Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: 0BJ2oNhALvY46/mZoFQXeS9dZfXVnuH3d+VpRo3sV+o=
Subject key identifier: 88:79:45:4C:AE:36:61:C1:58:CA:90:85:D8:92:F4:02:B9:D6:BF:A4
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 019D25F1F81BBDBB852738717CA001DE2285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: 0474
Signing time: Wed 25 Mar 2026 17:01:47 +0000
Manifest this update: Wed 25 Mar 2026 17:01:47 +0000
Manifest next update: Thu 26 Mar 2026 17:01:47 +0000
Files and hashes: 1: 7lgvftt3YplOqtGKAXFKXfxxBQE.roa (hash: UMQdS0dx3gIMuyKJd19IDX0DWYOOtAEHJUPWP0Uspm8=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: kwNfS/1sG+YwsuVV2CiOO9hrudHKrhuOKElGHPmkC34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:f8:1b:bd:bb:85:27:38:71:7c:a0:01:de:22:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Mar 25 17:01:47 2026 GMT
Not After : Mar 26 17:01:47 2026 GMT
Subject: CN=8879454cae3661c158ca9085d892f402b9d6bfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:30:27:cb:a1:d7:de:76:a0:7b:35:c2:4c:
67:47:be:83:35:a1:27:40:09:45:ac:1c:4c:ae:5d:
b3:34:11:08:67:15:94:e4:3d:47:29:02:c5:fc:c4:
7b:5d:6c:89:83:47:ea:79:8f:a9:ee:bc:ed:6c:84:
bf:0a:03:ff:11:d7:33:d2:0d:6f:26:b0:a3:4f:7c:
0c:b2:dd:2f:37:62:7e:72:52:61:b2:de:44:25:7a:
a8:8f:f2:c1:ee:3c:5e:fb:c1:8f:7e:4c:c2:d5:dc:
b3:d8:ac:ff:5d:a2:a4:82:5f:b7:c5:0e:0c:bd:8c:
ea:60:11:97:e0:b1:06:e6:32:03:b2:f2:84:84:c8:
46:61:65:d5:68:b5:f1:df:8c:ff:8a:7b:7b:ae:40:
02:ca:8d:ae:e1:4c:d7:76:cf:89:e5:fb:78:2f:4b:
91:63:e4:7d:01:93:db:e3:29:1b:20:f3:d4:14:06:
47:a9:a5:f6:f2:df:eb:31:82:9d:7b:92:b1:46:9c:
f4:33:ea:93:ff:91:f8:57:a2:8b:f0:13:f3:49:cb:
79:17:1e:ca:75:6d:76:48:bf:80:40:e0:a6:22:25:
04:ed:54:10:8b:f4:fa:5d:8c:09:9b:d1:f3:3a:b6:
18:94:b0:5c:64:50:50:74:ed:b1:37:ad:c8:64:2c:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:79:45:4C:AE:36:61:C1:58:CA:90:85:D8:92:F4:02:B9:D6:BF:A4
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:85:90:e4:59:42:c1:f3:d0:8d:4d:2c:ec:74:52:f1:e9:a5:
9c:1d:4b:d9:5a:16:4d:c2:8e:ca:5e:d3:70:a1:d1:fd:53:1b:
d2:d2:22:07:e5:b6:72:6d:df:08:dc:24:c4:31:7b:ee:55:bf:
87:8a:9f:b3:53:44:6f:00:42:1c:09:40:40:b6:f3:81:de:b9:
c4:cf:a9:43:94:91:56:fd:ea:a8:bd:8d:ad:96:2b:7f:2a:e2:
fb:1f:b9:8f:3b:3a:18:ea:84:b2:f6:60:e7:75:4f:9a:d2:7f:
5e:01:e0:37:7a:77:53:0a:f3:6d:15:fa:b4:75:a5:5e:50:90:
c4:0a:04:a9:dc:ed:ae:12:2e:92:a4:36:bf:54:ea:71:79:18:
1d:a2:32:8b:9f:db:e8:0c:1a:f1:57:2b:ac:70:4d:9f:95:23:
64:6a:0a:fd:51:f8:f8:fb:ba:55:e9:4e:f2:4a:e7:b5:4c:60:
f2:7f:4c:99:b6:10:af:92:f8:f1:43:ff:14:cc:e0:a7:72:ae:
84:6a:cf:a0:92:5c:d7:1d:93:9c:25:88:97:1f:c6:75:ec:a2:
bb:4e:7d:89:bf:bc:b5:f9:c2:24:01:9b:4b:07:28:5e:91:99:
1b:a9:4d:0a:11:e1:a5:93:e7:98:ed:0f:e6:b5:28:5a:34:96:
21:12:77:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:11 2026 by rpki-client