Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json)
Hash identifier: L+kb+Tsw4GjUqJ+eB58Ac+Avv26qAdmKrKIN71AHBFA=
Subject key identifier: 94:38:98:D3:3D:78:DB:D7:71:59:73:F2:CE:70:BB:52:E2:48:F5:46
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 019D28164A23CC6A322567C6BEFD46BA8DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:00:42 +0000
Manifest this update: Thu 26 Mar 2026 03:00:42 +0000
Manifest next update: Fri 27 Mar 2026 03:00:42 +0000
Files and hashes: 1: 27jrzr1xWogH3ddsATux5O5Jw1A.roa (hash: xfv2vIRKihnS8ExH9lEFM1xLctm/mcM8AdL4KJZKGlc=)
2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: 75GiN9hIfZjcLNOaWicD6oZuW7vYJ2kEMBJWwSFcJJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:4a:23:cc:6a:32:25:67:c6:be:fd:46:ba:8d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Mar 26 03:00:42 2026 GMT
Not After : Mar 27 03:00:42 2026 GMT
Subject: CN=943898d33d78dbd7715973f2ce70bb52e248f546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:50:ea:67:64:54:87:2b:77:bb:5c:88:05:81:
10:10:7c:22:ec:d1:c5:b4:21:8c:0e:2e:8d:7e:fc:
08:b7:79:ce:52:82:4e:00:f6:09:78:90:b8:fa:65:
d4:cf:24:71:e8:99:a6:f6:86:5b:6e:76:ee:1f:35:
79:ad:0c:f8:c9:43:92:f7:51:bd:80:87:de:14:19:
f4:05:64:d6:50:27:59:a8:3e:d1:f4:49:c4:b5:f6:
f6:38:91:04:f3:46:24:4c:cc:85:23:2e:6e:5d:a0:
fe:b9:a9:0c:35:6d:a5:a7:c0:df:29:ec:b3:49:2a:
f9:c1:2a:f5:9e:ba:1e:ab:2a:01:58:40:e2:67:4b:
ad:ac:c9:3c:f7:38:2c:ce:19:b6:2e:0d:65:9f:4c:
61:60:3f:ea:21:2e:12:29:c4:56:b7:7b:01:a5:af:
68:76:a0:1e:d2:0c:33:a1:f8:2d:29:70:03:4f:1d:
59:4a:82:6e:e5:3a:78:73:75:32:4d:e9:20:b3:72:
44:ea:f5:3e:03:ab:f5:7e:f2:5b:2c:ba:c7:66:5f:
3e:e9:8b:c8:9a:c5:37:2c:55:bd:c1:34:2e:a2:bf:
bf:5c:0a:04:cb:8b:3c:af:0f:9b:3a:d4:15:be:4a:
7b:32:83:a3:b4:fe:8e:ab:76:ec:26:96:1b:0e:6f:
1f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:38:98:D3:3D:78:DB:D7:71:59:73:F2:CE:70:BB:52:E2:48:F5:46
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:87:98:ed:2c:d6:67:71:bc:f6:63:41:33:67:b4:5e:0f:1c:
02:16:06:c3:23:61:d1:61:4b:28:1b:37:0f:8e:53:cf:f9:eb:
df:d6:59:ec:83:d9:c8:14:7a:18:e7:b6:0f:e8:2e:23:7f:b2:
a1:9e:df:85:50:d9:30:ed:ad:46:65:10:cc:ed:5f:f1:3c:bc:
a7:1a:42:a4:99:4f:24:a9:9d:fb:d5:6d:26:f3:91:66:19:87:
f7:44:b0:7d:7c:40:cc:cd:4c:3c:bd:9c:45:a4:cb:c3:b4:01:
d1:d0:23:7b:8b:3c:55:48:a3:45:ca:0c:98:ae:98:f9:18:d7:
86:4e:0f:5a:8c:63:1a:c0:af:70:68:5d:5e:44:aa:11:52:0f:
7e:df:9f:c6:51:d0:88:4e:84:64:4b:57:98:3e:32:4a:80:27:
45:8f:95:e7:de:45:f7:8d:df:14:6c:a5:09:09:05:61:3f:39:
6e:f7:07:bb:09:4a:70:75:06:de:42:c3:e9:53:b8:35:b3:aa:
fe:1f:7d:54:4c:8e:3d:66:5e:eb:b3:11:92:76:d4:6b:50:2e:
e4:94:e8:b5:54:b8:1c:67:ba:9c:c6:ca:db:91:c3:c4:fb:12:
d0:47:19:f2:7d:a2:63:1b:e2:f7:a6:cb:46:df:e9:fa:c5:d8:
6e:28:69:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFkojzGoyJWfGvv1Guo3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTliYmIyZGMzNjFmMTQ4YjUxYTc1MDgwZDhlMGI0Zjc4
YTFmODIwHhcNMjYwMzI2MDMwMDQyWhcNMjYwMzI3MDMwMDQyWjAzMTEwLwYDVQQD
Eyg5NDM4OThkMzNkNzhkYmQ3NzE1OTczZjJjZTcwYmI1MmUyNDhmNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lDqZ2RUhyt3u1yIBYEQEHwi7NHF
tCGMDi6NfvwIt3nOUoJOAPYJeJC4+mXUzyRx6Jmm9oZbbnbuHzV5rQz4yUOS91G9
gIfeFBn0BWTWUCdZqD7R9EnEtfb2OJEE80YkTMyFIy5uXaD+uakMNW2lp8DfKeyz
SSr5wSr1nroeqyoBWEDiZ0utrMk89zgszhm2Lg1ln0xhYD/qIS4SKcRWt3sBpa9o
dqAe0gwzofgtKXADTx1ZSoJu5Tp4c3UyTekgs3JE6vU+A6v1fvJbLLrHZl8+6YvI
msU3LFW9wTQuor+/XAoEy4s8rw+bOtQVvkp7MoOjtP6Oq3bsJpYbDm8fuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ4mNM9eNvXcVlz8s5wu1LiSPVGMB8GA1UdIwQY
MBaAFKLpu7LcNh8Ui1GnUIDY4LT3ih+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUt
MDQwMTI5YWViMGJmLzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUtMDQwMTI5YWViMGJm
LzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYeY7SzW
Z3G89mNBM2e0Xg8cAhYGwyNh0WFLKBs3D45Tz/nr39ZZ7IPZyBR6GOe2D+guI3+y
oZ7fhVDZMO2tRmUQzO1f8Ty8pxpCpJlPJKmd+9VtJvORZhmH90SwfXxAzM1MPL2c
RaTLw7QB0dAje4s8VUijRcoMmK6Y+RjXhk4PWoxjGsCvcGhdXkSqEVIPft+fxlHQ
iE6EZEtXmD4ySoAnRY+V595F943fFGylCQkFYT85bvcHuwlKcHUG3kLD6VO4NbOq
/h99VEyOPWZe67MRknbUa1Au5JTotVS4HGe6nMbK25HDxPsS0EcZ8n2iYxvi96bL
Rt/p+sXYbihpcQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:28 2026 by rpki-client