Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: l7Xc8Xo1qq+hAeRefTaXCJKxqNNkiXMQlaaIomalGZg=
Subject key identifier: 0B:91:04:AF:16:62:31:90:E5:B9:BB:D9:DF:DB:CB:5A:9E:E3:70:47
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 019D27A891A2430643D50DDA565DE6D7FCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 0538
Signing time: Thu 26 Mar 2026 01:00:51 +0000
Manifest this update: Thu 26 Mar 2026 01:00:51 +0000
Manifest next update: Fri 27 Mar 2026 01:00:51 +0000
Files and hashes: 1: 38pGZs7H26DrGSXKpy7NGMGvyNg.asa (hash: ZxC1UU+w8hDxkvYvkuN6y+g+zQIOTKFm51EQ8DphQn4=)
2: 3xF5zXncC4lUUlVcqraWFOzrS7Q.roa (hash: vnW96IIO7KZsSM+69xxxO0ynFQjIBJXcCGymfdrv09M=)
3: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: oPbX70T3tivoALOIJiTJBpeiozXhy3zFEXg/fn/bTZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:91:a2:43:06:43:d5:0d:da:56:5d:e6:d7:fc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Mar 26 01:00:51 2026 GMT
Not After : Mar 27 01:00:51 2026 GMT
Subject: CN=0b9104af16623190e5b9bbd9dfdbcb5a9ee37047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2b:e1:15:47:a4:82:25:20:a5:ae:75:9d:43:
62:46:8d:1c:ef:ca:bc:c1:e1:49:3d:c2:35:ac:72:
e2:97:a6:dc:75:43:0d:ad:4a:2e:e1:e1:a8:4e:4e:
67:92:d2:65:6c:29:4d:c5:b1:ef:1a:2e:b1:27:8b:
42:6c:2c:1c:92:68:18:f1:d5:05:e5:52:68:a5:58:
3a:1b:53:93:e8:02:f6:eb:57:2f:7a:86:ae:ae:85:
69:2a:70:74:e6:fc:d1:5c:37:a5:1e:43:7a:4f:d5:
34:d3:02:d4:99:3e:ef:84:84:27:c2:6f:55:13:07:
3a:35:a6:4f:72:d7:72:b3:54:44:99:e6:8c:8b:cb:
e1:1f:7c:08:f3:db:ea:12:e6:a5:d0:46:e5:db:13:
92:03:84:ed:9a:a2:96:3e:39:de:e4:f5:1c:cd:79:
97:c0:7e:de:bd:73:03:eb:13:2a:70:ea:dd:bd:28:
f6:ea:36:17:ae:e3:05:ec:2a:3e:10:35:c0:55:ee:
29:da:9b:cb:ea:76:26:3f:db:ad:1f:28:f9:b5:aa:
f3:84:29:aa:74:71:a5:4f:2e:43:2d:ec:5a:4c:44:
42:11:69:9c:90:81:25:a4:bd:1b:55:1b:58:49:32:
e2:33:c9:7b:90:b4:2c:9b:44:af:d2:3d:2a:b7:04:
4b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:04:AF:16:62:31:90:E5:B9:BB:D9:DF:DB:CB:5A:9E:E3:70:47
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f8:92:9d:55:34:d4:ba:8c:f1:f6:fe:f5:80:ec:9b:b9:39:
ff:1b:a2:f8:cf:5b:22:0c:b3:76:30:03:4e:94:b5:b1:38:fe:
5b:5b:22:11:77:8b:6f:6e:79:f7:0c:6e:db:cc:83:f6:89:65:
09:8c:d2:d4:81:bf:44:5c:bd:b1:78:d4:92:da:1d:4e:78:e8:
fb:40:58:6f:1b:3b:03:10:fb:dd:b8:eb:f1:1b:3e:97:19:b3:
c8:cb:b4:8f:0b:bf:ae:6b:7d:4f:53:8e:7c:f4:24:23:33:46:
11:4b:1f:fd:e6:88:a1:cf:10:cb:ed:81:ed:4d:1d:88:72:2d:
c1:44:7d:9c:0d:df:42:b7:6d:a1:c3:46:c4:2d:b0:6d:8d:13:
64:6c:a4:85:34:18:3a:15:b5:d3:a0:d5:b8:43:4c:8c:81:87:
4e:49:31:ad:e1:3e:2b:62:94:51:3d:a4:94:88:0b:6e:c4:45:
4a:63:6e:08:06:90:4b:3e:43:25:9b:89:bb:40:fa:2d:ae:91:
95:f0:7c:54:a3:e0:bd:18:fb:42:c6:6a:60:15:32:1a:ce:12:
71:bd:ec:c6:10:31:5e:99:95:63:a2:c3:49:dc:df:c1:b6:c3:
f3:02:ae:32:3e:f0:85:bb:ad:8f:78:d7:5c:a1:ed:8a:e2:ba:
5b:d8:ef:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqJGiQwZD1Q3aVl3m1/z3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzgyZTJlNTRiNjBmMWY2OGY4NWM5ODRkYTFhNjk2MzFj
NTJjYTgwHhcNMjYwMzI2MDEwMDUxWhcNMjYwMzI3MDEwMDUxWjAzMTEwLwYDVQQD
EygwYjkxMDRhZjE2NjIzMTkwZTViOWJiZDlkZmRiY2I1YTllZTM3MDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ivhFUekgiUgpa51nUNiRo0c78q8
weFJPcI1rHLil6bcdUMNrUou4eGoTk5nktJlbClNxbHvGi6xJ4tCbCwckmgY8dUF
5VJopVg6G1OT6AL261cveoauroVpKnB05vzRXDelHkN6T9U00wLUmT7vhIQnwm9V
Ewc6NaZPctdys1REmeaMi8vhH3wI89vqEual0Ebl2xOSA4TtmqKWPjne5PUczXmX
wH7evXMD6xMqcOrdvSj26jYXruMF7Co+EDXAVe4p2pvL6nYmP9utHyj5tarzhCmq
dHGlTy5DLexaTERCEWmckIElpL0bVRtYSTLiM8l7kLQsm0Sv0j0qtwRLnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuRBK8WYjGQ5bm72d/by1qe43BHMB8GA1UdIwQY
MBaAFKI4Li5Utg8faPhcmE2hppYxxSyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgt
ODFkMTMwNGZhZjc2LzEvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgtODFkMTMwNGZhZjc2
LzEvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfiSnVU0
1LqM8fb+9YDsm7k5/xui+M9bIgyzdjADTpS1sTj+W1siEXeLb2559wxu28yD9oll
CYzS1IG/RFy9sXjUktodTnjo+0BYbxs7AxD73bjr8Rs+lxmzyMu0jwu/rmt9T1OO
fPQkIzNGEUsf/eaIoc8Qy+2B7U0diHItwUR9nA3fQrdtocNGxC2wbY0TZGykhTQY
OhW106DVuENMjIGHTkkxreE+K2KUUT2klIgLbsRFSmNuCAaQSz5DJZuJu0D6La6R
lfB8VKPgvRj7QsZqYBUyGs4Scb3sxhAxXpmVY6LDSdzfwbbD8wKuMj7whbutj3jX
XKHtiuK6W9jvoQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:04 2026 by rpki-client