Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
File: ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft (raw, json)
Hash identifier: KohEgbocsy8dFP45MKcmTv4O3+Eus1JV7LOif9wu6ZM=
Subject key identifier: AA:E9:D2:30:7D:3C:3D:EE:09:31:64:63:B8:C8:20:00:D0:65:55:54
Authority key identifier: A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
Certificate issuer: /CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Certificate serial: 019D265F73D3BBBE13604B74D67C7FD5DA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 19:01:22 +0000
Manifest this update: Wed 25 Mar 2026 19:01:22 +0000
Manifest next update: Thu 26 Mar 2026 19:01:22 +0000
Files and hashes: 1: ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl (hash: zeq2VetKfcyLXz/oB4Js5I82CQcWlMC0vg/kjHTuRes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:73:d3:bb:be:13:60:4b:74:d6:7c:7f:d5:da:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Validity
Not Before: Mar 25 19:01:22 2026 GMT
Not After : Mar 26 19:01:22 2026 GMT
Subject: CN=aae9d2307d3c3dee09316463b8c82000d0655554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:35:86:83:a6:47:fa:b7:a3:d0:04:97:39:
e6:7d:94:3c:62:da:29:9b:eb:f0:e6:70:64:bd:e8:
de:05:cd:ca:01:95:d2:9f:ce:75:c7:8e:61:c6:df:
ed:fe:04:de:64:12:32:a2:dd:2e:16:ba:e3:29:8c:
f1:a7:92:7a:84:69:32:f3:8b:22:5f:93:b2:98:ab:
c3:44:a6:6d:c0:b3:f9:fc:8f:71:ae:af:75:4d:81:
ac:8c:b0:f3:ce:05:5a:9d:bd:90:f9:7f:d6:d4:83:
aa:dd:97:24:87:c7:06:da:e7:2f:33:5a:1d:a1:f0:
dc:73:09:8d:96:d9:8c:4f:39:cc:fc:a5:99:7f:3d:
15:2e:6d:b4:a8:e3:e2:2f:e8:58:69:62:ce:b0:42:
e2:d5:ab:e7:41:2a:4a:ce:18:de:b3:0f:02:4d:c3:
49:ed:81:fd:8b:37:cb:f9:de:08:43:a1:24:1d:28:
93:07:3a:f0:4e:01:30:c3:de:da:45:83:bd:a2:fa:
71:9f:e5:3f:f0:34:e6:c4:33:78:1c:23:07:a9:df:
e7:f1:21:65:4d:bc:33:61:7c:44:88:8c:64:a3:d5:
3c:b3:6d:e9:eb:d3:3e:a1:4a:e9:cb:3b:9d:39:ff:
a8:ad:e2:96:3b:57:51:0e:38:05:67:cf:d9:dc:b0:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E9:D2:30:7D:3C:3D:EE:09:31:64:63:B8:C8:20:00:D0:65:55:54
X509v3 Authority Key Identifier:
keyid:A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:08:ef:ca:a2:54:d2:a5:5b:3d:93:a0:47:4a:eb:d3:f8:df:
b6:32:a2:a0:03:45:c9:19:3b:bc:07:86:53:bf:b7:b5:aa:4f:
6f:ce:d2:b9:ea:c8:ad:b7:f4:80:45:25:11:4d:c1:f7:43:a0:
41:c0:1a:f3:2c:18:a5:d7:5b:50:b6:05:d7:01:28:33:be:a8:
dd:d7:66:53:6f:2a:cd:0c:0b:14:02:a1:2e:16:2f:73:a1:18:
9d:92:9c:77:f1:09:25:48:d6:40:91:aa:c9:7d:4c:d3:53:bf:
be:42:9b:4c:b2:c6:ae:da:0b:f2:34:8e:9d:6e:85:d5:18:aa:
82:7c:6f:25:1e:d9:4a:47:ff:54:04:0b:d5:ea:c8:af:1a:4a:
63:98:72:bf:0d:12:af:6f:9c:89:fe:5a:1c:e7:69:d3:f4:06:
8a:14:2b:ef:a0:66:25:4b:56:fb:58:88:1d:d3:ae:7a:3d:2d:
55:9e:0b:79:17:69:29:28:4d:5c:5e:91:ef:fd:25:0f:6f:36:
ab:9b:00:91:37:f6:2b:00:d9:cb:5c:61:45:3e:23:d4:51:d7:
e7:55:65:2b:12:83:2b:bb:07:09:ac:77:50:04:ba:1e:c8:c4:
18:a1:a1:90:b3:49:b5:a5:98:a9:b2:67:cf:5d:8b:b2:9b:76:
e7:d4:73:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:51 2026 by rpki-client