Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier: 80++sTGFmdAy3gmaZL0Sos55lADmLf7uQmBtf+TAvsc=
Subject key identifier: C7:39:63:27:DC:3C:05:77:A2:64:EC:32:CE:82:33:8E:59:96:17:58
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 019D27043419E4ED36DD085ED0E6F8D0836C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 22:01:20 +0000
Manifest this update: Wed 25 Mar 2026 22:01:20 +0000
Manifest next update: Thu 26 Mar 2026 22:01:20 +0000
Files and hashes: 1: IkpqFJlNa2437VP_tcxeJyVAPMM.roa (hash: mlTIEBNdJZbIbhX3NLDEQ4pnepBeofaptKU6NdPs/uI=)
2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: 83BA6NnTrbbNg4oxhML2chBiXhf7Qr9jpkGhX+3HC0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:34:19:e4:ed:36:dd:08:5e:d0:e6:f8:d0:83:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: Mar 25 22:01:20 2026 GMT
Not After : Mar 26 22:01:20 2026 GMT
Subject: CN=c7396327dc3c0577a264ec32ce82338e59961758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e6:15:e6:9d:0c:bb:2a:8a:6f:9d:4f:d9:50:
42:33:c5:64:3a:dd:88:1f:ee:c4:11:c5:aa:fc:89:
bd:29:9b:68:b2:cd:e8:57:af:5f:89:4f:8c:bc:8f:
62:a7:66:51:16:80:0d:de:28:69:d6:bc:12:07:96:
ff:9c:30:68:48:ed:01:62:bb:b7:61:48:c8:8b:53:
a2:c4:9a:82:65:d6:d3:2e:10:e7:6e:0c:30:a2:a1:
ef:9e:ce:38:30:72:9d:8c:48:4f:0c:be:3a:64:d9:
2c:8a:5a:91:57:7e:cc:6e:bb:7e:f7:a2:bd:86:4e:
53:45:27:cc:52:b7:15:71:fa:c9:4a:ac:41:e0:c1:
96:bb:19:ad:2e:b7:01:c8:e7:22:dd:26:88:7a:ce:
83:ae:a7:37:b7:a6:7e:b0:d4:a4:5f:a4:b9:b8:eb:
89:91:ab:36:bd:c7:86:63:e3:30:d2:ff:83:12:cd:
e9:b2:14:c1:ff:95:db:f6:5c:b3:9b:fd:d8:d7:d3:
f4:72:65:7e:96:cc:00:e9:a6:25:41:70:c8:97:7d:
9c:a3:bf:65:78:a7:6f:69:27:2a:d7:25:cb:ed:8f:
81:5b:45:45:c2:3d:92:91:50:f1:01:13:cc:a1:11:
24:77:44:87:0e:68:dd:29:d5:aa:79:da:46:23:ea:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:39:63:27:DC:3C:05:77:A2:64:EC:32:CE:82:33:8E:59:96:17:58
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d2:a8:3b:25:4f:50:cb:18:c4:c5:a9:ee:3c:9f:cc:75:cb:
86:cd:01:19:e0:86:4b:d8:47:99:de:dd:0d:59:71:df:e0:68:
41:57:4f:8b:b0:98:9e:9c:50:37:5f:27:b6:61:73:2c:a3:2f:
f9:96:7d:69:81:64:78:ce:6a:4a:a5:a1:77:18:63:f7:f4:b7:
b6:8b:2d:19:3b:2d:e0:4c:1f:c5:f2:75:49:6e:f4:70:55:0d:
74:c7:4b:16:72:e5:29:65:2f:2a:d1:05:3e:ce:4e:57:a8:c0:
5c:16:cd:56:6a:7e:8e:2f:fe:63:ba:d6:4a:af:16:d4:3d:f9:
02:c1:02:5c:58:67:8b:7e:b4:6d:50:25:e7:34:8e:d0:47:86:
1a:35:26:24:4a:aa:e5:89:13:27:3d:38:19:6b:9e:cc:88:f5:
d9:97:ee:c6:cd:5c:8f:34:30:63:64:31:e0:be:11:fd:1d:a8:
54:05:7d:c2:90:7f:ac:9a:03:a4:28:c5:02:18:3c:7e:2f:51:
84:4b:6b:e2:f1:68:83:b6:cf:6e:c2:c2:8d:0c:84:7d:65:b6:
1c:9f:c4:30:e6:66:8b:05:7d:be:13:fd:55:e9:55:6d:97:53:
14:d1:a3:1b:d6:22:2d:af:32:89:d2:b2:4e:72:cd:46:83:9c:
13:90:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:42 2026 by rpki-client