Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
File: oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft (raw, json)
Hash identifier: le8JvJY6V9t6KVybyZhdmOm3e6h8XOVS7LpMR2OsQAo=
Subject key identifier: 72:B2:E5:FC:CF:99:32:FD:84:25:9F:75:E4:51:F1:D5:94:DB:12:B0
Authority key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
Certificate issuer: /CN=a1655282be419d21222b506fb7a368c3fe5db23d
Certificate serial: 019D2817031347B410B225ADA386E952C28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:29 +0000
Manifest this update: Thu 26 Mar 2026 03:01:29 +0000
Manifest next update: Fri 27 Mar 2026 03:01:29 +0000
Files and hashes: 1: OU2kt5pP9LNwwlGwfRZGFyH5hzI.roa (hash: 6flWuRYE3Zk0uPFYWYiQzcnSra7IhOrzHZC3EVLgp5s=)
2: oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl (hash: jPWTpk0y/O9XGu8BrFlh8mzlsn14QpakyXgsCvvr670=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:03:13:47:b4:10:b2:25:ad:a3:86:e9:52:c2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1655282be419d21222b506fb7a368c3fe5db23d
Validity
Not Before: Mar 26 03:01:29 2026 GMT
Not After : Mar 27 03:01:29 2026 GMT
Subject: CN=72b2e5fccf9932fd84259f75e451f1d594db12b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:6e:9f:4e:18:e7:86:f2:5f:7a:59:eb:1b:
75:a9:db:45:e5:2e:e2:3a:22:1c:27:ff:ac:7f:ef:
de:8f:af:d3:cd:5e:6f:85:d4:89:a3:32:e7:09:34:
2d:92:88:3e:11:e2:23:1a:62:f1:82:bb:cb:ef:12:
86:e3:13:35:08:a4:e5:2c:87:b5:36:b7:13:ca:7c:
74:99:88:81:55:1c:35:45:f7:dc:92:e8:1d:76:1c:
f9:96:b9:02:79:3f:a9:54:f9:74:57:15:01:8c:a5:
c0:f8:30:fa:48:47:15:ed:1c:0f:7e:b0:ed:ec:0c:
33:2f:69:11:96:d9:36:cb:9e:5a:2d:05:ad:7c:04:
a6:3e:41:3b:8a:40:7c:c4:1f:bb:dd:68:ba:6a:22:
7e:ef:53:22:70:2f:2e:d9:9e:0e:d2:97:76:cb:83:
d9:b7:cd:8b:6f:73:b1:69:f6:b2:09:8d:b5:17:99:
d7:d0:b6:ba:79:9b:30:70:ca:a2:3a:8a:47:f2:4c:
de:54:a3:c0:40:9a:20:e1:bb:f0:8b:e3:1e:f5:8b:
22:40:3e:f0:0f:96:58:c7:62:29:85:b3:0e:45:ad:
df:16:6d:00:9d:85:2b:da:fc:f0:69:41:81:b3:fe:
52:57:82:55:62:e5:ce:11:6c:6c:3a:4d:7e:12:94:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B2:E5:FC:CF:99:32:FD:84:25:9F:75:E4:51:F1:D5:94:DB:12:B0
X509v3 Authority Key Identifier:
keyid:A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2d:8e:ef:61:50:5a:42:4f:f7:39:0f:3e:91:8d:8b:d7:b8:
b5:34:d9:0c:93:d1:38:c3:a6:73:41:96:59:7b:7a:13:58:0c:
e1:47:b6:8a:75:4e:a7:8d:b3:46:99:c6:94:77:8c:bd:7f:28:
d8:8c:16:73:c4:b5:d8:bc:8b:88:a2:a2:d0:8c:74:94:0e:fe:
a7:42:54:b5:83:ca:14:e2:72:87:3a:11:0c:2f:dc:3b:ac:39:
66:98:a2:7e:43:87:6e:52:bb:22:aa:43:6b:ec:6f:05:62:d8:
5f:5c:d7:f8:a5:ee:30:2b:40:26:b9:48:df:fe:bc:2c:3f:7f:
79:6e:86:0d:0c:18:f9:f4:c8:b0:fd:a3:de:27:a0:1c:b5:53:
e6:57:19:58:d6:fc:a5:4c:47:c7:2b:30:ab:17:3f:ce:81:4a:
6c:ed:75:40:25:12:08:b5:79:d3:34:cc:43:a5:f4:a3:0b:83:
ae:23:15:36:ed:89:d9:63:15:22:ad:25:00:f5:51:62:cf:2e:
6f:fd:88:52:65:4d:4a:a2:24:69:da:b8:c4:f3:1a:89:d3:c5:
92:b0:83:b1:dd:91:37:95:fa:c6:d2:96:fd:f9:44:45:e3:3c:
a7:6e:13:c6:85:e0:a7:e6:8a:81:98:49:3e:2d:7c:4a:86:b2:
8d:45:bd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:01 2026 by rpki-client