Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: DidRgvtAylBgo92qACi/RU1uNjv9096N7H9CJkEmztw=
Subject key identifier: D9:1F:BE:2A:67:18:28:3D:B9:11:F0:94:0D:5D:8D:52:3F:B6:C6:8B
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 019D382DECD7DC304012AF449CADEB46962A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 04B5
Signing time: Sun 29 Mar 2026 06:00:26 +0000
Manifest this update: Sun 29 Mar 2026 06:00:26 +0000
Manifest next update: Mon 30 Mar 2026 06:00:26 +0000
Files and hashes: 1: 7jGC3eByRg_Kov58Z9afFa1zFhk.roa (hash: 01p3EgWoHQZuC7lRAyeIevnlE5QEkxh9vvqWiCkIFPs=)
2: JiK8psPNS7Q8TSWjkJH1pP9BmF8.roa (hash: 3M1URB5bq4S79c9mtyyaPbUG6/SErUNxltBv4XVCKoY=)
3: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: jf2lyJK9vsyEnS1DtYol3rWMDQsP26xjhu4fRCcndCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ec:d7:dc:30:40:12:af:44:9c:ad:eb:46:96:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Mar 29 06:00:26 2026 GMT
Not After : Mar 30 06:00:26 2026 GMT
Subject: CN=d91fbe2a6718283db911f0940d5d8d523fb6c68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:1a:a8:bd:5d:cd:a3:af:05:52:b6:27:f8:
4a:88:81:8e:27:00:bb:6f:4f:78:85:bd:5e:8c:c7:
b3:38:dd:99:9a:01:22:3f:08:37:71:db:0c:76:ed:
6f:f2:08:1d:e8:5a:29:b0:e8:9f:ff:bc:ae:98:df:
c9:78:c6:f3:06:1f:1e:34:5c:64:dc:37:9c:45:b6:
bd:49:22:f3:42:d1:cf:a2:1f:16:c1:a5:e2:42:d5:
d6:32:63:fd:84:4b:63:26:0d:96:6b:24:c0:18:98:
49:eb:72:72:70:f5:8a:2f:db:6c:56:08:e8:5b:6d:
1e:8f:ba:08:9e:5f:21:e0:c2:ac:c5:30:c4:b2:67:
ac:7d:8a:34:85:64:00:ac:f7:bc:19:ce:bc:33:f8:
d8:a3:41:f7:b0:5c:78:23:93:ea:42:95:66:38:4f:
10:d2:ed:94:e7:7e:d1:ee:a6:9a:b3:dc:af:68:32:
35:89:fb:a4:2a:d5:12:c2:da:11:0a:f5:e2:18:30:
c4:f7:3b:6e:de:ed:2b:77:81:1d:5d:11:13:a6:a9:
30:e8:10:90:61:70:21:60:bc:bb:eb:9f:b6:1a:fa:
d6:a4:28:f0:78:bb:cf:27:78:89:15:b8:ca:ce:cd:
db:ea:7e:1e:ca:4e:2c:b9:48:bf:bc:ec:6d:b5:66:
0a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1F:BE:2A:67:18:28:3D:B9:11:F0:94:0D:5D:8D:52:3F:B6:C6:8B
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0b:8d:32:37:69:98:34:b8:bf:a6:05:8d:d1:8e:c0:3d:45:
a9:0c:b4:bc:2a:f1:17:c8:9f:be:b7:af:c2:47:51:2f:4c:24:
70:9c:32:b7:ee:b5:73:9f:9d:57:fa:a0:2a:f2:bd:99:4c:c8:
85:c4:62:c0:96:cf:d6:3a:72:04:c6:e8:b5:2e:18:3a:1c:2a:
d0:df:72:6e:35:6f:49:73:8d:3c:e7:37:ae:db:23:80:c0:34:
6f:42:0e:07:bc:6c:83:6b:69:e9:ec:86:56:b3:39:a1:28:b3:
c4:e3:94:2d:da:a0:1c:44:b9:ed:8b:18:3e:59:8c:ff:d6:e0:
73:bc:5c:c8:b5:18:c2:bc:0a:f6:3c:03:cd:90:0e:bf:5b:35:
5b:25:fa:19:9e:d2:10:39:39:4b:1b:90:16:41:fe:30:e4:5e:
f0:a9:31:6e:bb:8b:a4:44:0c:87:7c:99:0b:a9:4c:b1:93:be:
3e:85:ec:99:a5:94:d1:d4:09:e4:91:1e:a4:99:8e:de:82:d0:
a9:32:6b:86:a7:cf:02:54:9c:80:e6:cc:d9:9a:20:95:ca:fb:
b1:21:b1:7b:f5:af:fb:83:7e:da:25:03:a4:fe:49:56:3b:83:
01:a6:58:ec:0e:3e:89:db:1b:56:47:0c:26:f1:1a:22:b9:70:
1e:e3:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:05 2026 by rpki-client