Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: lx/vrnm98/BLjJmM2zv2+stcpkffd/uXghW/He25FHg=
Subject key identifier: 5F:2F:9C:09:56:C3:20:68:A3:7E:F7:C8:F2:A1:60:F8:6A:9C:0D:59
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 019D2929593F829283245F04A443FF93ED04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:01:08 +0000
Manifest this update: Thu 26 Mar 2026 08:01:08 +0000
Manifest next update: Fri 27 Mar 2026 08:01:08 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: 58POG4qPe3Zee1ZfybuXniUkLsYDU+veB4SlhBh/J9k=)
2: nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa (hash: WwxgQJEoxT9RlD+HkKWEjQjejeBr0IIFvMv1CfM5j4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:59:3f:82:92:83:24:5f:04:a4:43:ff:93:ed:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Mar 26 08:01:08 2026 GMT
Not After : Mar 27 08:01:08 2026 GMT
Subject: CN=5f2f9c0956c32068a37ef7c8f2a160f86a9c0d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:94:72:a7:d8:9c:dd:f0:73:0b:7e:b7:54:
e5:ad:32:6f:f5:5e:f2:f6:cc:e8:de:83:4b:d0:a3:
5f:b3:e4:d4:81:31:ee:dc:4b:0a:df:49:09:ea:e9:
ba:d3:5c:49:7d:bf:b4:17:4b:a6:e3:ed:e4:74:ed:
32:e7:de:1a:ad:d4:1a:c3:7c:9d:45:a0:e1:1a:87:
89:35:89:74:13:f7:ac:ad:16:e3:b3:e6:f8:f0:9d:
33:de:e5:8a:ca:1b:5b:aa:5b:ee:0b:b8:59:08:9b:
ab:79:11:f1:53:3f:9b:71:64:ed:12:8c:3d:b5:0d:
ca:8f:44:c2:67:6c:67:ec:f9:e5:e1:3e:18:f7:fc:
a7:0c:c5:8d:dd:dc:60:20:ea:98:1d:aa:af:75:a5:
b3:06:d7:31:09:03:fc:5d:1f:db:e0:d6:3a:e6:74:
ff:7a:45:2c:9d:10:02:62:50:ef:73:21:24:e4:43:
a9:f0:cc:b1:1f:c4:3b:16:8e:c8:b3:ee:bd:8f:0b:
0f:4f:6c:3c:29:51:d2:11:8d:2e:87:ba:17:6c:b7:
cb:79:5a:5e:53:bd:03:12:32:36:40:c3:5d:ea:7a:
27:41:9d:bc:60:b0:7a:72:1a:97:59:53:18:39:cb:
d0:c1:3a:ab:b5:71:d7:18:e4:a8:dc:98:2c:c4:46:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2F:9C:09:56:C3:20:68:A3:7E:F7:C8:F2:A1:60:F8:6A:9C:0D:59
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d7:d2:ad:93:5f:92:88:96:d8:22:4c:dd:ee:f1:08:4d:85:
46:dd:28:b3:cc:c9:5f:e0:85:f1:c8:4b:09:80:b3:09:96:23:
2b:3a:4e:f3:70:aa:77:2d:22:78:27:84:07:9b:99:66:90:81:
5d:f9:0b:1c:6f:a2:39:d5:25:2a:1c:a3:dd:22:8b:68:75:33:
ed:ea:9b:b3:ea:2f:43:f4:78:e3:a6:35:1b:2c:88:54:49:7e:
c3:ee:50:11:12:e1:e2:72:5b:09:2b:56:3b:aa:3c:a1:21:de:
37:fa:73:cc:5b:58:77:f8:ef:60:c3:24:55:fd:3e:bb:85:78:
71:89:23:7b:1c:38:c3:f3:72:6c:b7:b6:07:2d:c8:0d:cc:a7:
e4:06:cb:c8:f6:f4:73:7f:52:57:4e:35:b2:8c:f1:69:e2:fd:
d4:b8:24:57:cd:8c:82:65:42:40:ce:bc:bc:48:9b:89:0b:e6:
03:18:2a:9f:71:0d:0b:dd:0d:28:cb:19:74:8b:a0:d8:80:28:
8a:4d:c3:6f:f3:29:50:f6:2e:d8:a1:31:f0:1a:a9:6e:15:e1:
de:bb:ea:86:25:c2:7e:96:38:52:db:21:37:53:f5:9f:cf:52:
87:43:41:b2:e8:32:78:3e:4a:87:d6:f1:ab:4b:8a:48:d9:6b:
1c:4c:00:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:28 2026 by rpki-client