Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
File: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft (raw, json)
Hash identifier: UgtjmHlZTmYruRr44Bi5h8Uf7WJWCB2F0YWpJ4esmsA=
Subject key identifier: 34:42:BE:42:9C:16:4F:16:DB:61:07:07:8C:08:55:6A:93:0F:CF:1E
Authority key identifier: A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
Certificate issuer: /CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Certificate serial: 019D371B764C8AC78C3DA242702775642ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 01:00:39 +0000
Manifest this update: Sun 29 Mar 2026 01:00:39 +0000
Manifest next update: Mon 30 Mar 2026 01:00:39 +0000
Files and hashes: 1: UDOQeKm21_HbogaX80qPDYGLszg.roa (hash: oQCYUWGJBiukXuu22aVYGVLYnrdXQVCn7RQqhgm8PBQ=)
2: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl (hash: ODU7xwc9WgNdJ/YdDKLx0y99lBjEBLvkp55QHakZCRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:76:4c:8a:c7:8c:3d:a2:42:70:27:75:64:2e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Validity
Not Before: Mar 29 01:00:39 2026 GMT
Not After : Mar 30 01:00:39 2026 GMT
Subject: CN=3442be429c164f16db6107078c08556a930fcf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:32:18:6c:26:20:24:22:ab:12:bd:3b:6e:f2:
09:4f:c9:9c:f3:93:5e:ea:60:5b:07:5e:9f:03:30:
eb:6d:33:8d:e4:21:f1:8a:50:5e:a9:e5:f3:4f:dd:
df:7a:cc:ca:d5:b9:3c:82:ba:ea:cb:f5:63:1a:20:
27:8d:f3:78:6a:ef:f1:6b:7b:9a:81:8f:04:3f:9f:
e0:35:7b:58:de:a9:87:b5:b9:dc:f7:6c:d3:17:69:
d3:fd:9b:9c:de:22:86:ee:ee:d8:a9:58:57:e4:27:
f1:8a:60:7e:e0:88:c0:d7:b0:e8:6b:97:b7:35:9f:
31:34:3b:e3:5b:71:4e:90:bf:40:fe:6b:d4:33:60:
dd:46:cb:29:71:de:9d:cc:17:e8:22:2f:45:1b:8e:
96:64:32:88:f6:b1:24:15:ea:23:9a:65:c4:f9:d9:
70:c0:87:6e:03:18:46:a4:e6:b7:dc:fa:05:d7:c5:
d2:e5:69:a8:54:81:5c:08:ab:77:af:f5:e6:19:27:
a3:3c:20:f8:78:d1:a8:f4:af:6b:08:33:91:21:47:
f8:0e:ac:d0:2f:50:03:99:89:49:7d:cd:2c:94:76:
d0:e7:77:e8:84:27:56:11:89:e5:cf:14:ff:a3:e0:
b1:2f:96:d5:bf:49:3d:7c:52:35:08:d5:0a:20:ca:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:42:BE:42:9C:16:4F:16:DB:61:07:07:8C:08:55:6A:93:0F:CF:1E
X509v3 Authority Key Identifier:
keyid:A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:09:8e:bb:3e:f5:2e:31:b7:f3:1a:3c:05:a1:44:fc:57:c0:
e9:c6:fe:78:8e:dc:c7:37:aa:94:bc:f0:0a:e5:32:b7:96:ff:
8b:a6:28:d3:3d:30:00:03:9e:19:c8:29:97:43:95:87:0b:8e:
d2:65:27:c3:26:3b:2e:54:1b:33:90:a9:2d:90:97:fd:4c:92:
0e:58:2a:07:8b:5a:72:40:04:54:30:b9:b8:a5:48:ad:ac:45:
b4:95:a4:d3:b7:47:ab:81:ec:cd:31:4d:3c:25:77:92:42:c6:
46:db:75:fd:81:a1:18:71:8f:8a:44:25:89:cf:a8:f9:7d:b1:
f0:19:bb:64:f4:bc:af:2e:73:83:89:f5:2e:ac:c0:90:6a:b2:
72:8c:32:6c:57:3a:5c:09:dc:c3:12:07:18:72:8a:1e:70:7b:
44:93:0e:66:39:21:39:e4:13:c1:a2:61:06:16:a1:b6:a1:a6:
05:ff:e5:31:94:5c:61:75:37:88:36:cb:ef:ce:bb:66:17:97:
62:de:cb:91:60:cd:b0:ad:8f:1f:28:ac:0a:0a:c8:98:b9:04:
c4:13:00:e4:ad:a6:5a:e9:91:6b:02:fe:32:44:f5:2b:ee:42:
23:f0:97:e4:83:e1:5a:1d:87:8c:c0:69:69:42:67:3e:cd:1d:
7d:28:22:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:13 2026 by rpki-client