Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: 5JhG8KrTh8eBYmVVo5+vjaKYclTzg8koIjo7IlQT/pk=
Subject key identifier: C2:EA:3C:E0:9D:A9:0F:C5:05:D0:F3:C1:67:3A:11:C9:26:B7:0E:34
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 019D25BA52364EB5B4E8BD001BB643B03929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 16:01:00 +0000
Manifest this update: Wed 25 Mar 2026 16:01:00 +0000
Manifest next update: Thu 26 Mar 2026 16:01:00 +0000
Files and hashes: 1: O8JzFk1PWBgx-tr4EXZtg8jcmlQ.asa (hash: NgGatJmK3hx1VDzLByDMsWijy7WzJx6KU+I3UEmcdSE=)
2: h0m6chw4hn4GtvHmpEWAbKAv404.asa (hash: VSF4u2R2+TQgBabpqWZM+QC/fWsj+qMNZ83t4AFvT7c=)
3: mfvEjWb3rQFbj32_BBadoAv_Y0s.roa (hash: FGRbYmzgAXrFUwzG+mMOatKnvNqH9Ov9gtrQRgDuAmE=)
4: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: Nz2e/WyCnk/f+IkVoO7F8bdaBxxTOtq7YKal4Su9RxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:52:36:4e:b5:b4:e8:bd:00:1b:b6:43:b0:39:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Mar 25 16:01:00 2026 GMT
Not After : Mar 26 16:01:00 2026 GMT
Subject: CN=c2ea3ce09da90fc505d0f3c1673a11c926b70e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:8e:0f:fe:63:fa:96:f0:24:9f:41:64:e7:
5e:88:cd:01:01:81:40:df:cb:a9:98:1e:24:ed:44:
3c:12:6f:63:e0:cb:ec:c8:bc:77:c9:fb:d9:a2:1a:
53:b5:a3:34:ec:26:ad:16:f7:58:2e:6e:2b:a3:c2:
cb:f2:f5:1d:91:f9:f8:29:8d:0d:72:95:b8:56:a3:
37:e5:6d:df:5e:d2:86:bd:2e:c8:37:64:47:ad:4e:
3d:5e:bc:75:16:56:ce:cb:48:e8:c1:42:48:aa:56:
0c:4d:d9:b5:d0:e9:0c:01:c9:a2:09:4d:be:f0:b6:
6a:9d:d2:47:89:3c:13:29:b4:9a:9f:00:27:f6:d1:
f9:cc:03:86:0d:ed:28:ad:88:7a:11:a9:b3:28:30:
02:4b:43:d5:82:8e:53:7f:b3:df:ef:d1:60:65:c5:
f3:74:d4:ea:22:07:20:93:24:49:91:0b:ab:cc:0c:
57:35:5d:4e:cd:3f:c9:a7:da:bb:95:5a:e1:af:26:
47:d4:6c:e2:ec:6b:2d:0a:b6:b8:f7:28:aa:6f:fb:
d5:ed:2e:16:30:b0:fb:2c:64:d6:d8:6e:2a:0d:c7:
c8:21:5d:d0:b2:ac:c3:fd:20:3b:03:6a:c7:b3:10:
74:b7:7f:b9:91:39:63:b0:e4:d3:fe:db:fe:80:47:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EA:3C:E0:9D:A9:0F:C5:05:D0:F3:C1:67:3A:11:C9:26:B7:0E:34
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a5:6a:69:1d:cf:fa:8f:5f:04:6d:b0:ce:ec:4d:cb:e1:63:
48:80:b7:03:4b:47:70:8c:c6:4d:f0:fb:14:fb:08:3f:82:b3:
39:e3:1f:4d:be:79:8e:5a:6e:f9:1a:8d:84:01:44:b4:a2:e4:
a7:b5:e4:ab:e1:e6:5e:b4:38:13:86:92:d9:f1:6e:1a:64:23:
7d:a9:29:0b:51:e3:ec:56:ea:ed:3f:86:1f:9b:38:e7:48:4c:
f8:4b:1c:b2:d0:fd:c2:db:59:ae:15:53:7b:8a:0b:11:4e:b9:
a2:6d:90:3e:a8:62:32:b8:19:51:d4:50:5c:60:18:98:8e:cc:
d5:65:bc:1b:28:44:04:43:95:fd:34:be:e6:ae:4f:e9:45:5f:
07:8b:c1:48:24:41:7e:49:61:69:36:89:a5:dc:57:64:2a:70:
a6:e3:14:0a:13:40:1d:43:5a:73:c2:62:78:c2:43:80:e4:da:
e5:45:fb:53:63:da:84:c3:5d:c9:a5:7f:7c:ff:73:40:06:9f:
43:6b:29:b2:7c:8e:69:64:a8:b0:10:83:f5:45:26:02:5c:74:
03:03:00:c0:8c:c0:bc:75:b4:8a:1c:d6:78:10:d9:c7:75:ae:
69:65:bd:c2:d6:b0:7d:4f:be:4c:bc:f3:30:d1:70:24:ec:7d:
b3:77:51:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:17:50 2026 by rpki-client