Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
File: oLwgSfIYtv2rytdZTCUjso2kd8E.mft (raw, json)
Hash identifier: daJkxcJqSeXTGAlEidgBBLJZnWVLX27pDqc/S8R//A4=
Subject key identifier: C8:C7:2F:42:A2:F2:52:4D:E1:61:EA:31:0D:A3:BD:F2:34:6A:4B:2F
Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
Certificate issuer: /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Certificate serial: 019D3752677CB3F515003E99E3BE25CB192A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 02:00:40 +0000
Manifest this update: Sun 29 Mar 2026 02:00:40 +0000
Manifest next update: Mon 30 Mar 2026 02:00:40 +0000
Files and hashes: 1: oLwgSfIYtv2rytdZTCUjso2kd8E.crl (hash: xi88XNqh6OrwTSLYMP+f8gqaAm+x+P7rnolAgMsIMMY=)
2: p7q0kuT4l_QfTZ5_ImIne2o94fw.roa (hash: +S1UVYMeaTeGs9fWcZKSGrpvJ3bbJy0eiN+e0mJvcII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:67:7c:b3:f5:15:00:3e:99:e3:be:25:cb:19:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Validity
Not Before: Mar 29 02:00:40 2026 GMT
Not After : Mar 30 02:00:40 2026 GMT
Subject: CN=c8c72f42a2f2524de161ea310da3bdf2346a4b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:4a:fc:6c:bd:dd:4e:42:83:66:bb:99:19:
5f:a7:a8:c4:50:99:55:0c:e2:9c:f4:d8:50:04:a5:
46:99:d8:11:bb:de:19:97:f3:fc:ba:3f:d6:71:60:
ac:0b:4e:b2:13:f0:b7:43:55:0e:94:10:72:0a:3b:
40:56:78:a2:f5:25:96:27:b4:14:df:39:b5:fc:f6:
09:ec:4d:a5:d8:d1:70:c0:06:b2:ca:9f:a5:02:70:
1e:9f:04:b7:cc:27:8c:33:72:9b:7f:32:72:16:11:
73:3a:fe:5d:dd:32:8d:f4:dc:61:f7:7e:d8:ef:85:
30:96:9a:c0:2f:5e:c6:63:f5:c5:df:43:2a:dd:52:
60:34:52:34:19:77:41:6f:81:3d:0e:6b:d1:88:cc:
d6:c3:6a:6d:63:0d:ad:ef:b5:36:b1:b6:0a:33:d2:
96:6b:fc:a3:4a:fb:e2:31:02:82:bb:1d:21:b7:43:
1d:51:d3:d9:a5:10:22:97:0c:3d:13:bf:0f:b5:5d:
1d:ff:5f:94:3c:5a:5f:70:c4:11:8b:b8:22:e4:f8:
a8:d4:d4:14:cc:87:7b:8d:5c:f8:65:95:3c:64:18:
f9:d7:ac:b4:5e:98:8e:65:f3:8d:4a:78:e8:bc:71:
fd:74:1e:66:79:fd:30:0c:16:b9:03:6c:f8:8c:52:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C7:2F:42:A2:F2:52:4D:E1:61:EA:31:0D:A3:BD:F2:34:6A:4B:2F
X509v3 Authority Key Identifier:
keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:19:12:17:df:1f:9d:c1:39:e1:9e:51:84:46:8f:c5:ba:b6:
1f:41:9f:8a:22:c3:c1:4d:8f:f1:69:d9:1e:7f:3d:c4:e2:d6:
cb:b9:65:b1:13:0d:bd:6f:f2:a0:9e:8a:69:74:53:c5:62:43:
34:00:c6:09:11:ea:5e:9e:34:e6:71:ec:72:12:43:47:90:ab:
dd:e2:a0:32:e5:e9:96:83:66:0c:45:87:c5:a3:44:a8:33:d6:
09:63:9c:f7:d9:71:27:8e:5e:29:8e:01:fd:1c:ed:1d:8f:b3:
87:62:d1:44:9d:6f:14:25:07:ca:fd:48:c3:b0:70:ef:fc:6b:
de:14:76:f6:86:96:aa:b9:52:a5:66:88:d9:ea:b9:d3:fa:57:
ad:11:df:89:39:df:3d:4c:e0:e7:96:8a:fd:1c:6e:e2:98:44:
28:2b:bc:cd:12:84:e4:41:76:31:19:48:99:fb:8e:9a:cd:45:
7d:2b:ff:8a:2d:b0:16:38:91:f5:89:a7:7b:58:b0:bd:7e:00:
cb:48:2a:4c:bf:9e:e1:fe:3b:1d:c8:60:7c:c6:17:71:06:a6:
02:47:1a:53:f2:51:f7:53:41:b8:fa:c9:a2:7a:3b:3c:ca:6e:
f7:f2:41:44:ad:a9:8c:9b:7c:55:ac:c8:31:10:5a:a7:90:c9:
cd:37:ea:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:53 2026 by rpki-client