Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File: OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier: 7WtSHPFhgbC296zHz06cbCZTPUP6FJ+NHdKJNAtVbGQ=
Subject key identifier: 91:AB:EF:73:9A:A2:EB:12:47:8E:C0:DC:17:BD:50:72:39:0B:E8:52
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 019CBE15D84BEF84734E7EEAC6E760D8B24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number: 0FEC
Signing time: Thu 05 Mar 2026 13:00:28 +0000
Manifest this update: Thu 05 Mar 2026 13:00:28 +0000
Manifest next update: Fri 06 Mar 2026 13:00:28 +0000
Files and hashes: 1: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: 1a2S2W7v8mCXIL+R7Ul3Umw4mZFm3PBhtuSkmYKywHw=)
2: TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa (hash: w2y72ko+lJjiVlRbZd4qD2G3W4qa+BLqf6Sn4G+/dow=)
3: XWcYfudW_fCjYcND3H407xe959o.roa (hash: hWyo7JRjc5zRnP54qNBVfiEpztNdLDDxrtX9abLg7Ps=)
4: ge5kxbikwrvAEUuIO3lNRkFxLmw.roa (hash: eEJ79T/++oL5XPtUGIItjARG2jFvNlWqvTqYFtL6EkY=)
5: rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa (hash: ng9lqabxlxHQ1G6hpIjPJfi43vHsrt3ed7Cyb0T70ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:15:d8:4b:ef:84:73:4e:7e:ea:c6:e7:60:d8:b2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Mar 5 13:00:28 2026 GMT
Not After : Mar 6 13:00:28 2026 GMT
Subject: CN=91abef739aa2eb12478ec0dc17bd5072390be852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:0c:56:e0:06:f8:72:a7:b3:8b:c4:5b:67:
ec:bb:68:8a:7d:d4:65:ff:3f:32:a2:92:46:18:e4:
29:49:5b:bd:33:64:af:b2:b0:13:21:07:9e:34:d6:
b4:da:a0:01:71:d0:f0:e6:40:7c:fe:d0:7a:35:ee:
e1:11:62:b4:c7:ad:af:67:36:93:63:ce:ed:35:ae:
b7:a8:56:40:bb:b5:e3:f4:dd:e1:14:96:fc:29:4e:
cb:b3:41:9e:f2:5d:64:be:0c:a5:8e:b2:03:2c:73:
a0:52:f1:25:15:b6:f8:54:5e:54:21:a2:7b:3b:b5:
0c:9c:c2:80:51:ea:0f:e9:d8:6f:8e:db:1e:bf:5e:
8c:b1:03:6d:a3:eb:96:16:f4:92:a3:4d:82:bb:3e:
46:da:a9:0a:fa:a9:06:4d:b2:95:a4:c8:4e:62:df:
b0:8a:b7:b0:01:13:ee:e1:96:78:3d:a3:f3:02:be:
a5:0a:5b:89:0e:27:16:dc:79:97:0f:d8:84:82:21:
9b:d9:79:a9:f8:16:15:4f:6a:7e:30:54:a1:22:2c:
48:4d:8a:d1:9f:27:e8:50:5f:6c:33:f9:e9:3f:18:
e1:ee:d3:a9:0a:90:db:67:70:f7:5d:78:00:59:b8:
bd:12:54:15:53:2d:86:33:44:81:f2:ae:54:18:9a:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AB:EF:73:9A:A2:EB:12:47:8E:C0:DC:17:BD:50:72:39:0B:E8:52
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f2:0f:c6:40:44:dc:d2:51:70:9c:cd:c9:db:d6:17:6a:7f:
a7:41:31:a4:8e:3f:72:95:a6:da:a0:6c:49:09:e7:c0:df:5f:
c9:15:ae:fb:12:5b:ad:f7:fd:ca:bb:88:5e:50:58:74:73:f5:
20:03:ff:5d:24:5b:0b:1a:4a:21:f2:d6:71:11:29:95:dc:31:
9f:c2:ba:09:a2:38:3c:6f:53:9d:52:a7:ce:57:fa:e0:a2:a5:
6a:2d:4d:31:1a:8a:a8:53:09:68:c1:47:94:a9:31:ef:97:e5:
77:b4:3d:b4:0e:e6:fe:fe:f6:59:80:e2:9e:59:3c:1d:cb:5a:
f6:33:5a:52:ed:40:5b:4e:8e:c3:c8:03:9e:86:47:59:58:ea:
1e:3d:52:c2:80:e6:5d:22:ae:af:35:a1:ea:91:67:cc:cb:49:
6b:60:7d:06:63:2b:c9:f3:af:a0:ec:95:52:5e:db:9f:c0:9b:
2d:16:cd:8f:f3:55:c6:e7:14:30:9c:b3:20:19:b7:c5:3d:33:
ab:cb:2b:3f:1a:02:f8:f5:9f:38:3b:a4:32:6a:1a:cb:61:f8:
4d:cb:fb:fe:51:c2:83:bf:a8:60:d3:82:c8:3e:1e:9d:97:53:
09:44:90:21:3a:c5:a3:4f:81:17:98:cf:73:ee:ce:81:13:0e:
34:a1:10:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy+FdhL74RzTn7qxudg2LJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMzQ4ODkyNTFlN2NiMTMzZTkwNmM3MDg5MWJhMWEwNDk1
ZWQ4NjAwHhcNMjYwMzA1MTMwMDI4WhcNMjYwMzA2MTMwMDI4WjAzMTEwLwYDVQQD
Eyg5MWFiZWY3MzlhYTJlYjEyNDc4ZWMwZGMxN2JkNTA3MjM5MGJlODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFYMVuAG+HKns4vEW2fsu2iKfdRl
/z8yopJGGOQpSVu9M2SvsrATIQeeNNa02qABcdDw5kB8/tB6Ne7hEWK0x62vZzaT
Y87tNa63qFZAu7Xj9N3hFJb8KU7Ls0Ge8l1kvgyljrIDLHOgUvElFbb4VF5UIaJ7
O7UMnMKAUeoP6dhvjtsev16MsQNto+uWFvSSo02Cuz5G2qkK+qkGTbKVpMhOYt+w
irewARPu4ZZ4PaPzAr6lCluJDicW3HmXD9iEgiGb2Xmp+BYVT2p+MFShIixITYrR
nyfoUF9sM/npPxjh7tOpCpDbZ3D3XXgAWbi9ElQVUy2GM0SB8q5UGJo1vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGr73OaousSR47A3Be9UHI5C+hSMB8GA1UdIwQY
MBaAFDo0iJJR58sTPpBscIkboaBJXthgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMt
ODRmOWVkODdhYzMxLzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMtODRmOWVkODdhYzMx
LzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfIPxkBE
3NJRcJzNydvWF2p/p0ExpI4/cpWm2qBsSQnnwN9fyRWu+xJbrff9yruIXlBYdHP1
IAP/XSRbCxpKIfLWcREpldwxn8K6CaI4PG9TnVKnzlf64KKlai1NMRqKqFMJaMFH
lKkx75fld7Q9tA7m/v72WYDinlk8Hcta9jNaUu1AW06Ow8gDnoZHWVjqHj1SwoDm
XSKurzWh6pFnzMtJa2B9BmMryfOvoOyVUl7bn8CbLRbNj/NVxucUMJyzIBm3xT0z
q8srPxoC+PWfODukMmoay2H4Tcv7/lHCg7+oYNOCyD4enZdTCUSQITrFo0+BF5jP
c+7OgRMONKEQ8Q==
-----END CERTIFICATE-----
Generated at Thu Mar 5 22:06:27 2026 by rpki-client