Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: X0xIckP3iyv59IwKXvJVdTt/qdXhnZsoGIELwZPTNzc=
Subject key identifier: C0:C2:69:0D:94:4F:D5:72:73:9A:66:94:3C:D3:1A:02:8F:9B:1B:8D
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 019D27DF6BCB74C166D16BAA73CC4F6CB321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 02:00:46 +0000
Manifest this update: Thu 26 Mar 2026 02:00:46 +0000
Manifest next update: Fri 27 Mar 2026 02:00:46 +0000
Files and hashes: 1: 1Ci6CgQlWtwRj4abWotGCgJ_WbE.roa (hash: 21FDHL6tsfpOVwV9wPtKykM8GJxDD9usWaIS/proET0=)
2: IOO3IGbg3gm00rI1vRsCU8sKWe8.roa (hash: 0AcGRGmbErLkr9vaJN/WU2nLbROdp3GeVVZZ5PGFvPU=)
3: WlSa4s52rbN1YrdI2sTxISuXgVs.roa (hash: UFrSiCT3Ok3mVBZnw8kOQNxyLA+lThdQN1709llpw+A=)
4: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: fLGaoUwmGYQLMvbCr12FOW+GszaEyMLdeZBgdRoEh9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6b:cb:74:c1:66:d1:6b:aa:73:cc:4f:6c:b3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Mar 26 02:00:46 2026 GMT
Not After : Mar 27 02:00:46 2026 GMT
Subject: CN=c0c2690d944fd572739a66943cd31a028f9b1b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9b:b9:73:90:e1:66:af:ee:dc:9c:c5:da:91:
bc:f5:7b:c9:46:e5:28:c5:44:04:c7:77:64:7c:42:
01:e7:8d:ee:e5:e8:b3:3c:dd:49:22:74:4c:0c:05:
23:ee:a1:f5:af:d1:d9:bc:69:b2:f0:59:85:98:99:
dd:73:53:cf:74:0c:0f:41:45:93:d5:39:7d:84:0f:
92:d7:c0:b0:24:80:cb:07:34:ba:4b:61:6b:62:0b:
42:f8:05:11:b7:ee:d0:20:a2:03:db:fd:1b:24:9b:
29:49:18:c7:68:6f:bd:a7:50:e6:ef:30:be:51:65:
16:f9:47:00:dc:f4:6b:77:89:0c:19:1f:c8:ff:97:
5f:96:b3:c2:e5:2a:43:88:e2:83:13:45:0c:b9:b4:
eb:d4:dd:90:f1:c1:f2:32:52:7a:04:6c:c4:3a:de:
48:1c:9c:44:5d:37:b4:69:41:9d:a8:49:1b:e5:ba:
1c:70:da:f6:fe:8a:e2:bb:d1:65:67:52:14:0b:14:
cc:1e:21:3c:88:24:e3:db:45:23:c7:6c:f2:09:04:
ea:13:3c:7a:d1:de:ae:d2:dc:c4:3c:12:36:fe:d7:
76:d5:3b:48:44:98:ea:42:1b:6f:05:89:19:56:f9:
79:b8:46:7e:23:a9:0e:f0:ea:8a:f4:c0:a4:b6:ad:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C2:69:0D:94:4F:D5:72:73:9A:66:94:3C:D3:1A:02:8F:9B:1B:8D
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1f:f2:46:29:a0:a2:e7:46:5f:fc:f1:f8:09:cd:e9:0c:30:
77:8c:48:0a:bc:56:7c:9c:2f:cd:bd:ec:15:4e:cb:e5:24:91:
49:7a:54:6e:cb:60:91:fe:70:ad:89:11:11:26:d1:97:1f:75:
4b:d2:a9:5d:43:52:4a:70:c5:0d:3f:35:2e:12:18:1d:17:e0:
66:36:6b:79:0f:72:29:95:56:a0:e5:77:7e:52:d5:3c:20:42:
06:9a:43:56:39:f6:6a:ce:e5:e0:58:49:ae:9a:41:65:1c:7c:
a9:56:c4:b6:1f:55:a5:db:4b:ff:7b:b0:9c:ea:99:e5:75:c0:
a3:bc:d2:17:23:f0:a7:29:5e:34:76:0a:8c:7a:ca:05:cc:b0:
0f:15:e3:16:1f:91:58:52:bf:9d:4b:50:07:80:02:9b:42:1d:
c7:99:a2:cc:c5:58:f1:e6:f0:30:be:4b:4a:cb:c3:a9:6f:40:
13:d5:6e:b5:58:91:bb:da:fc:49:79:1b:78:eb:7b:f7:21:cc:
ca:cd:4e:de:df:ab:a6:58:01:44:71:fc:6e:05:4b:dc:8c:21:
51:3a:a0:31:f6:db:05:fd:cc:e5:0a:ae:55:99:fb:3f:20:d7:
9c:a3:0d:b6:1d:59:6b:68:55:1e:b8:5d:3d:b1:75:bc:00:db:
56:88:67:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n32vLdMFm0Wuqc8xPbLMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTE1NDQ0MWRmOTYyM2VlYjVhMTk2MTM4ZDIxYmVmNTgy
NGI0NDEwHhcNMjYwMzI2MDIwMDQ2WhcNMjYwMzI3MDIwMDQ2WjAzMTEwLwYDVQQD
EyhjMGMyNjkwZDk0NGZkNTcyNzM5YTY2OTQzY2QzMWEwMjhmOWIxYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75u5c5DhZq/u3JzF2pG89XvJRuUo
xUQEx3dkfEIB543u5eizPN1JInRMDAUj7qH1r9HZvGmy8FmFmJndc1PPdAwPQUWT
1Tl9hA+S18CwJIDLBzS6S2FrYgtC+AURt+7QIKID2/0bJJspSRjHaG+9p1Dm7zC+
UWUW+UcA3PRrd4kMGR/I/5dflrPC5SpDiOKDE0UMubTr1N2Q8cHyMlJ6BGzEOt5I
HJxEXTe0aUGdqEkb5boccNr2/oriu9FlZ1IUCxTMHiE8iCTj20Ujx2zyCQTqEzx6
0d6u0tzEPBI2/td21TtIRJjqQhtvBYkZVvl5uEZ+I6kO8OqK9MCktq0H8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDCaQ2UT9Vyc5pmlDzTGgKPmxuNMB8GA1UdIwQY
MBaAFKChVEQd+WI+61oZYTjSG+9YJLRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmIt
OWQ5NDM2NzFhOGEzLzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmItOWQ5NDM2NzFhOGEz
LzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkx/yRimg
oudGX/zx+AnN6Qwwd4xICrxWfJwvzb3sFU7L5SSRSXpUbstgkf5wrYkRESbRlx91
S9KpXUNSSnDFDT81LhIYHRfgZjZreQ9yKZVWoOV3flLVPCBCBppDVjn2as7l4FhJ
rppBZRx8qVbEth9VpdtL/3uwnOqZ5XXAo7zSFyPwpyleNHYKjHrKBcywDxXjFh+R
WFK/nUtQB4ACm0Idx5mizMVY8ebwML5LSsvDqW9AE9VutViRu9r8SXkbeOt79yHM
ys1O3t+rplgBRHH8bgVL3IwhUTqgMfbbBf3M5QquVZn7PyDXnKMNth1Za2hVHrhd
PbF1vADbVohnWA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:57 2026 by rpki-client