Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: GSHCtQS9GxLtEDiCtKSxTzXLzjCt7t7flk8axgkpWZU=
Subject key identifier: 95:1A:75:67:16:06:D7:40:1D:86:CB:EB:66:E7:99:7D:87:C6:66:D1
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 019D28167B61EFD5BC1BFA89271F7D0A8B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 10B5
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: GtRugG7rUNXwN8D-4_Fmv8xBbi4.roa (hash: /BvITM4S5y0rZ1AQGGceJ5QHF+EoXg6/6ygN/nHgl9Y=)
2: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: nLVTmVAXgaKUUvWH6IWqmkce3tipq358Sc2ofXS7elg=)
3: _09CYID6_CGhAezIzwAbTFbsCi8.roa (hash: dZSTZUSxmSRc4nvVBTT8GAEBkxmPLHGJ4SuadjBnT94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7b:61:ef:d5:bc:1b:fa:89:27:1f:7d:0a:8b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=951a75671606d7401d86cbeb66e7997d87c666d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:d7:3b:9e:83:ea:e9:46:88:35:69:a2:40:
1b:b3:3a:16:e1:a8:aa:0d:9a:67:84:bb:04:8f:75:
42:a2:0a:a1:f6:08:9d:6d:f3:1c:a6:b9:46:1f:6a:
84:62:f5:4d:95:3c:18:cc:f7:87:13:40:46:57:cd:
93:94:aa:de:59:b4:c9:a2:3b:5a:be:8c:ee:bd:44:
d5:f3:3a:c8:b0:41:d2:e2:6f:a2:64:91:57:2a:71:
4a:d2:fb:43:d1:6f:83:34:52:73:6e:aa:86:b5:54:
5f:e7:74:b4:21:f6:ee:44:a7:58:be:0c:c4:69:a7:
3f:7a:18:4e:94:8b:82:0c:cd:13:3b:4a:b6:1c:50:
64:ff:06:38:e4:28:87:4e:a4:ca:50:d5:17:75:e0:
cf:8c:f0:5a:ee:2e:f5:bd:aa:c4:46:6f:17:b0:11:
3f:e3:ac:96:24:e6:f0:cd:69:0f:ba:74:aa:f4:0d:
40:d4:79:28:68:b7:e0:4a:a3:7b:55:f4:0e:ba:e0:
de:c5:3d:61:b2:97:99:40:bb:60:cc:2e:e1:61:59:
c4:56:93:fe:95:ee:83:b3:ff:39:b3:fb:2d:b7:bb:
18:2b:f9:a6:87:0e:d8:92:df:0c:98:29:91:bd:52:
7c:fc:56:6e:b3:ca:75:93:ac:05:99:4f:70:2b:28:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1A:75:67:16:06:D7:40:1D:86:CB:EB:66:E7:99:7D:87:C6:66:D1
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:82:e8:19:12:ce:68:c1:e3:90:73:17:73:0c:22:08:63:cb:
58:0d:4d:4d:e8:4c:d0:58:a8:17:9c:c4:2a:a3:ff:bb:3e:35:
bc:3e:e6:1e:09:d4:bb:28:b7:1b:ee:18:89:7d:80:f4:0b:ed:
8a:bb:18:82:c8:45:88:75:5d:fe:ca:b1:a3:31:b8:14:20:ab:
0c:36:19:b6:9b:f7:86:f0:3c:74:79:a3:6b:c4:66:8e:5e:6d:
19:3d:6f:20:40:b7:17:a2:19:e3:33:e4:32:89:bd:6f:1a:68:
ab:83:55:9f:e2:0e:7f:68:91:53:2c:fa:e1:5e:28:50:90:7d:
bf:b9:4d:9e:aa:14:73:b8:e0:5e:63:02:b5:3e:f0:ee:9a:d5:
46:08:b9:71:8f:ff:b5:a6:f4:57:7f:86:3f:77:2b:74:c0:ef:
4a:ad:84:75:cb:50:49:36:54:30:db:d1:07:64:f7:2e:b7:a1:
27:d7:5c:11:ff:16:14:4f:ab:14:d9:ac:d7:6d:ae:fa:6c:e6:
81:5a:e1:71:58:99:6c:02:81:94:af:2d:6f:9c:2d:54:e3:70:
74:4f:04:0f:0d:42:f3:05:14:d1:8c:1c:d0:fa:aa:c3:10:18:
22:d7:84:92:57:59:b0:4a:8d:e6:d5:3a:c1:bf:69:86:38:03:
fb:fd:72:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:19 2026 by rpki-client