Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File: oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier: ZeZ2ziVs8NErfiCzFhK1wc9GKMqDBi6tZusRGwcPSdc=
Subject key identifier: 6F:22:2C:7C:84:6A:4E:A1:DD:54:E1:2C:CB:AD:8D:A5:76:03:05:1D
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer: /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial: 019D3940A86F3B7AA2899BF7EBE66A9F810A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number: 0893
Signing time: Sun 29 Mar 2026 11:00:31 +0000
Manifest this update: Sun 29 Mar 2026 11:00:31 +0000
Manifest next update: Mon 30 Mar 2026 11:00:31 +0000
Files and hashes: 1: EKDCPhWPs30l0DSrD9ZjD1tFQkw.asa (hash: /VjX2BQnC3wIjMi5VEBP8mPkyeVmam6lGlm8WGBjxBI=)
2: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: faaqIYQ7UMLQs0M03mFc/DbGubCD+iE0Dh6hIyvcFDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a8:6f:3b:7a:a2:89:9b:f7:eb:e6:6a:9f:81:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Validity
Not Before: Mar 29 11:00:31 2026 GMT
Not After : Mar 30 11:00:31 2026 GMT
Subject: CN=6f222c7c846a4ea1dd54e12ccbad8da57603051d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:36:68:f5:77:ee:8e:03:34:23:7b:eb:52:
11:56:18:62:b7:fa:59:ba:c5:4b:d3:30:d1:c7:cd:
94:82:01:c5:9d:96:73:bd:ad:b5:23:62:cd:73:46:
89:54:82:4f:fb:93:a4:26:6b:c5:b5:9b:01:ee:bf:
77:99:cf:03:35:eb:13:a9:60:db:c2:24:28:f9:a3:
25:0d:97:a5:d4:ea:6e:c1:2f:50:75:87:3d:4b:fb:
d1:3e:c3:1d:7b:03:cb:21:ff:6f:9a:fa:91:17:45:
4b:b7:5a:0a:bc:c4:b8:07:dd:5b:bd:4e:0e:e5:d0:
a2:7c:7f:ed:6f:d2:98:2d:b0:45:f4:57:57:a4:a2:
66:45:56:7a:c2:32:fa:0f:33:41:67:27:88:79:1a:
43:f2:bd:58:cc:de:df:b2:23:bb:66:26:92:a6:de:
df:d1:5b:68:a1:78:07:60:1b:5f:95:ed:b9:48:11:
30:5f:0b:1b:d4:56:28:18:4a:b3:cf:3e:3c:76:10:
4e:a0:fe:91:c2:d9:7a:80:16:c6:fd:4e:ff:df:c4:
53:6c:53:13:78:12:83:d3:24:35:28:25:d5:01:41:
16:eb:f4:85:46:cf:9b:f5:41:5e:00:b5:93:f8:9b:
d2:14:82:c6:c5:ed:9f:81:a3:62:b7:de:08:c7:40:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:22:2C:7C:84:6A:4E:A1:DD:54:E1:2C:CB:AD:8D:A5:76:03:05:1D
X509v3 Authority Key Identifier:
keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ad:9b:78:c8:40:34:62:f5:64:ae:3d:0a:a4:80:0f:fd:02:
26:e9:87:51:65:b5:c5:c8:35:bb:13:b0:49:b1:34:2c:7e:e8:
e9:87:6a:5c:47:69:e3:cc:62:10:52:87:72:d4:8f:8f:4f:52:
67:d4:4d:40:3e:bf:c1:07:f6:d5:9d:b7:f6:d1:1f:2b:80:9e:
2c:5b:36:5e:e4:7a:7b:f1:f1:22:88:e4:c6:4e:c4:15:a0:05:
3d:ca:10:d0:fb:bd:44:03:a2:cb:d0:17:6c:1f:b4:2f:43:c7:
3e:b9:70:b7:c1:79:bc:d5:d1:7f:45:b1:f5:44:1d:0c:c4:3a:
6a:c9:55:ce:e0:43:98:1d:e4:90:3d:a1:11:73:76:c4:8d:8f:
34:77:7f:64:13:d8:5c:73:8f:33:24:c9:dc:1c:40:bc:a0:c7:
e9:ec:67:86:70:94:38:da:75:d8:aa:4e:d2:28:1c:95:95:44:
4c:20:58:fc:8d:d3:04:e6:48:01:06:e3:16:ed:d9:7d:a8:de:
57:cf:56:78:fd:35:ab:5f:05:32:e7:e2:d3:83:8a:b5:9f:c6:
50:1c:a8:b7:c6:ae:62:7c:80:0f:0b:be:46:2c:91:2e:d1:5a:
cd:40:90:34:86:e5:ef:2a:92:2f:37:fb:c6:3e:05:f3:69:79:
da:6c:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:05 2026 by rpki-client