Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: DSWHRy6it1T1/HLRjvxBrY9BOCaFWP/gVKhimsylEpY=
Subject key identifier: C9:0D:D6:0A:45:FF:13:15:64:1C:4F:05:FF:A7:38:11:E5:F9:DB:98
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 019D25F0EC66EF8C57A3CBF0D1B290A18639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 1375
Signing time: Wed 25 Mar 2026 17:00:39 +0000
Manifest this update: Wed 25 Mar 2026 17:00:39 +0000
Manifest next update: Thu 26 Mar 2026 17:00:39 +0000
Files and hashes: 1: hXAXsmUnJiWV8z-SUw75JeiGESc.roa (hash: VUrv1bazpJi2/YTeV0TBl6sYZknhiXdswe7oWJCYACU=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: GJrlFMT21s42XtGE/8p0l5yBVGgbMvKa9mb+N18GUC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:ec:66:ef:8c:57:a3:cb:f0:d1:b2:90:a1:86:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Mar 25 17:00:39 2026 GMT
Not After : Mar 26 17:00:39 2026 GMT
Subject: CN=c90dd60a45ff1315641c4f05ffa73811e5f9db98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:fa:3a:8f:90:cb:e9:67:79:05:9d:6a:18:
aa:86:2d:bd:1b:81:fa:78:0c:63:00:2d:df:37:60:
aa:c5:7b:33:63:e4:7d:2e:6b:b4:a1:80:96:d8:97:
4a:20:6d:ba:ee:a8:bc:c5:51:5e:c0:3c:b4:7e:84:
cf:3b:35:88:45:76:ce:0e:bc:ef:40:78:ed:7e:d0:
0f:e0:64:4f:29:0b:64:46:eb:0a:aa:35:4c:69:7d:
2e:2e:60:1a:a6:7b:2e:66:30:d3:16:77:86:45:65:
1c:a7:e1:72:67:15:4f:3f:6c:3c:2c:e1:bc:01:ed:
c9:42:38:11:55:8e:1a:4f:a6:f8:fa:3d:3a:ee:e7:
0d:9c:8f:db:3a:b7:3e:6f:c1:0c:58:b6:51:5a:03:
36:68:6a:a1:53:65:73:81:84:e5:47:d6:04:ba:3f:
de:ee:21:95:11:cd:20:6e:5e:29:86:71:d7:52:cd:
b6:a7:0b:f9:fd:b2:1d:de:1b:74:96:3f:f1:ec:29:
e5:25:46:e4:71:35:93:99:8a:76:b4:b7:37:66:19:
bb:d6:f9:a7:22:51:f6:6e:b9:44:f7:d0:90:4c:f2:
06:1c:f2:83:8c:c5:11:c6:64:80:ea:3f:38:dc:05:
31:2a:be:66:f4:f5:2b:9a:c6:69:25:bd:4c:b5:3f:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0D:D6:0A:45:FF:13:15:64:1C:4F:05:FF:A7:38:11:E5:F9:DB:98
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7a:bc:ef:d1:37:73:94:9a:70:a2:bd:3a:11:bd:2a:75:76:
b2:9b:a6:7b:7a:14:96:44:55:e8:95:36:76:02:2a:3d:1c:a7:
37:ad:d8:f3:6f:c5:9a:03:b1:6b:f7:a0:9a:b3:a3:69:53:df:
a5:c6:ee:8c:98:f0:bb:8f:2f:d3:d2:e3:1d:2a:f5:04:6c:ac:
bc:b9:d2:12:c6:32:9a:9a:d2:a6:7e:b7:80:f9:cf:9e:f4:e2:
fd:f4:5d:e3:38:4b:e8:e3:22:1f:73:69:4e:ab:04:0e:2b:c1:
35:45:e5:9e:1f:44:bf:d4:09:4d:f8:29:83:5f:9a:c9:98:fd:
7c:a3:d6:4b:06:86:cd:2b:87:8e:14:ad:4f:47:06:4c:e0:64:
5a:79:ae:72:45:45:c8:bd:97:a6:ba:91:69:fd:3e:23:fb:1e:
3a:ca:d8:32:f8:5b:b0:74:8f:a2:cd:77:7e:50:f5:5e:2c:80:
e9:12:67:38:66:22:8b:dd:c0:84:79:20:7d:d6:de:a0:98:1c:
8a:4a:72:31:f3:9d:04:7c:4b:73:b3:79:49:a0:19:84:4a:56:
8c:c1:44:a4:bf:53:ab:53:d4:19:08:37:44:32:7b:87:a7:17:
3c:67:4c:00:49:21:90:c7:39:61:ce:1a:d8:c6:cd:22:87:5d:
c5:0b:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:49 2026 by rpki-client