Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
File: oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json)
Hash identifier: OOnjOINNmF9g58bAxSdcxnJnHJ7Lz9h8SXbvEE8tKIo=
Subject key identifier: A9:86:A6:F8:D3:DA:9F:83:08:21:C5:81:68:BC:3A:4E:0A:AC:A3:62
Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
Certificate issuer: /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Certificate serial: 019D28F2AD051309B46A12E821DCCECFAB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 07:01:25 +0000
Manifest this update: Thu 26 Mar 2026 07:01:25 +0000
Manifest next update: Fri 27 Mar 2026 07:01:25 +0000
Files and hashes: 1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: e2ZN3m5lEHl2APeJ3PHKi7/bwboNq56oZNnlAG8ui4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ad:05:13:09:b4:6a:12:e8:21:dc:ce:cf:ab:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Validity
Not Before: Mar 26 07:01:25 2026 GMT
Not After : Mar 27 07:01:25 2026 GMT
Subject: CN=a986a6f8d3da9f830821c58168bc3a4e0aaca362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:e8:e1:4a:fd:c6:f3:14:f4:9f:5b:46:6a:
0d:92:60:b4:2d:f0:99:97:14:d4:6a:04:07:06:75:
f9:49:7a:d5:dd:de:98:05:b9:b5:d1:34:f8:2c:73:
ab:a0:7a:c0:8f:69:11:40:cb:7f:96:5c:c2:77:88:
4b:86:a3:58:c0:0a:65:d3:86:7e:b2:ae:ba:30:f8:
33:4f:a0:bd:53:3d:ae:e5:ea:b1:55:ed:03:a3:eb:
ed:94:10:c3:a3:64:56:44:08:4e:9c:f1:d5:41:4f:
13:b5:a7:6e:20:ab:90:e7:d4:b7:ab:62:e1:b1:8c:
6b:b2:dc:1f:9f:a7:4a:46:93:29:19:22:c6:ee:85:
83:ec:dd:b1:7c:90:d7:b1:2f:01:f7:67:1c:0f:02:
d9:52:8c:dd:50:c7:67:66:f1:d5:cd:fe:04:f6:2b:
e3:d6:d0:51:4d:88:61:d2:e3:bf:58:5a:66:d9:8c:
2c:48:a3:54:e7:34:b7:33:6b:b9:ce:9b:27:c9:02:
30:87:56:66:ec:b3:4c:8c:52:dd:10:d1:7e:42:e9:
e6:ec:c2:f1:f4:77:15:0a:a8:9d:5b:92:22:0d:49:
ea:d3:55:b5:b5:5c:e4:50:e2:97:56:0e:1f:22:1b:
fb:e0:72:1b:f0:7b:6b:c2:b1:80:df:c9:f7:d6:98:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:86:A6:F8:D3:DA:9F:83:08:21:C5:81:68:BC:3A:4E:0A:AC:A3:62
X509v3 Authority Key Identifier:
keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:54:a5:a8:72:cb:9a:c1:c0:28:90:ed:d6:4f:87:c7:30:13:
63:13:5a:32:b4:65:e7:5b:d1:fd:f4:e7:4f:44:ab:3e:3c:20:
69:1b:1b:24:b0:3c:2a:76:0b:1f:bb:d8:26:99:5c:0c:67:7a:
98:e9:85:b6:ad:f9:a4:56:6c:10:ca:cd:68:85:2c:ce:df:3e:
fb:d8:04:88:d3:3b:a4:af:f3:37:f6:67:78:78:26:63:c4:79:
05:db:bb:e5:31:47:0e:be:10:25:0a:da:37:63:b3:5e:0d:4c:
60:d6:6e:18:70:75:1c:97:90:d2:4b:10:2a:ff:51:21:0b:54:
9a:c5:c5:79:a0:cb:51:73:2a:2a:4e:82:b9:4f:c2:6a:28:62:
dd:58:d1:3b:b9:d5:73:51:2f:11:2e:2d:0c:39:42:a6:ea:95:
b6:41:75:f8:39:27:ae:25:06:df:6e:2f:c2:11:1f:fd:97:00:
1a:1c:00:2d:a9:9b:73:1b:af:c8:f4:42:8e:b5:96:26:82:7f:
1d:e9:e7:47:6c:4c:bf:de:dd:da:30:d5:32:14:a5:ae:6e:6d:
10:99:54:fe:f4:96:0e:d2:ab:7f:92:54:ab:8c:65:5a:68:e2:
c8:a1:d8:84:67:a7:95:46:93:c1:d5:2f:7f:7d:03:62:ea:4b:
2c:b2:8e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:09:08 2026 by rpki-client