Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: NeRi4zu0PD5MVSz4OpQiyCeOWeYtfLKjhnEjWOH5EnI=
Subject key identifier: 3B:6C:24:E0:43:22:52:89:AA:3B:02:BB:E7:AB:BD:4F:48:B9:63:F1
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 019D265EFFBE8C647CEBAC4D470F6380BCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 0F1C
Signing time: Wed 25 Mar 2026 19:00:52 +0000
Manifest this update: Wed 25 Mar 2026 19:00:52 +0000
Manifest next update: Thu 26 Mar 2026 19:00:52 +0000
Files and hashes: 1: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: 4veGjshYWm83+utKJ+4ddXYGNp6VAG+HQ1kYEse8B8s=)
2: dvF-ax6xW9w6QlzjTOaIlgyWKik.roa (hash: E53mXDTZAgvYtLPLUqhUWEPa5aOM6nnfYCB3KgCjcD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ff:be:8c:64:7c:eb:ac:4d:47:0f:63:80:bc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Mar 25 19:00:52 2026 GMT
Not After : Mar 26 19:00:52 2026 GMT
Subject: CN=3b6c24e043225289aa3b02bbe7abbd4f48b963f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:df:cf:14:47:d3:62:dc:37:82:a9:31:d1:
a3:39:40:ae:a6:71:ce:7c:98:e2:f7:9b:31:67:43:
36:14:a1:c9:9a:a4:32:10:e8:21:c4:84:b2:ec:4f:
f9:94:cf:88:83:21:1f:11:f9:52:05:9c:f2:89:e3:
0a:2c:aa:80:a4:ba:41:de:65:6e:ec:44:8a:f0:97:
c2:11:6f:42:bf:c7:c9:18:a0:7f:35:e3:2b:40:b9:
96:6c:90:47:e2:cd:b2:97:1b:8e:b2:23:bc:a0:e1:
67:ac:1d:a9:d5:c6:9c:b6:55:2e:24:01:ee:4f:fe:
3d:ed:d8:2b:27:b6:e5:a6:64:05:e8:1e:49:9f:1a:
db:f2:8d:20:ab:93:83:e8:16:f1:79:2f:c5:51:2c:
2f:38:02:61:83:e8:03:cb:55:ef:7e:33:bb:aa:77:
84:75:22:ad:9f:b4:e6:d8:5f:db:9b:94:3b:fb:4b:
c7:cf:db:04:2e:79:b6:d4:bd:5e:43:be:aa:a0:6d:
3b:ec:3c:f4:40:00:e9:f1:9d:06:ae:01:4f:33:75:
10:6a:4e:93:fe:3e:32:a1:c2:b2:ff:d2:b0:10:34:
4a:52:7f:58:1b:fd:66:b7:99:7d:87:31:f2:e6:15:
16:e0:4c:57:2f:37:06:03:ac:c1:5f:79:6f:b6:7b:
db:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6C:24:E0:43:22:52:89:AA:3B:02:BB:E7:AB:BD:4F:48:B9:63:F1
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b4:32:fc:fb:cc:a0:32:f5:c8:9f:29:53:d6:58:9b:c7:8b:
c2:6a:f0:fd:0f:c5:44:f6:24:59:01:37:11:01:29:99:f1:9a:
74:14:ea:f0:0d:1b:ee:b9:84:62:2f:10:5a:78:3e:8c:74:a8:
1e:bb:23:83:37:2f:32:15:b5:bc:52:ed:20:96:2d:3d:d1:03:
7d:c4:50:60:25:07:02:89:c6:09:3a:e7:f1:d2:1c:d2:a0:5d:
89:a7:94:1c:37:4c:cd:4a:40:b7:90:7e:5d:2c:37:d0:11:49:
50:fa:f2:12:57:c5:8d:dc:75:5a:67:11:06:98:b0:d6:19:02:
58:12:b3:5b:4d:0e:c3:9f:f0:fa:94:e9:fc:9d:51:5b:2e:b1:
ae:be:d8:7f:2e:cf:e2:2e:7f:8e:a7:2a:c7:62:a0:29:e7:3b:
e6:fd:3c:5d:66:2e:27:87:ae:bf:b5:e7:9e:14:c1:df:60:14:
cb:21:89:19:9a:ac:d2:07:3c:d5:31:69:58:55:bf:28:e3:a8:
ff:59:4a:79:e5:75:ce:ba:70:fa:58:0b:ba:fe:a0:6f:83:dc:
dc:57:50:b4:aa:33:ce:77:98:ae:0f:d9:fd:a0:ff:09:89:d9:
ed:50:11:96:f7:5f:77:1a:a9:d6:50:81:d7:16:bc:1d:4a:d7:
a3:25:ed:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:35 2026 by rpki-client