Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
File: OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json)
Hash identifier: vL7Qdb1AMi1FPvZ9yZ8nKGzUm3UZTR97I4KWPp1KeCI=
Subject key identifier: A0:23:7C:99:4B:5B:65:14:B9:B0:EB:17:81:6D:4B:38:CA:66:CA:2D
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 019D27040FCA3C8AE1D0CB038FD5114BD5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
Manifest number: 1071
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: 5ojvbfCctNCB5Gqhmzf0iwXXOEM.roa (hash: k8Uj++Nl/KE3zAMHJHLKpfjTAKVmdctYhbK1Afyv9Ns=)
2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: +27KPKZXuHBbsAv8OdKifCUO8nywQv6zc01O5Mwza1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0f:ca:3c:8a:e1:d0:cb:03:8f:d5:11:4b:d5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=a0237c994b5b6514b9b0eb17816d4b38ca66ca2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:de:99:4c:cb:f6:1e:6a:62:dc:ce:ef:4a:
db:35:08:b6:f5:8c:4e:0b:6a:51:7d:cf:c1:d6:59:
59:98:bc:7f:de:47:a6:6b:41:f6:22:be:6e:6c:c2:
99:37:66:bb:e4:5c:4e:81:47:b5:8d:aa:eb:fd:ae:
8c:dd:08:a0:c2:94:b3:a0:62:84:29:66:00:27:67:
43:f0:49:3b:c9:b2:78:38:f7:6e:9f:bd:c4:3c:fc:
ef:86:cc:60:f5:66:62:e3:99:4c:9a:b3:9a:7c:be:
d6:d4:dd:71:36:dd:56:7e:22:1a:fc:47:92:04:49:
96:c7:a6:d0:11:49:7b:f5:f3:a9:73:00:bd:29:b4:
1d:3c:4b:aa:9e:62:ba:7a:38:b5:89:d0:6f:50:f6:
5d:ac:a0:52:b1:a5:ef:bc:15:c8:81:b8:e5:ce:50:
97:09:c9:35:2a:0e:83:d3:62:3b:23:24:8b:d0:da:
d6:51:db:e0:ca:a0:13:3d:28:a4:67:d0:d4:67:7a:
2d:5d:16:a8:a5:27:fd:9c:3c:80:6d:53:29:80:ef:
6a:f3:68:0f:5e:0f:b2:ef:6f:73:3f:f6:0a:8b:a1:
46:55:0b:60:4e:aa:d4:db:5b:8c:ce:b2:4c:7b:68:
68:d2:49:a8:90:f0:e0:73:be:b3:95:86:e8:2a:e0:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:23:7C:99:4B:5B:65:14:B9:B0:EB:17:81:6D:4B:38:CA:66:CA:2D
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f0:85:cf:5a:30:45:e8:f2:c9:25:6e:87:3f:50:96:7d:36:
59:fe:67:e9:72:fc:1f:23:6e:5d:81:87:69:b0:44:68:03:e0:
37:7b:4a:a0:ce:e6:b2:c5:78:b6:13:ca:6c:9f:b8:04:2f:d8:
04:9e:21:b2:c1:02:5b:e7:cc:58:fc:bc:81:2b:5a:ae:c3:23:
9b:34:a1:e5:f7:41:c3:97:52:b9:6a:03:01:8f:58:20:59:ac:
4e:f0:c2:be:5f:f9:26:40:e9:f6:b0:13:ff:6c:93:b7:60:37:
98:f0:3f:9d:b6:87:d8:0e:5e:29:24:bc:26:0d:d2:47:88:90:
8f:67:6c:49:e4:7a:9b:34:36:58:4f:69:ca:5b:00:90:6f:43:
04:f1:de:75:fa:40:5b:a4:8e:89:3d:ee:17:15:47:98:43:25:
23:7b:77:44:a9:44:fc:04:b5:37:6f:97:e3:ca:a8:de:ec:df:
60:04:50:b2:c9:fd:d0:e0:75:0b:7d:80:38:ff:70:62:87:64:
47:0f:8d:0e:49:4e:ed:8f:c5:5b:ad:2e:56:b5:99:3c:9b:04:
21:b4:e9:24:14:16:43:84:e9:07:fd:20:75:13:d6:a3:49:33:
cb:9f:73:d4:17:7a:9e:8b:bc:29:08:5a:7b:47:53:bd:7c:fa:
b2:1f:b0:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBA/KPIrh0MsDj9URS9XPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OWIyZmEzNjUxMzgzYTdmYzZhODZhZGJhNTZjN2M2MjA3
ZDc1NjgwHhcNMjYwMzI1MjIwMTEwWhcNMjYwMzI2MjIwMTEwWjAzMTEwLwYDVQQD
EyhhMDIzN2M5OTRiNWI2NTE0YjliMGViMTc4MTZkNGIzOGNhNjZjYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTnemUzL9h5qYtzO70rbNQi29YxO
C2pRfc/B1llZmLx/3kema0H2Ir5ubMKZN2a75FxOgUe1jarr/a6M3QigwpSzoGKE
KWYAJ2dD8Ek7ybJ4OPdun73EPPzvhsxg9WZi45lMmrOafL7W1N1xNt1WfiIa/EeS
BEmWx6bQEUl79fOpcwC9KbQdPEuqnmK6eji1idBvUPZdrKBSsaXvvBXIgbjlzlCX
Cck1Kg6D02I7IySL0NrWUdvgyqATPSikZ9DUZ3otXRaopSf9nDyAbVMpgO9q82gP
Xg+y729zP/YKi6FGVQtgTqrU21uMzrJMe2ho0kmokPDgc76zlYboKuCnMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAjfJlLW2UUubDrF4FtSzjKZsotMB8GA1UdIwQY
MBaAFDibL6NlE4On/GqGrbpWx8YgfXVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYWQyNmYtYTMzZS00MDY5LWE4MDIt
MzczYjUyMmE4MjFkLzEvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xYWQyNmYtYTMzZS00MDY5LWE4MDItMzczYjUyMmE4MjFk
LzEvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfCFz1ow
RejyySVuhz9Qln02Wf5n6XL8HyNuXYGHabBEaAPgN3tKoM7mssV4thPKbJ+4BC/Y
BJ4hssECW+fMWPy8gStarsMjmzSh5fdBw5dSuWoDAY9YIFmsTvDCvl/5JkDp9rAT
/2yTt2A3mPA/nbaH2A5eKSS8Jg3SR4iQj2dsSeR6mzQ2WE9pylsAkG9DBPHedfpA
W6SOiT3uFxVHmEMlI3t3RKlE/AS1N2+X48qo3uzfYARQssn90OB1C32AOP9wYodk
Rw+NDklO7Y/FW60uVrWZPJsEIbTpJBQWQ4TpB/0gdRPWo0kzy59z1Bd6nou8KQha
e0dTvXz6sh+wJQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:36 2026 by rpki-client