Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: bNMoH0j7Wn2K40MjjgglZNurfX0imx9uWGWrugoDpM0=
Subject key identifier: 50:82:71:41:46:47:49:C5:84:18:07:24:B4:29:EF:F4:33:B9:98:21
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 019CE66D4A21D710E815B7998A4EB22F8310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 07AC
Signing time: Fri 13 Mar 2026 09:00:47 +0000
Manifest this update: Fri 13 Mar 2026 09:00:47 +0000
Manifest next update: Sat 14 Mar 2026 09:00:47 +0000
Files and hashes: 1: AhYsuHNUbK8a0XunNi5rUoZZd74.roa (hash: +Iz4KrzXh/10Mx5yBgfEhonyL6CqUOw7mbJ6px2LQGs=)
2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=)
3: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: jd7UIp1cmSk19aCbSmnSoRMUF3yBlznHGkLGRLXVrJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:4a:21:d7:10:e8:15:b7:99:8a:4e:b2:2f:83:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Mar 13 09:00:47 2026 GMT
Not After : Mar 14 09:00:47 2026 GMT
Subject: CN=50827141464749c584180724b429eff433b99821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:9a:2b:df:2e:61:45:b4:9e:ff:ec:59:28:
c7:c0:a6:b5:1f:b4:bf:cc:f1:9c:81:d9:3f:63:34:
1c:e8:79:f0:7b:11:e6:d4:70:5b:87:87:a4:c6:61:
65:f2:b9:40:17:84:a8:b7:9c:82:04:d0:35:19:12:
2f:8f:8f:ea:69:ec:3e:9c:c9:5c:5e:12:3a:91:bc:
c5:88:ad:78:82:81:59:9f:18:27:98:c4:c4:e0:26:
84:ec:70:d6:6f:99:36:a7:94:a1:2c:4c:61:1d:8a:
d0:26:bd:15:c9:fc:2a:75:4f:60:3f:db:de:be:9f:
96:3c:be:9e:04:45:9e:19:48:44:da:b4:ad:be:e0:
d5:0c:19:a5:08:a4:9b:17:29:8e:1a:3d:f9:b4:1c:
40:90:e7:fd:c7:76:f3:14:30:af:63:80:ac:f8:c8:
df:3b:17:97:ff:71:e2:51:3a:33:63:96:bb:9c:d5:
74:0c:4c:c9:55:c0:8e:ae:81:e0:5c:73:89:4a:d1:
db:56:4b:ce:f1:ea:46:2d:8b:ac:3c:ae:b3:17:ea:
11:c0:de:a4:83:a5:59:79:79:05:d0:e0:f5:6c:bb:
7d:f9:6c:df:71:01:e5:59:cc:f6:7e:04:6a:79:a0:
a8:60:81:0e:5d:b5:74:45:54:e4:13:28:72:b6:e2:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:82:71:41:46:47:49:C5:84:18:07:24:B4:29:EF:F4:33:B9:98:21
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:79:fd:6b:2a:2b:2a:93:51:43:84:bc:7d:0a:d5:6d:c5:78:
a9:d6:ce:7d:16:09:05:e9:8c:44:c3:83:bb:d3:4a:92:4e:87:
20:67:20:e1:f9:70:e6:b2:b6:86:ae:13:4b:9c:59:a8:fa:de:
1c:19:6e:3f:d9:af:c9:48:48:ed:bb:b1:c3:0d:b1:fa:f2:ee:
b6:55:61:4e:c5:af:8a:9e:a1:4d:d1:ce:bd:74:52:45:94:dc:
63:c5:62:b7:76:87:78:f9:91:c0:63:1a:9c:67:60:be:2f:88:
f8:a4:d3:38:93:84:0e:dd:de:28:28:20:4a:6c:58:a0:45:8d:
c4:3a:e9:3c:f1:4f:24:81:f1:b6:6e:40:be:10:de:1c:9e:d2:
4e:64:a6:0f:d2:29:6c:e4:c3:cb:b5:f0:2e:23:42:8f:6a:4e:
5a:10:14:9f:e2:1e:d8:81:cb:49:5f:40:2c:90:80:bc:78:d4:
fa:74:a6:4b:ab:5b:47:82:38:bb:25:39:36:1f:24:e9:46:9b:
18:a0:46:05:64:6a:d3:62:5f:1b:77:45:ad:ec:96:32:83:50:
1f:f1:c7:f9:09:03:7b:37:27:bc:ff:ba:b2:4b:4f:e9:68:5c:
d9:d4:9d:0a:2d:85:26:11:f5:49:9c:e0:82:6e:4f:d8:62:62:
ba:25:64:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:59:42 2026 by rpki-client