Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
File: oheIwIqkN9EWXOy9aP2xlaFd-gg.mft (raw, json)
Hash identifier: exXCzrM/cUbCNVf/mo+c37/VBrICP0GwfQjDidHTBkQ=
Subject key identifier: 67:57:FA:4A:45:95:FB:65:02:E0:DC:82:B9:A3:E3:75:3A:44:45:2D
Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Certificate serial: 019D26CD29E74E83882AE86E132E69CEDCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:01:12 +0000
Manifest this update: Wed 25 Mar 2026 21:01:12 +0000
Manifest next update: Thu 26 Mar 2026 21:01:12 +0000
Files and hashes: 1: MuBqNt1syXndOYY-i5CsiyzlTpI.roa (hash: ePoNVRZGhSsK8En0WwtEIpiiLLOOy80WDIwT7dGHkIU=)
2: oheIwIqkN9EWXOy9aP2xlaFd-gg.crl (hash: OS0/PqAjTc8Fwtvtlc8O5uuBLvddssw7bGE55GHJ7EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:29:e7:4e:83:88:2a:e8:6e:13:2e:69:ce:dc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Validity
Not Before: Mar 25 21:01:12 2026 GMT
Not After : Mar 26 21:01:12 2026 GMT
Subject: CN=6757fa4a4595fb6502e0dc82b9a3e3753a44452d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:a5:6c:e1:e2:29:a7:82:68:1f:54:38:5c:
91:d5:5a:34:ba:6c:7c:57:b0:c4:58:a2:74:01:3b:
ae:af:c7:76:d5:57:74:44:4f:54:7e:a9:6f:cf:5f:
02:6f:18:d7:12:60:d3:f0:cf:a1:c4:fe:74:06:9e:
7d:85:1f:a7:f4:b6:47:1f:f2:16:3d:7c:f2:fd:e3:
01:7e:3a:52:82:31:37:a6:f7:ce:16:aa:3a:f6:13:
3a:63:33:b0:fa:4d:77:d3:89:c2:10:03:b8:98:17:
27:29:48:0f:d0:2e:2f:f3:6c:c9:c0:6b:1c:ad:76:
a4:b2:e8:70:02:dc:ee:f7:4f:f2:54:12:02:3c:7e:
c6:09:04:49:7d:15:f6:d6:c6:99:fa:29:f9:c6:fc:
7e:3a:54:a7:28:d2:de:ed:92:4d:fa:59:0d:22:0e:
01:7b:36:d5:da:4a:75:64:19:a3:7c:36:69:d0:c0:
48:21:bd:75:cf:c4:3b:0c:a8:cb:26:9a:6a:b3:cb:
e3:c0:94:32:f5:87:8b:b1:60:27:f3:eb:27:ab:96:
89:07:c3:08:a3:96:72:ff:f9:4d:41:de:24:f3:28:
e4:b2:f7:bc:7b:a2:bd:e4:74:88:05:29:4a:e3:45:
bd:75:05:47:d6:ca:2b:b3:69:77:24:0b:29:ef:7b:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:57:FA:4A:45:95:FB:65:02:E0:DC:82:B9:A3:E3:75:3A:44:45:2D
X509v3 Authority Key Identifier:
keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:af:c5:c7:b8:06:81:85:42:11:b6:e5:bb:b0:1e:47:39:f2:
e9:a6:b8:90:1a:cd:be:5d:bc:4a:38:ad:9c:2b:3f:f4:f6:31:
00:0e:4c:ec:a1:94:9d:9b:09:1d:35:b0:03:f3:a0:30:97:85:
dd:27:24:26:d2:18:aa:35:5f:c3:25:60:01:68:91:e4:ef:a0:
f1:58:3e:79:32:b0:f1:3c:c0:6a:7b:60:4d:85:f2:12:52:e6:
c1:b7:e6:e6:4c:90:15:00:ed:ea:10:13:a6:50:d1:9d:c1:30:
99:55:1d:77:0d:b9:76:c0:72:83:97:f8:f5:f2:7c:91:7a:8e:
34:ee:38:2c:bc:04:84:6c:38:00:ad:ab:d6:6a:85:7a:cb:5b:
7d:33:81:a7:4a:41:4d:4f:fd:73:fe:bb:09:1a:4a:25:b3:88:
5a:09:2c:52:94:63:99:3c:c4:98:64:81:40:69:18:b0:ac:2c:
a2:dd:d1:30:e5:ef:60:4c:2a:1a:64:c8:41:76:e3:90:e9:a8:
1f:be:d9:f4:57:b2:48:ac:a2:e0:7d:22:31:7e:0c:a9:da:6a:
3c:da:50:80:8a:1f:5d:6d:67:05:7a:5c:5f:54:e3:9e:b9:4b:
a1:27:8b:3a:1b:72:35:c5:ae:fb:0f:6a:0c:77:af:19:f2:9c:
9e:ea:6a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:35 2026 by rpki-client