Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json)
Hash identifier: A/MPm8F6fVz9JrMJfgJMAsy4UBKQPAHmTD54OtFuU50=
Subject key identifier: 7F:DD:24:20:FA:51:45:AF:05:C6:35:F9:F4:A1:E0:DF:80:B4:49:B8
Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Certificate serial: 019D27A8C3E4E411AF8FC5C250ED097677E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 01:01:04 +0000
Manifest this update: Thu 26 Mar 2026 01:01:04 +0000
Manifest next update: Fri 27 Mar 2026 01:01:04 +0000
Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: GTq5YKpp3qH2aMWj5jPiIdJQsvNqPB6aSukGacmg+tk=)
2: wd-oYNXbGl3iBZHEfglW7P_Xdoo.roa (hash: y4wg+I7p29l8Do6A3p1FTIrG+j7k3dKo1xpUB8J2zSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c3:e4:e4:11:af:8f:c5:c2:50:ed:09:76:77:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Validity
Not Before: Mar 26 01:01:04 2026 GMT
Not After : Mar 27 01:01:04 2026 GMT
Subject: CN=7fdd2420fa5145af05c635f9f4a1e0df80b449b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:e6:07:00:f3:09:f4:77:7e:72:8e:e5:a1:
aa:65:e5:d0:a2:7a:8b:15:49:04:9d:11:86:70:9d:
6b:09:18:55:a1:75:d4:bc:7e:66:46:dc:c6:23:c1:
bc:d3:d4:11:c9:08:6f:c5:94:ad:ef:77:f3:a0:29:
18:76:14:64:59:45:a8:6f:6e:6b:24:7a:f9:70:e6:
83:22:97:04:08:15:ea:47:30:d4:03:34:15:b2:f5:
f8:55:f0:70:c2:4a:e8:58:57:d4:57:81:e8:f1:3e:
82:ee:89:67:17:0f:c1:27:58:e8:44:c6:d9:59:8d:
f1:7b:5a:96:98:92:f4:a0:d3:cf:70:39:b7:86:c9:
dc:00:7c:2d:bb:39:6e:2e:a8:7d:e4:de:11:23:3d:
7c:16:34:fe:73:97:97:49:f3:de:20:35:74:65:0e:
77:1f:36:ee:c0:a7:ba:6c:de:96:24:68:1e:d1:75:
be:eb:80:31:56:bb:9c:b5:6f:f4:c8:11:b5:fc:5f:
fc:9c:0f:f3:76:94:24:9b:05:d0:7f:cf:86:18:55:
6e:6a:02:fc:93:7a:4a:ba:58:c6:47:27:2b:b3:15:
62:6b:eb:2a:cf:6c:7c:44:fc:58:8b:9c:6d:75:bc:
61:3f:25:4a:e5:96:81:7e:e5:30:f0:d0:4b:c2:2c:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DD:24:20:FA:51:45:AF:05:C6:35:F9:F4:A1:E0:DF:80:B4:49:B8
X509v3 Authority Key Identifier:
keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f6:8d:0d:ca:a4:1c:2a:f3:9a:06:2c:44:f7:91:a7:6f:72:
81:39:98:30:85:57:97:cb:e3:f1:d7:70:f2:1e:73:d8:69:aa:
19:08:0b:5d:ef:6c:2f:89:1f:cb:fe:6b:70:6f:d3:8a:ab:1e:
9f:4e:d0:10:c4:97:74:5b:5f:d0:c3:43:ca:2a:80:39:c8:c0:
e2:86:da:bd:85:b2:cd:63:a4:a1:80:2a:5d:cb:fd:ed:1a:1d:
62:5a:19:39:b7:2f:60:31:34:d7:e5:be:6e:5e:ef:ed:50:ae:
ce:60:e7:59:3f:52:00:f2:cd:e6:b2:49:e4:b2:8b:86:54:70:
d7:82:1a:59:3d:e5:12:76:88:87:aa:74:a7:10:1e:78:c5:8c:
5b:ad:2f:c1:1b:8a:6f:ff:ea:90:0b:47:3a:1f:b2:82:a5:47:
ff:1a:8c:f3:72:7a:0b:ab:60:0a:74:4a:6f:ce:00:7e:60:c3:
95:09:2a:98:b6:43:b3:29:e4:5d:cf:8a:00:9b:b4:c9:d2:68:
e2:33:2c:11:1d:6f:41:0b:74:15:4c:89:47:db:e7:a8:94:fd:
81:cb:f0:ca:de:6d:ae:1a:97:ca:97:57:b3:16:6e:64:66:34:
b9:86:7c:0c:17:1c:75:37:c3:0f:02:38:c6:1c:0e:b4:51:a8:
82:aa:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:00 2026 by rpki-client