Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
File: oGXmV0nKpfu0kekGl32xjTVZv0M.mft (raw, json)
Hash identifier: P44yYQYASuQbS+XEgwO8IMCtdc44gWkZ+AaAwxC0q2w=
Subject key identifier: 0A:DB:D3:70:73:0E:3E:10:30:54:1A:19:61:BA:EA:C8:41:37:A9:EB
Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43
Certificate serial: 019D394108BEB1FC2F2B4A447D51DB918043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
Manifest number: 15D0
Signing time: Sun 29 Mar 2026 11:00:56 +0000
Manifest this update: Sun 29 Mar 2026 11:00:56 +0000
Manifest next update: Mon 30 Mar 2026 11:00:56 +0000
Files and hashes: 1: OPZKD3Vt0sTBmYCk7cCKUWbrGKI.roa (hash: YresaaNN//tsTeKLfmj6Notknbb5CDEFkmcoLMPi/SQ=)
2: oGXmV0nKpfu0kekGl32xjTVZv0M.crl (hash: lS1DKVfJ0hJSSPHWs2vyn/IhB5HjfV6R3yGF/z1lRGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:08:be:b1:fc:2f:2b:4a:44:7d:51:db:91:80:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43
Validity
Not Before: Mar 29 11:00:56 2026 GMT
Not After : Mar 30 11:00:56 2026 GMT
Subject: CN=0adbd370730e3e1030541a1961baeac84137a9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:fc:82:e9:85:14:bf:7a:cb:4c:50:38:a4:
4c:8a:e4:37:bb:13:ea:5e:03:96:50:de:f5:d3:2c:
9b:9f:ac:9a:fb:a6:c9:b5:13:86:2d:c9:81:ef:e3:
fb:9b:41:98:90:74:57:b5:7a:61:cd:3b:2b:a4:03:
3a:ff:0e:b1:a5:43:b5:30:b3:c9:00:0a:ca:c9:07:
c4:74:f1:bc:bd:7b:65:75:5e:41:f8:da:ab:29:b1:
0f:92:81:3d:6c:8d:9b:01:51:91:a7:6f:55:fd:d5:
da:b5:d8:d0:26:6b:d1:8b:9a:50:5d:e9:fb:44:bf:
1c:e4:54:20:b4:08:0a:fe:a1:31:ce:7f:45:d6:17:
ff:8a:34:f2:57:1a:b2:08:e9:ac:bc:cd:cb:7b:ab:
62:c6:d1:8f:bc:c7:7f:b2:cf:8f:0b:e2:a7:8e:36:
6a:c9:66:e4:c6:86:c0:9a:2f:39:8b:a0:e4:60:b1:
c0:4d:55:cc:e6:fd:a8:5c:9b:1d:5c:95:39:f7:bc:
33:8a:68:b1:80:b9:d2:df:7d:c4:c3:92:76:c4:95:
14:de:a8:34:88:c2:22:15:a6:35:54:7b:28:28:73:
51:99:ba:a8:26:a2:7c:e1:20:0d:0f:16:9c:83:4b:
0a:a8:e6:1f:53:ca:d6:49:57:43:f8:fb:ec:e4:ed:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DB:D3:70:73:0E:3E:10:30:54:1A:19:61:BA:EA:C8:41:37:A9:EB
X509v3 Authority Key Identifier:
keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:58:99:3c:b0:e3:32:a0:9f:65:b8:a1:7c:9a:a3:97:67:c7:
d7:df:5b:8b:cd:53:86:97:80:5a:4c:ea:fa:fb:9a:b3:51:7a:
17:50:f7:e6:31:6d:f9:d1:5c:ff:95:c4:63:a7:e8:84:04:17:
eb:89:47:64:3e:fe:c1:7d:ab:52:9d:6e:79:1b:0d:87:a5:77:
4e:21:6c:d6:26:b5:e9:2d:5e:ae:95:5f:86:86:13:57:22:67:
a7:4f:99:dc:51:49:40:5c:cf:4b:d3:d0:de:4e:63:e1:63:57:
fe:1a:c7:31:e1:4f:8d:c8:c2:a7:87:e8:53:66:6f:15:40:52:
01:55:ee:fd:2f:56:11:f7:1e:69:b6:52:e9:96:fe:8b:06:52:
1e:2c:0e:8a:9f:f7:25:72:64:a5:a9:ce:82:51:6b:ca:9b:7c:
24:b7:b6:87:e8:cf:04:a8:b3:95:8a:86:48:d6:e2:66:7d:5a:
83:8d:91:48:85:c9:16:86:01:4d:be:6f:04:49:db:b7:b2:22:
dd:b3:23:f3:f2:34:b7:9c:75:65:98:a6:0d:64:92:ad:54:49:
cf:3a:9e:da:9b:ee:e9:76:e9:50:3e:c9:ce:35:de:69:d5:64:
23:c0:0f:96:58:31:e4:5b:48:a7:26:76:5b:86:bd:13:cb:f4:
92:59:ad:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:13 2026 by rpki-client