Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
File: oI-OKeBCDnI90dxBjocTyOlgQ9g.mft (raw, json)
Hash identifier: 2IPf4qzWbSk4kOwoIrYJTMjVsgEJ9zvnmoXFg2GXG70=
Subject key identifier: 6B:2D:44:1C:3C:46:3D:E1:7C:68:14:4F:57:C5:9A:B1:D4:FB:D3:1A
Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
Certificate issuer: /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Certificate serial: 019D2628564A06482A200303939E4DAD8359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
Manifest number: 033B
Signing time: Wed 25 Mar 2026 18:01:10 +0000
Manifest this update: Wed 25 Mar 2026 18:01:10 +0000
Manifest next update: Thu 26 Mar 2026 18:01:10 +0000
Files and hashes: 1: oI-OKeBCDnI90dxBjocTyOlgQ9g.crl (hash: PPJ8eLoB904MIvWRywWN2sqU4Ckh7L6+bAVo6RWE/IU=)
2: sweOVKgXsN3kVUYF6KimvpfAP0U.roa (hash: ypb9r2C25en3AgJorcke1Z6J6YyhaP9BSnmzJXPiBxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:56:4a:06:48:2a:20:03:03:93:9e:4d:ad:83:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Validity
Not Before: Mar 25 18:01:10 2026 GMT
Not After : Mar 26 18:01:10 2026 GMT
Subject: CN=6b2d441c3c463de17c68144f57c59ab1d4fbd31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:8e:78:67:66:4f:48:76:a9:3d:2c:c4:72:
7e:d7:a9:0f:50:27:0c:03:a2:a1:8f:e8:a0:08:d2:
ee:3d:56:32:51:79:c8:73:de:61:cb:57:2d:a1:56:
57:06:9e:4c:3c:d1:33:e5:7f:34:0d:1f:ca:db:b2:
3c:62:c5:e4:d0:b9:f1:02:aa:8c:c0:b9:2a:bb:20:
f7:b3:9f:03:0f:ad:26:12:6d:b7:c5:f0:1a:b2:19:
c5:26:87:3e:69:d5:31:fd:33:98:4d:a2:55:31:f1:
a3:d5:ab:2a:f3:97:6e:d1:2b:ce:a3:61:18:5d:b8:
09:c1:27:2c:99:ab:19:2d:14:e5:03:8b:17:29:9a:
05:2b:58:63:3f:bd:e8:5a:d8:fd:c8:fe:17:3d:c2:
7a:20:18:a6:00:89:d9:b8:e9:bd:cf:0f:98:cd:3e:
6d:a4:85:de:77:28:77:b7:7d:69:ac:74:78:d1:67:
27:e2:4c:fa:07:9b:3d:bd:00:85:8a:80:a6:92:9e:
70:4e:07:af:70:e7:78:43:af:ff:b4:b4:26:0f:91:
a1:69:b0:17:ee:f5:1e:b5:67:de:0b:e4:40:24:ab:
84:4b:d4:ff:f3:73:67:b5:83:3f:ed:a2:c1:90:79:
bf:ab:89:07:bb:52:e5:38:65:39:95:e9:8c:e6:e3:
25:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2D:44:1C:3C:46:3D:E1:7C:68:14:4F:57:C5:9A:B1:D4:FB:D3:1A
X509v3 Authority Key Identifier:
keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:67:3f:62:96:b3:ee:82:6c:f3:66:04:cb:2e:c2:bb:14:d2:
d7:7c:9a:60:ca:6e:0d:d7:d5:20:f0:67:0a:e8:06:24:d2:7e:
ec:1d:a1:ef:e5:48:d8:af:8f:5a:04:e3:6b:30:5e:1e:2b:09:
53:95:56:20:11:e8:99:98:54:ce:d1:7e:dd:71:87:9a:b2:c5:
24:d4:c9:ab:16:19:7b:e9:02:77:1e:a6:6b:68:fa:56:6d:75:
fc:41:3a:3b:1b:12:76:bd:74:a8:d6:24:9d:a3:fe:fb:29:4c:
5e:4b:1d:17:79:d1:f2:e0:49:64:18:d9:90:07:e3:c6:93:ce:
d6:d4:da:26:fd:9c:97:87:a4:ea:20:b9:07:e6:1c:71:b9:4e:
1c:c9:84:2e:b1:fe:5d:6a:ab:9c:9b:d5:64:1b:b5:cb:eb:65:
af:b8:55:fa:df:71:b5:f4:51:93:e6:5d:e7:20:b0:e7:80:4a:
25:c3:cc:f4:d6:16:58:34:ca:ca:27:ef:37:01:ed:34:8b:94:
18:ae:cb:73:5d:92:e8:9c:2c:10:e7:71:90:fc:c7:26:c6:da:
61:8e:05:7d:91:95:07:fa:8a:a4:c0:69:0e:c3:2c:bc:3f:d2:
1a:f6:9d:06:5b:c0:d6:88:8a:b1:d1:33:71:70:ce:41:45:cf:
10:94:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:31 2026 by rpki-client