
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: 8iLwid/vudCuvJL23VY51gzXamSrtya5/S26keFLR0M=
Subject key identifier: 62:FF:1C:53:04:1B:73:3F:F7:13:84:88:EF:E9:7A:6E:68:88:26:C7
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 019D378994C693D6DB44DCE14B49887BDEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: 927DrBdZnw9D__84nL_ziFzE2-k.roa (hash: RgBqCsDQ9jzTYF1D+WmbsiffT+S6nFjM+//7MQvYIcM=)
2: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: XSLCWYr2a3zPbPFdIL2uwkqF9Vp9uZhK8B1giW5hhmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:94:c6:93:d6:db:44:dc:e1:4b:49:88:7b:de:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=62ff1c53041b733ff7138488efe97a6e688826c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:f2:db:f9:c8:38:35:a3:ab:a2:c7:1e:d8:
af:8e:52:e1:93:b3:9d:8e:92:83:1a:0f:f0:78:7e:
9c:4c:07:ee:59:d2:a0:bb:7a:8a:d7:06:af:5b:e8:
56:91:20:92:e5:16:58:49:31:95:f7:57:be:f3:4a:
f4:8c:ad:3c:4a:ca:1c:03:7d:b5:8e:dc:37:6d:a8:
7a:ac:10:41:1f:ab:03:f5:8b:30:4e:fe:33:56:5e:
09:c2:4b:82:13:0b:6b:bc:84:27:d7:83:75:be:36:
f1:5c:80:a5:73:73:a8:8b:99:53:27:b7:02:45:10:
ab:05:41:11:79:19:cf:4c:56:f5:c4:ff:89:33:3a:
f5:30:72:b4:c2:59:03:83:0a:da:31:a3:0e:29:aa:
6a:f9:20:4f:4f:1e:a4:8d:89:c4:bb:dc:f8:c8:66:
10:f4:52:1f:b7:cd:82:c8:d2:90:75:db:ad:02:8e:
1f:fe:79:9b:d5:68:7c:ee:e6:1e:ae:ea:4c:22:5b:
5a:4f:8e:54:80:ef:df:f8:d5:50:a7:19:5d:42:84:
b1:f7:75:8f:bd:42:4c:06:12:95:9d:37:b4:dc:ff:
47:f6:cd:d6:77:58:c8:d0:1e:bc:14:10:35:e7:9e:
cb:2a:bd:ca:1d:28:4b:af:92:ae:61:43:cc:80:b0:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:1C:53:04:1B:73:3F:F7:13:84:88:EF:E9:7A:6E:68:88:26:C7
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:05:ce:ad:38:e2:a1:3e:a3:cc:0f:2b:b4:c0:66:a9:19:43:
a3:51:d5:58:80:49:b7:fd:48:f1:c5:c2:e7:e3:3e:ba:8e:a9:
4b:54:cb:ea:16:4d:a0:d8:ea:d8:8a:d8:39:fc:77:21:e5:d8:
b1:1e:c4:6a:25:d2:24:94:83:2e:d7:a4:8a:10:8e:a5:87:aa:
15:46:88:fe:df:7a:08:c6:66:93:67:09:e0:b6:73:b0:11:d9:
44:b4:d3:7a:ab:e1:f2:d0:d8:ba:45:91:10:64:aa:40:59:15:
30:e2:11:7b:14:dc:d1:5c:54:4f:91:42:e9:33:0f:2e:40:ad:
12:7d:32:f1:b0:10:cb:69:c0:8e:5a:51:74:13:f0:d6:fc:cf:
54:93:4e:d8:9b:e9:0b:e2:da:10:4d:5f:4e:96:0a:33:5e:9b:
20:a7:54:a9:c7:c0:eb:d7:1c:fa:04:d3:a0:e2:d4:d2:22:db:
0d:ce:ea:e4:70:61:b9:89:94:27:3d:c0:7c:2a:09:52:ce:cc:
62:94:0e:ba:ce:34:54:74:29:2a:25:83:b5:c2:c5:da:7d:fe:
78:50:9b:f5:da:79:71:1f:08:f9:06:92:1b:8d:45:a9:14:22:
1d:02:ec:eb:9a:ab:5e:cb:21:36:34:9a:e3:13:ea:f5:25:43:
1b:79:de:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:46 2026 by rpki-client