Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier: rCQq5digeM2WML8t5068Nq+kdmbMM4KgTl6RZTcgJ6Y=
Subject key identifier: 96:43:6A:78:E4:63:3F:FC:BF:63:A0:F5:08:73:FB:A6:03:77:03:4A
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial: 019D265F34DFD4AA8FAB93DAE27339C0C0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number: 0A59
Signing time: Wed 25 Mar 2026 19:01:06 +0000
Manifest this update: Wed 25 Mar 2026 19:01:06 +0000
Manifest next update: Thu 26 Mar 2026 19:01:06 +0000
Files and hashes: 1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: zTbezq4VsVvez/Kj97kjoyapF9PWze3SCZSR+7GTvtE=)
2: rTTUeShcOXNB_38gPBfANBYb9Rg.roa (hash: SNHTIMM1yFWrTxfEjv177J1xrcwVvQjJHLgNi04rw5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:34:df:d4:aa:8f:ab:93:da:e2:73:39:c0:c0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Validity
Not Before: Mar 25 19:01:06 2026 GMT
Not After : Mar 26 19:01:06 2026 GMT
Subject: CN=96436a78e4633ffcbf63a0f50873fba60377034a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:28:43:01:8b:fb:7d:9e:f1:80:bb:84:bd:
6a:71:ca:ae:dd:88:35:be:ff:50:31:a4:27:5e:c8:
c3:9e:5b:97:3c:a5:97:08:8b:3a:18:3a:da:d4:ad:
9f:05:95:7d:e0:85:f2:46:a0:f3:57:0e:fa:48:ee:
94:9e:ab:f2:eb:4c:68:bb:d2:9f:80:6b:b9:4e:77:
a8:df:27:09:31:cc:b1:60:39:9a:c3:99:60:66:d3:
83:ec:43:33:ca:74:c9:cb:89:84:81:a3:92:bf:fd:
86:6b:e5:e3:3a:3e:85:bd:6e:3e:17:98:2c:b8:10:
f5:80:b8:d1:69:84:1c:44:d1:73:c9:3a:7e:77:bf:
c3:3d:ca:7a:52:50:0d:39:1e:1c:02:f4:fb:f4:18:
5e:a4:51:de:2a:1a:54:cf:aa:62:e9:ad:51:04:32:
e4:87:19:fe:2c:99:b5:21:a9:ac:64:7c:2a:7b:e6:
d6:1c:ab:bd:45:9a:59:2c:c8:fe:03:e2:9c:d9:b6:
df:88:45:f7:44:5a:e2:c1:2e:d2:a0:e9:4b:42:3b:
3c:ae:c1:10:9c:32:ef:c0:ef:88:9a:73:53:b6:9b:
7e:e5:6b:65:2b:65:17:27:22:0d:e8:0d:c6:74:8e:
35:8e:7e:98:56:8f:7c:a5:90:66:08:d6:92:f8:d3:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:43:6A:78:E4:63:3F:FC:BF:63:A0:F5:08:73:FB:A6:03:77:03:4A
X509v3 Authority Key Identifier:
keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ef:c8:5a:a2:e0:56:1c:0b:8b:8a:ef:71:0d:77:55:12:72:
84:72:73:e8:9a:32:9d:96:1c:29:38:7f:79:0f:b9:42:0a:15:
ec:c5:76:42:9d:2a:26:80:49:68:78:cb:9e:4d:fe:11:80:aa:
38:e2:29:f6:d1:99:6d:ee:4e:81:20:96:02:69:19:52:92:02:
63:f8:66:68:3c:da:01:1b:95:39:18:92:19:36:47:63:89:b4:
f8:7c:7d:24:70:98:fc:c4:35:c9:20:aa:b0:23:55:b1:cb:fd:
00:a4:4a:1b:ff:79:d0:99:0c:55:dd:84:28:ae:73:74:57:80:
36:cd:8c:99:00:18:01:27:df:74:75:28:16:18:69:46:df:66:
28:44:e8:d1:b8:60:2c:da:58:35:1e:c1:3c:d3:81:4f:4c:db:
d9:2c:5a:f4:ae:5c:6e:b1:1f:ba:a8:53:e0:30:a1:4c:67:2f:
e9:32:84:dd:cb:09:df:dc:3b:99:02:04:4d:ce:a7:26:0e:9a:
d3:0c:75:a7:08:bc:b0:6c:d3:01:45:49:db:ee:29:8a:e6:46:
88:06:d8:d4:be:1e:da:a1:ac:a0:42:e2:b5:25:05:5b:d7:18:
15:bc:7d:75:ae:eb:21:7b:b7:db:b2:28:08:aa:ca:57:ef:b0:
5e:13:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:48 2026 by rpki-client