Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
File: oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json)
Hash identifier: EHUizoPsmWEtS1XK44TaFXZ1xx4qPaDRjyi6EjnqoDg=
Subject key identifier: 87:35:F6:1D:82:7F:E4:21:D2:B5:ED:D0:23:DB:3D:82:91:A2:B0:C0
Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
Certificate issuer: /CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Certificate serial: 019D25838E59D33B4AFB217C58CB7A5C9A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
Manifest number: 095F
Signing time: Wed 25 Mar 2026 15:01:11 +0000
Manifest this update: Wed 25 Mar 2026 15:01:11 +0000
Manifest next update: Thu 26 Mar 2026 15:01:11 +0000
Files and hashes: 1: 0suRCo-bzD4_wCdS0bD7dThrxnc.roa (hash: wYzbnfgbRv8G8hJvN4xYggJP/XRjyk7dwQh4KwDNFG4=)
2: QZvuA2NHdvCmA1cVCHhsj1Prmc0.asa (hash: /Zv3rmHNuTLRGSfDstJxC4GDyC7D3phMMFsA4VMndXc=)
3: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: az/Lyajk5tVU4F1ydh7rR2kawv3sW7dGi1hnAbZSByQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:8e:59:d3:3b:4a:fb:21:7c:58:cb:7a:5c:9a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Validity
Not Before: Mar 25 15:01:11 2026 GMT
Not After : Mar 26 15:01:11 2026 GMT
Subject: CN=8735f61d827fe421d2b5edd023db3d8291a2b0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e2:46:af:33:34:6f:56:bc:93:85:78:e4:db:
da:89:8a:50:57:8e:f6:77:3e:1c:64:66:48:9c:0b:
bd:cb:a1:ba:ca:9d:de:55:26:d8:69:6f:b1:75:6f:
8b:e8:c2:9e:f4:d7:f6:2a:62:11:d0:60:84:28:f5:
3c:88:2d:3f:44:b8:35:bf:98:77:46:de:af:23:9e:
e2:22:a6:6e:3e:7b:41:c2:ab:82:b2:93:59:f8:d5:
c3:61:74:d5:99:85:92:ff:d0:64:e4:60:77:45:d7:
b7:19:4e:35:08:32:6b:d7:79:fd:56:ba:e2:ef:66:
bd:41:30:0f:24:50:ab:1f:c7:d8:a6:fb:6b:79:bf:
60:73:70:3f:88:44:26:3e:c1:65:3d:39:3d:d9:55:
d9:d1:8b:4d:04:0c:79:52:28:42:6c:20:f1:25:84:
42:40:d1:56:cd:f6:72:e7:80:7a:1b:9e:ed:dd:6f:
88:94:0e:12:dc:e1:d4:80:23:7f:10:a6:02:8e:9e:
96:05:ba:e4:2c:44:d4:3f:af:0b:21:b2:71:7b:32:
a9:0d:75:b1:9c:fe:93:12:3e:ef:a1:27:4c:ea:66:
ee:d9:6d:7d:5a:d7:07:d2:f3:67:a8:15:53:52:ed:
2f:03:dd:09:90:57:8c:4a:26:b3:02:70:28:23:53:
a2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:35:F6:1D:82:7F:E4:21:D2:B5:ED:D0:23:DB:3D:82:91:A2:B0:C0
X509v3 Authority Key Identifier:
keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2c:ef:ae:df:86:9c:92:a3:68:aa:d5:86:98:b4:65:c8:ac:
be:26:08:ef:6d:4e:d2:c6:6f:86:b6:a0:b3:48:66:3c:fa:c5:
3d:78:69:c4:89:0a:97:82:31:6b:18:ab:d3:47:f3:17:b5:21:
d6:48:24:48:c1:88:24:e4:f5:27:96:71:b0:4c:68:82:84:d9:
52:79:86:70:c0:23:75:1b:da:e1:8c:03:c2:30:20:d7:c4:4a:
a0:ed:c3:f6:5b:ae:2b:f7:a4:ce:b2:7c:53:ee:33:31:d0:f9:
01:ad:0c:8c:39:79:f8:c2:c4:69:ba:22:f6:41:f1:34:bd:8d:
ae:49:19:91:96:f3:70:bf:21:d7:f9:89:c7:68:68:57:5e:96:
5e:22:08:04:07:dd:ee:65:06:83:60:7d:76:62:75:3b:70:32:
24:36:07:ce:37:f7:97:89:88:09:1a:5f:0c:82:1a:9c:73:40:
42:3b:35:91:01:77:60:4b:c9:a3:8f:f5:51:c4:a0:38:9c:6e:
09:e1:0f:dd:77:ce:d0:34:6f:51:64:1e:b2:1e:73:cc:7b:5e:
09:34:b5:71:f3:53:53:50:24:7b:68:31:31:3d:26:20:9b:e9:
16:55:ce:c8:f5:7f:de:af:77:7b:a2:14:32:30:a6:8a:19:8f:
18:c4:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:20:35 2026 by rpki-client