Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: 9i3yr3IdkdWQtitLN/ejVJEmX6TjRWXddSLl9nTwmEw=
Subject key identifier: D2:1A:9E:7D:CF:1A:E3:05:F8:CD:B1:45:A0:68:00:CC:49:E9:2A:33
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 019D284E370BAD8B712F21472540B32B2852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 04:01:47 +0000
Manifest this update: Thu 26 Mar 2026 04:01:47 +0000
Manifest next update: Fri 27 Mar 2026 04:01:47 +0000
Files and hashes: 1: D6zgSHbiztj7O2I1DW60de0ptBk.roa (hash: B8D0W1X4lmeoQhtBDBRUB/VyUa2Mld6fBfnDVCoTkMo=)
2: Ed9sbxyb8jvrhvxZjbOv3NsPiaQ.roa (hash: qKAq59OeZGLNvwwrou6DkFU90K39DNnEvwuBkqrbCks=)
3: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: Ru0k5ozyeeTtm8LFhnLhgNnsLWp2SooZfiq/xLIV/qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:37:0b:ad:8b:71:2f:21:47:25:40:b3:2b:28:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Mar 26 04:01:47 2026 GMT
Not After : Mar 27 04:01:47 2026 GMT
Subject: CN=d21a9e7dcf1ae305f8cdb145a06800cc49e92a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:fd:12:92:14:6f:8f:89:08:ca:cd:f5:cf:
7b:3e:db:8f:15:87:b6:42:46:6e:09:cb:a7:0f:db:
7c:a2:0f:7c:4c:79:04:b4:d5:03:23:06:21:e9:58:
55:bd:78:a1:e8:cd:19:6d:fc:6e:71:eb:6e:1d:2c:
88:74:27:76:4e:d7:5c:40:bd:7b:c1:a1:66:00:19:
56:ad:94:2a:d6:13:96:81:e0:2d:ba:15:50:b7:a2:
30:bd:a4:bf:6d:2f:28:e9:b3:d9:b8:a5:10:0d:77:
dd:50:7a:c1:ab:a3:b2:0b:09:8d:2f:ad:1a:3e:6e:
2c:b5:e2:3a:eb:9f:6a:ef:93:20:61:94:d3:db:9a:
0d:8c:4b:dd:0e:0b:cd:d6:5b:01:c5:ae:2d:df:1a:
86:53:2c:62:02:02:1c:e9:2c:ba:75:38:d9:3a:14:
cc:13:52:2b:bb:c0:58:99:c1:79:bd:a0:ce:08:86:
c3:ae:7c:af:47:a4:f9:1c:0e:da:7a:ea:5d:a6:a8:
a4:f0:78:6b:82:07:05:d6:38:bb:88:a5:c2:1e:73:
ab:25:37:f8:5c:02:ab:b8:fb:bb:55:33:bc:11:d0:
d7:5a:d2:cc:42:1c:5c:2f:d9:e3:88:6e:52:cb:91:
5c:ea:a0:42:58:ff:22:aa:74:39:8c:45:a7:69:29:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1A:9E:7D:CF:1A:E3:05:F8:CD:B1:45:A0:68:00:CC:49:E9:2A:33
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0e:04:d1:e4:3a:16:f4:71:c6:87:28:04:a3:c7:70:e6:58:
b8:af:6b:59:6c:87:2c:c2:c5:52:40:e7:3c:b3:77:66:5a:ca:
84:fa:37:af:c2:ff:cb:37:23:07:59:79:a2:4f:44:f6:9e:b2:
6a:91:84:04:12:11:d3:b0:e1:26:64:da:26:ba:fd:9e:c1:f1:
9c:e2:04:69:00:a4:0f:19:b5:58:02:e6:19:a5:a8:29:67:1e:
39:ed:a9:34:ee:2e:26:cb:fb:60:0b:3f:eb:cd:19:e7:96:54:
e0:3e:1c:18:16:06:bc:15:0d:b5:6c:10:27:d0:20:ea:ee:d1:
23:6a:9e:c5:25:e4:8b:a2:7d:a9:0a:0c:00:f1:54:59:7c:11:
75:e7:6c:2f:a5:01:76:ff:4a:f3:f3:73:65:5d:8c:a5:19:08:
f1:b6:f8:7d:e8:75:5c:eb:06:49:a5:cc:7c:b3:c8:90:19:b0:
0e:80:8e:87:5c:be:d8:31:10:95:05:7a:4d:59:29:2a:f8:c3:
9b:2f:42:c7:d4:e1:95:d3:50:d4:4a:6d:38:28:e7:6f:f1:4c:
6c:f0:14:88:70:67:a1:a0:a7:27:67:34:36:f4:43:88:2f:0d:
e5:e0:d8:30:fa:51:30:d8:f2:63:d9:dd:12:98:bb:e6:5d:6a:
1e:d1:68:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:26 2026 by rpki-client