Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: DI27gLit3p4+yBe/7bEKSQPpGiE/UMzeYwgsSnP5NbQ=
Subject key identifier: 5D:9D:13:1F:DE:49:74:EF:40:69:34:07:36:C4:0B:83:68:88:F2:36
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 019DA11C92D9931439827D7927C77FBBD134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 0AE7
Signing time: Sat 18 Apr 2026 15:01:37 +0000
Manifest this update: Sat 18 Apr 2026 15:01:37 +0000
Manifest next update: Sun 19 Apr 2026 15:01:37 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: y2wc1+gr9tbbWK++1Q+zJZc51VJnY9WrbstQ481lnUk=)
2: a8XnUOfpz8ZY7eKp-4bvRwhsoUk.roa (hash: ezF+mZ7l6Eoc1jbkNrsOHMCf2Y5Hcn8BAe23t9pa+WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:1c:92:d9:93:14:39:82:7d:79:27:c7:7f:bb:d1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Apr 18 15:01:37 2026 GMT
Not After : Apr 19 15:01:37 2026 GMT
Subject: CN=5d9d131fde4974ef4069340736c40b836888f236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:66:78:15:22:89:0c:3c:b1:f8:f4:3d:f9:
c4:63:b7:b3:43:28:33:f9:e2:ce:16:23:25:46:f1:
0d:1d:be:f8:23:96:40:73:c8:85:de:30:38:8b:7c:
25:20:b3:4f:28:64:55:aa:e7:32:c5:7c:34:4f:82:
a6:e4:24:24:26:77:96:80:69:d9:97:01:6f:81:a9:
58:a5:18:59:77:2e:1a:58:bc:43:c5:10:ee:b5:02:
3d:04:7e:8d:67:3d:45:c9:1d:a4:4e:4f:b2:50:7e:
5e:5e:5c:5f:f1:b1:68:7c:bf:83:87:28:54:e5:7b:
0e:db:e5:4a:3a:58:cf:59:33:71:2c:2a:25:d4:ac:
48:41:3a:6c:62:d3:50:db:63:90:ef:76:d8:da:64:
f1:2f:69:d9:ce:76:21:86:4e:38:ef:97:00:21:b4:
dd:3b:f1:3f:64:6c:ef:64:d0:82:0b:ce:7b:7d:a2:
5d:c6:a9:8f:18:86:51:ae:43:2a:5c:98:3c:94:41:
9c:04:70:75:1a:3d:c6:38:01:73:5f:3d:05:e5:d7:
ac:c1:a9:56:1e:3e:a2:f6:38:be:00:3a:9a:86:6e:
ab:93:85:55:30:32:ba:b4:30:32:43:10:fb:c5:32:
c8:ae:27:96:01:71:4a:18:96:5e:6e:ee:cb:0d:ce:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9D:13:1F:DE:49:74:EF:40:69:34:07:36:C4:0B:83:68:88:F2:36
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:47:e9:7d:4b:09:20:ab:ed:b0:da:c0:cc:fd:15:c5:d3:f2:
e5:ac:a8:fc:6e:74:e1:10:47:3b:0e:4b:eb:82:85:e4:25:4a:
3f:38:49:05:ed:b8:77:d7:b8:6e:32:33:a4:42:df:d5:6f:27:
3d:4f:9b:52:6b:f3:40:85:d3:b6:ca:13:1e:80:c9:82:80:0e:
72:42:4f:a4:ff:c5:41:78:ac:16:e8:4b:cc:3c:8f:88:26:06:
eb:9e:e8:b1:89:3f:f4:ea:8e:de:f0:24:49:7e:37:ab:18:27:
b7:b7:65:5e:6b:91:dc:26:fb:37:4e:e9:b2:28:1d:b7:3a:16:
b6:f4:40:e0:c4:12:06:d5:9f:ee:6d:bb:87:30:42:f0:5e:39:
27:e0:39:ee:e1:de:f7:33:bd:b5:8d:d4:20:06:53:b8:b0:1d:
52:f6:f0:be:fc:68:2e:dd:a5:7e:91:1e:aa:06:33:5a:5e:13:
b5:6b:43:3b:0e:b2:7c:02:15:1d:a9:e3:f3:17:7b:6b:24:e7:
7f:86:69:8c:e3:fc:18:0f:be:8f:59:51:4a:c3:07:f7:75:13:
95:77:f1:9b:3a:17:12:73:3e:31:50:50:67:a0:ae:73:84:fb:
e8:05:11:52:c6:6b:1c:82:e1:63:95:f6:bb:6c:8f:02:ab:0e:
87:66:20:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:22 2026 by rpki-client