Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: tslTygQgHmFEVfGI3joemXuh78S6znG22FnK1BqNN+U=
Subject key identifier: 98:56:F7:C9:EC:62:A5:9F:72:D3:17:BE:E9:30:78:20:9B:9E:18:AC
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 019D2884AE9DC22FC88AA60379122A044FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:01:17 +0000
Manifest this update: Thu 26 Mar 2026 05:01:17 +0000
Manifest next update: Fri 27 Mar 2026 05:01:17 +0000
Files and hashes: 1: HbGW1bIuKJtcKHzffUf-4COhdZM.roa (hash: XbWavlk3zf17or5OmaUS0jVlWZ00ZlHjNhNZCQ7iW5c=)
2: gbJe-QJELQjG77ZNjAeXTNXNFEw.roa (hash: 1fpv/Uz2JKbxfrghTnax/Tb7Em3yN34FPhCyAtrNWL8=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: pCfatY2Hzh7Qrdc437HbAQiNR5HznLsdongh7Yt0cgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ae:9d:c2:2f:c8:8a:a6:03:79:12:2a:04:4f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Mar 26 05:01:17 2026 GMT
Not After : Mar 27 05:01:17 2026 GMT
Subject: CN=9856f7c9ec62a59f72d317bee93078209b9e18ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:c8:09:b4:bf:6d:59:f3:f8:26:12:46:fd:
a4:66:39:f3:37:2e:ff:ce:d2:26:05:60:67:27:c0:
8c:8c:ae:51:fa:e2:81:58:f8:15:66:11:59:6f:0f:
10:9a:97:e0:23:70:20:15:fa:ed:6e:2e:bb:bb:59:
2d:46:e4:cb:22:f2:5a:7f:08:db:36:3e:9e:13:eb:
b5:a4:cc:45:62:8f:05:9d:2d:86:63:4e:1c:2b:77:
68:d8:43:30:16:b2:0c:59:0a:35:35:19:56:a3:52:
9b:a5:30:24:46:a4:d2:13:3a:12:2f:1a:50:ab:50:
82:0c:00:07:c1:c2:3b:db:5f:0f:c8:e2:5a:b8:79:
d3:bb:f3:f4:df:27:64:1e:7d:e0:16:39:97:63:e0:
6a:43:64:ca:f0:58:aa:81:b0:bb:d1:70:e9:38:dc:
9e:7a:f1:06:19:cd:24:b6:62:1a:bb:31:2b:74:37:
03:d5:59:51:5b:b4:7f:38:a6:04:68:28:af:0a:72:
a5:2a:57:0d:f6:de:23:a0:f1:d0:9e:21:d5:53:d4:
f4:f7:0c:a5:01:6f:d2:4d:e0:27:fe:02:5d:2e:68:
12:cb:71:40:b8:05:aa:65:79:68:db:b5:2f:8e:b3:
4f:cb:fa:19:d8:61:e5:a5:a6:5f:36:55:32:95:00:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:56:F7:C9:EC:62:A5:9F:72:D3:17:BE:E9:30:78:20:9B:9E:18:AC
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:73:32:d5:0b:9e:60:96:61:55:90:c5:25:25:b0:45:46:ab:
5c:35:b8:84:98:b6:94:8f:1b:a6:dd:bc:d8:bc:a5:c9:85:a0:
ff:c4:ea:34:9b:5c:be:b5:32:b8:ad:aa:f7:9f:92:21:7c:15:
20:70:6d:d6:10:5e:9b:6e:37:69:4e:ce:d3:31:0c:fd:9f:f5:
e9:11:89:0e:34:e7:27:31:72:90:18:cf:78:fe:8c:c1:bc:30:
93:47:c0:11:1b:a1:b8:bf:2b:ad:1c:b7:61:2f:60:79:e4:e7:
b2:cb:ff:35:a0:14:56:2d:92:7d:6f:bc:fe:c6:f6:57:13:9d:
43:fe:16:0e:82:df:41:40:c4:34:73:2b:48:26:ac:07:9e:e0:
a1:4f:e2:92:76:e7:c0:a2:32:64:b0:34:4a:d8:80:d7:3e:89:
77:b6:a5:c1:5e:8b:29:f8:7c:fd:ab:9e:8f:29:60:aa:32:05:
42:b2:7b:6b:01:21:2f:91:9f:3b:00:36:cd:6c:cf:cd:44:51:
13:29:99:1a:0d:35:53:18:cb:22:41:60:83:a8:08:2b:c9:b6:
0d:cf:2c:26:88:c3:9c:c2:7f:90:59:7a:de:41:d4:5a:9d:95:
4e:06:f0:ea:81:2b:55:4d:38:6f:9a:e9:e0:7c:fd:b2:6e:f1:
89:8b:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:25 2026 by rpki-client