Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
File: OYhH9wo15xCETpu4omK-3bQLfMk.mft (raw, json)
Hash identifier: GKXqZKNAfT99ooPTETLZeuMuHLUch27E0K0mg5QJnfc=
Subject key identifier: 76:D1:79:86:FC:1E:B5:1C:7B:AB:0E:A4:E6:8A:AB:BC:D2:37:91:4E
Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
Certificate issuer: /CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Certificate serial: 019D29291B77E6C6B9E677B1EA42D3FA6031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
Manifest number: 064B
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: OYhH9wo15xCETpu4omK-3bQLfMk.crl (hash: q6KfdbKBbt9h61bD2mn3cV9RZwwuLcsWwq3xQR4OdCg=)
2: j7EcdTVdpUhojTeG57M6lKnsMnE.roa (hash: Fq6R274Vo4z+UeWj5Q+OONHLBGJAcI1+7ZlArfIpltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:1b:77:e6:c6:b9:e6:77:b1:ea:42:d3:fa:60:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=76d17986fc1eb51c7bab0ea4e68aabbcd237914e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6f:fd:c4:28:71:99:e7:65:4e:33:e9:2c:ad:
dc:59:08:db:9a:9e:1a:b4:7c:d0:d4:32:8d:57:f4:
f8:52:37:9b:c2:06:9f:29:ff:c8:6f:eb:34:07:09:
17:ac:2a:9b:b6:52:5c:05:45:2e:b0:d8:b3:dd:d5:
95:ad:a2:20:e0:ff:7b:72:a3:0a:e1:57:68:b0:27:
d7:ce:ae:de:10:b8:26:c3:0b:23:c4:13:6f:a8:24:
49:dd:b8:d9:53:b0:04:eb:7d:39:13:63:f0:a3:0b:
68:75:b0:2f:6e:fa:ec:8e:0e:a4:ee:d8:e0:84:da:
25:4d:bd:09:8e:bf:ac:39:68:4a:2a:1f:e8:a1:84:
ae:b7:98:d3:0e:85:36:d9:43:61:33:79:10:53:c1:
62:e4:dd:12:e3:49:37:f5:4a:77:ed:ee:87:d8:18:
17:a9:17:bf:53:1c:2b:af:a1:bc:c2:7c:25:52:46:
26:36:ce:5e:76:a5:8b:0e:7d:21:f3:5d:01:2f:a1:
2c:25:97:69:4f:65:c3:d8:05:d0:ab:39:03:46:06:
39:04:26:a9:73:cd:c9:6e:56:e3:a4:19:bc:18:a8:
29:a7:4d:17:2c:c4:55:9a:4c:31:a2:75:80:fb:65:
56:33:65:af:57:ad:a1:9b:d9:5c:73:b8:a8:84:c5:
e9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D1:79:86:FC:1E:B5:1C:7B:AB:0E:A4:E6:8A:AB:BC:D2:37:91:4E
X509v3 Authority Key Identifier:
keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:15:01:72:96:d8:d3:1f:4b:45:84:5a:e5:3a:8e:78:c1:ae:
59:36:d9:e0:9e:b1:91:82:05:8f:98:fe:ff:82:6c:af:b7:c4:
67:ee:1b:1b:da:62:6c:6a:a0:29:5b:41:f0:b2:cd:08:53:98:
cb:77:79:7e:8d:ac:07:2b:a8:f3:30:d1:f0:e5:7e:9d:b4:fc:
4a:68:eb:36:17:6c:2c:f2:83:0d:8a:3a:d6:b1:bd:07:c7:f1:
5f:78:c3:4b:33:23:bf:bf:5c:45:ef:5b:05:27:69:fd:4f:cc:
3e:e3:99:e3:8f:9e:bd:64:39:b0:0b:32:a4:4b:a7:41:7c:25:
f8:d5:58:46:12:27:02:6d:e3:71:2c:5e:46:b2:a7:70:34:f5:
4b:61:37:5d:a7:2d:f6:2d:dc:3d:35:9f:a9:fa:3c:26:5b:d9:
1d:4d:4d:41:7b:02:31:30:80:fc:29:62:6e:53:34:22:81:d2:
47:1e:3c:bd:8a:9e:28:82:51:b5:29:a8:9b:fe:66:5c:58:fb:
33:7c:41:ff:e8:46:6d:62:e6:79:e6:9d:f5:fc:74:13:73:29:
e7:73:4b:48:25:b0:de:61:91:f6:21:d6:18:3c:ae:e3:94:3b:
76:e3:5f:8d:e9:1d:55:77:58:b0:73:f9:db:7b:7e:bd:c2:be:
4b:4f:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:16 2026 by rpki-client