Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
File: OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json)
Hash identifier: c81LxpOA9kJnouutaujX/VQztiKONxBe2K6iig6Skys=
Subject key identifier: 54:43:EA:1B:DF:85:7F:2B:5A:BD:7D:79:FB:11:BD:DD:99:FA:E0:B9
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial: 019D2696697DCA3D54CFF6F309B05B48E180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
Manifest number: 0778
Signing time: Wed 25 Mar 2026 20:01:24 +0000
Manifest this update: Wed 25 Mar 2026 20:01:24 +0000
Manifest next update: Thu 26 Mar 2026 20:01:24 +0000
Files and hashes: 1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: 8eBQJVr9isyncuii5k7NAWTNjB1M2Ac+F1plydoVn/s=)
2: g9D60eT4osY914CQ4MsZqD3p_Gw.roa (hash: 9V83sePRPvQWxHMpiIJhpUEoLq1Krp0NLVKYoKzzAfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:69:7d:ca:3d:54:cf:f6:f3:09:b0:5b:48:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Validity
Not Before: Mar 25 20:01:24 2026 GMT
Not After : Mar 26 20:01:24 2026 GMT
Subject: CN=5443ea1bdf857f2b5abd7d79fb11bddd99fae0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:1b:e3:e9:13:0f:e7:1d:d4:79:4d:e6:50:
00:98:c2:05:55:67:0e:78:58:57:c6:79:cf:f1:66:
56:e3:91:94:ad:cd:8b:bf:29:38:49:3b:f4:30:7a:
03:c9:94:63:c3:5e:19:af:b4:2f:d7:05:53:6b:41:
f4:04:3f:6c:8c:38:b4:dd:9b:74:88:14:f9:5e:fa:
8a:36:d2:9f:69:c0:c4:d5:64:a1:47:4d:4e:ea:b6:
4b:f7:c7:ef:ce:f5:d9:6c:17:22:df:92:4e:b8:8d:
7d:53:e0:80:84:ec:7e:7a:fc:04:84:ab:e5:44:3e:
49:38:ba:37:a6:59:b3:46:d3:1f:22:46:2d:86:18:
b0:7d:27:e7:67:53:fb:b5:9a:99:ea:83:d8:f3:0f:
43:1c:3a:eb:30:6c:ae:8f:d6:45:88:c3:52:d7:ad:
6d:1b:f7:0f:82:58:ea:88:42:fd:47:48:bc:3d:0e:
1e:fd:8f:d9:6d:cc:97:ad:a7:99:26:08:0c:40:3b:
e3:12:bb:b4:04:d6:ca:2a:d0:4a:d1:2a:12:db:6c:
b8:43:97:ab:01:bf:fe:90:13:92:e3:86:b1:98:a9:
1f:89:97:32:ab:c4:55:2b:37:bc:4a:d5:6e:45:56:
7b:85:2b:19:97:96:f1:c3:80:4b:e6:f8:a2:34:6d:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:43:EA:1B:DF:85:7F:2B:5A:BD:7D:79:FB:11:BD:DD:99:FA:E0:B9
X509v3 Authority Key Identifier:
keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ba:92:52:e2:98:dc:de:0b:48:29:7f:8e:b3:cc:53:ac:d5:
16:89:dc:e4:34:6b:25:9a:36:26:ab:fa:d1:fe:f2:4d:7e:8d:
bb:c2:8e:25:5b:f7:34:3a:eb:85:fa:59:2f:8c:6b:98:b4:47:
e3:0f:df:44:af:cb:1b:82:e9:85:39:48:36:bd:47:ca:48:2a:
29:e7:ff:81:c7:df:5c:c9:7e:49:fb:10:bf:63:6a:dc:af:36:
31:ef:b1:32:0c:d4:af:6c:0c:10:cf:f9:87:d0:07:75:03:42:
8c:86:70:5a:f1:a3:d2:d7:54:ff:d4:c8:0a:79:bc:30:d2:53:
c5:1f:75:68:e1:19:e1:b4:a9:7b:6d:e5:bd:56:63:1b:aa:7e:
b6:a1:9e:7d:6f:4a:5a:f9:4e:37:50:d2:1e:10:ac:db:0c:ed:
f6:8c:b9:f7:94:f3:4f:59:a9:40:0e:5a:da:cd:1c:59:bb:b4:
ef:e9:ef:57:7b:a1:89:21:9b:4e:a2:5c:6c:3e:a9:1d:e7:12:
7c:ca:23:16:1d:96:62:32:24:4f:e5:3f:62:f1:fc:e9:1f:23:
e8:6c:12:29:1c:08:24:44:36:19:06:ec:4d:d0:c7:ae:2d:30:
78:63:75:49:61:d4:5e:05:39:1d:04:9e:ac:05:23:d2:26:4d:
46:2d:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:50:01 2026 by rpki-client