Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
File: oILdW4b5WNW-c_2-PwzPbf8C9yE.mft (raw, json)
Hash identifier: pinWxVOKMW4KqiZzNAlyUpGqgrRHej4PZyel20CCZlg=
Subject key identifier: 89:E4:59:D2:AD:16:37:EC:2B:C8:30:51:2B:2C:C7:D0:6F:BA:E6:DD
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Certificate issuer: /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial: 019D36E5377CB18B49C243D7D0D01A1B2188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 00:01:24 +0000
Manifest this update: Sun 29 Mar 2026 00:01:24 +0000
Manifest next update: Mon 30 Mar 2026 00:01:24 +0000
Files and hashes: 1: 1k6NwrzFKRo_CN9ahw66ZqaB9T4.roa (hash: Gm5FahEhYqsf3/1qvhcpLeaE1t89Xgh/p3OZKItZTUY=)
2: oILdW4b5WNW-c_2-PwzPbf8C9yE.crl (hash: Z8XHRLUTpeubJnIioLVfUgBh3K92zuk8pWZ/NzzQGbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:37:7c:b1:8b:49:c2:43:d7:d0:d0:1a:1b:21:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Validity
Not Before: Mar 29 00:01:24 2026 GMT
Not After : Mar 30 00:01:24 2026 GMT
Subject: CN=89e459d2ad1637ec2bc830512b2cc7d06fbae6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:d2:05:41:16:7b:bc:00:19:89:1c:13:26:
2d:d5:3b:4d:31:bd:6f:48:03:0f:2c:d6:05:20:d3:
27:91:c9:b6:9e:93:8a:82:f5:d6:04:9d:83:30:2d:
19:5d:0d:c3:b6:1b:b9:ae:94:1e:c6:42:e2:80:f5:
84:94:8a:c9:6d:d9:8b:d4:be:a0:7a:02:3d:0f:ef:
12:89:8a:de:d7:6e:c8:67:1b:78:09:c8:3c:d2:d3:
9c:40:9c:ec:05:cb:30:dc:29:b6:c1:59:30:c8:35:
b5:65:fe:a6:68:60:f2:fc:4e:3c:bc:91:69:a3:b9:
0a:15:0c:89:16:b7:c4:e1:1c:d7:c4:ae:a0:7a:8a:
10:77:fa:21:fe:cc:e1:dd:ba:3c:38:0c:dd:73:1d:
13:b6:fd:81:7d:5d:fe:dc:7e:d5:6f:81:30:96:76:
2f:8b:3f:14:7c:74:3f:8a:f3:1f:f1:38:2c:4a:da:
39:3d:ff:ca:67:6e:f0:be:e3:d6:d4:ff:28:50:2b:
9e:d2:f1:c7:20:94:3a:12:0f:58:6b:e7:80:bf:39:
14:30:ca:09:79:c7:ca:b5:6c:54:e6:7a:f2:dc:68:
6f:94:19:16:29:29:d6:0b:bd:1d:9e:e5:d9:23:6b:
bd:f5:ed:bd:2c:9e:8e:f7:3b:fd:0e:59:f4:5a:47:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E4:59:D2:AD:16:37:EC:2B:C8:30:51:2B:2C:C7:D0:6F:BA:E6:DD
X509v3 Authority Key Identifier:
keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f4:db:7b:93:f4:22:c8:29:cc:0c:22:7f:4a:c8:f1:aa:e9:
8d:13:fc:7c:ae:e9:a0:ed:e8:d2:ed:d6:17:de:0e:2c:f1:db:
7c:e9:73:05:fa:94:40:cb:f1:54:99:e0:83:d2:20:f8:90:b5:
f5:ef:ae:7e:29:8f:40:16:f1:7d:7f:64:d7:20:dc:3f:64:7d:
0e:da:41:24:67:35:4a:be:5c:8a:0c:49:95:7e:f9:a7:b9:e4:
2c:1c:a6:20:56:9d:dd:04:58:ae:a0:5e:30:da:ee:7e:06:40:
0d:11:e7:a6:9d:6c:2e:4a:c8:c7:3f:d2:6b:b5:b6:71:a3:1d:
11:de:6d:45:e6:44:bf:84:8e:fa:69:5c:e5:75:a3:a5:8c:f7:
c4:e1:27:d9:aa:e7:ef:5a:38:23:3e:7c:d8:6e:30:ee:47:10:
30:b4:d1:2b:3e:25:17:5f:bc:7f:42:2b:58:0f:c3:7c:de:98:
62:e1:91:f4:1f:5d:8a:22:e7:55:51:e4:c2:08:05:9f:00:c5:
1f:38:52:59:3f:2a:b4:77:6f:f8:fa:79:df:b8:ec:6d:c3:d5:
9d:b0:cf:4e:9e:be:78:3a:22:87:3f:26:38:f8:90:84:d2:1f:
a9:cb:8a:d6:b8:e3:ee:f2:17:f1:f7:e5:03:1f:a2:59:07:24:
84:65:7d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:39 2026 by rpki-client