 2026 GMT
Not After : Mar 27 04:01:45 2026 GMT
Subject: CN=361331183adadeda236a37893c296bbfd7b7f7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:e1:3c:2e:f0:52:6a:d5:bc:12:c2:88:fc:
d0:91:80:64:22:ea:9a:ce:06:47:ef:d8:45:a9:f0:
a9:42:e9:0d:68:9a:c3:7f:52:cf:a6:aa:5d:50:ba:
5d:5e:c1:7c:a7:cb:eb:c3:72:1f:24:30:ba:4a:c6:
34:b2:44:67:17:52:14:6f:30:db:3f:39:57:a4:2f:
95:73:94:05:ac:a4:13:c6:64:d1:67:d8:af:00:b9:
45:9f:89:7b:1e:7e:60:87:1a:a4:02:35:80:d3:99:
d6:9c:30:f3:31:51:dd:d9:ca:e2:19:b9:ce:d0:52:
3f:35:66:a2:98:48:99:9c:ba:0c:d2:46:ca:cf:fa:
bc:1d:6b:5f:df:de:62:79:b5:e8:6f:10:5d:71:1b:
bc:14:87:71:c8:1c:57:eb:08:a8:31:96:18:5f:38:
ce:e2:4b:92:40:a9:52:ff:9d:36:a7:3d:1d:e3:a3:
b6:f3:d1:76:4e:39:88:f0:94:f8:bd:e4:a3:9a:34:
c1:eb:ae:8f:75:b9:68:a6:43:b1:a8:03:2f:e2:cd:
fc:51:f6:d7:1c:9b:46:eb:96:1b:e2:a9:28:14:73:
17:ad:74:f3:95:47:04:3c:60:b4:b6:74:d1:58:83:
49:42:34:91:5e:e9:eb:86:d8:6d:e5:47:85:89:51:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:13:31:18:3A:DA:DE:DA:23:6A:37:89:3C:29:6B:BF:D7:B7:F7:A4
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f7:a7:64:d1:ea:b7:5c:56:61:28:2c:47:55:d6:a9:22:8d:
59:bb:b0:99:80:05:c4:82:c6:e9:27:35:34:e8:d9:cf:af:e8:
7e:fc:b9:08:43:24:1a:8c:f7:4e:b2:7a:cc:29:48:87:23:0d:
aa:38:a9:5a:e7:17:6a:44:8b:20:be:5d:05:1f:f4:e3:52:48:
26:1b:af:02:16:61:4f:90:4f:76:81:9f:bb:76:68:9a:1c:7c:
e2:7c:74:01:1b:1d:c7:38:a5:37:ab:4d:3d:0d:ac:3d:d0:c4:
4a:03:f7:cc:e9:36:67:a2:5a:e0:af:6b:9f:8e:fe:08:0d:44:
cf:81:41:8e:ba:62:a5:73:91:9a:71:43:e8:4f:46:22:93:4c:
f5:c0:e5:9f:44:49:ec:ac:3f:1b:7e:19:f7:29:1c:09:b3:8e:
00:8a:55:1d:17:90:ef:7e:38:96:ce:36:ca:8b:f3:1c:55:f6:
23:c0:e0:9c:54:cf:6e:08:37:9c:c7:5c:49:e6:45:34:60:c8:
39:c8:39:6f:71:71:32:09:bb:60:9c:89:a0:9a:58:a6:72:4b:
d5:31:8a:bf:bf:32:66:8f:f2:86:3b:19:43:8d:20:fb:62:dc:
92:a0:c2:9f:83:7c:d1:d3:a1:31:69:e9:cb:7b:30:a8:a0:cd:
be:15:17:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:11 2026 by rpki-client