Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
File: oikngd9NLEc3PD_fY_u8mSdL2ds.mft (raw, json)
Hash identifier: b6Hlc+aS9I7h9brmh4+of+/vGEr7Ak/ha6gizI7UHuE=
Subject key identifier: 23:79:DE:71:E1:26:2E:45:AF:20:56:44:5A:3F:D6:E5:33:8F:AF:D0
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 019CC33CC80BD247148C6FE769AE6E24941E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
Manifest number: 17
Signing time: Fri 06 Mar 2026 13:01:06 +0000
Manifest this update: Fri 06 Mar 2026 13:01:06 +0000
Manifest next update: Sat 07 Mar 2026 13:01:06 +0000
Files and hashes: 1: 8IaNzILRluMfhJGh9Sp2iK5EyEM.roa (hash: 3vEUGcIacC6NznoAP1opqDvHOyB7wnzG3LAD/dsWwPU=)
2: gD1shI7_ncKmAHHzuQDRToVphgs.roa (hash: b21XJdYw0N5m8mPRwkbYiHzi3HRna1r0I2/FnRhaR68=)
3: oikngd9NLEc3PD_fY_u8mSdL2ds.crl (hash: V6kCr6C025L4CZVJGFT0uzFvyRZcuzJjGTzV8RzSuRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:3c:c8:0b:d2:47:14:8c:6f:e7:69:ae:6e:24:94:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: Mar 6 13:01:06 2026 GMT
Not After : Mar 7 13:01:06 2026 GMT
Subject: CN=2379de71e1262e45af2056445a3fd6e5338fafd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:47:13:26:45:53:26:04:5f:c4:ca:12:f6:bc:
9c:64:1c:7e:29:8d:91:29:e0:4d:6b:54:5f:06:9c:
85:bc:17:cf:3b:0e:de:40:5a:1b:80:f4:8b:84:53:
25:e0:ca:42:1a:b2:b9:5a:cf:1a:83:62:9f:2b:ee:
cb:72:da:d5:37:f4:3c:9f:af:7b:bf:30:86:ed:11:
bf:fd:e4:e2:d6:e1:cd:75:16:ab:1d:fe:b1:88:48:
15:92:2c:9b:50:8c:a0:d1:81:67:dd:93:a2:97:5e:
b8:e7:88:aa:8a:43:0f:0f:b1:a3:91:37:03:d2:f0:
b0:b4:52:83:82:b7:44:2d:b2:da:34:eb:20:32:ea:
f7:59:a4:89:02:d0:b2:ea:f1:93:fd:88:1a:69:4d:
d4:b8:26:28:7d:6a:dd:db:92:eb:41:74:d0:b4:fb:
ea:ed:d0:5b:c1:35:7d:fd:9b:47:19:ad:81:4b:4f:
77:41:1d:41:e5:f9:b4:7d:2b:62:92:69:2a:85:39:
3d:f9:ab:ff:ca:60:6c:78:75:29:85:59:9e:52:f2:
b4:60:01:4b:5e:55:65:11:d0:87:94:5e:92:b4:f4:
b3:d2:23:6b:a2:c3:58:30:f9:69:aa:22:34:c0:b7:
8c:25:35:51:65:c1:cf:0b:38:58:59:cb:ca:7b:06:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:79:DE:71:E1:26:2E:45:AF:20:56:44:5A:3F:D6:E5:33:8F:AF:D0
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7f:73:62:f1:f5:f0:13:22:f7:f9:a6:af:a2:9f:2f:09:fe:
2f:3c:9e:ca:c3:a8:ff:fc:b3:fb:50:48:88:1e:7b:08:99:38:
21:3f:8d:67:3e:f8:16:1f:09:20:02:1b:c2:18:21:9e:e6:8e:
32:bd:d8:4e:f7:4a:da:85:21:c9:69:01:92:bf:b3:b7:42:37:
a8:41:91:ab:d2:90:66:ee:0f:84:81:cb:5d:70:d6:67:05:54:
0f:75:07:a1:64:4c:0a:88:5e:e8:c9:fc:3d:6b:24:a0:38:0b:
a4:00:c4:07:3f:33:15:88:1c:bd:b1:87:bb:b8:75:48:f1:96:
85:af:5c:e0:42:d2:22:42:c6:9d:59:e3:06:42:12:6b:04:e6:
78:a5:e8:01:c2:c1:8c:39:38:e6:f5:59:ee:51:41:e5:ae:ff:
ea:be:ce:d7:47:5f:f4:d7:72:d9:4a:c4:7b:df:8b:f0:0a:9c:
d8:48:02:6a:f0:dd:3e:9d:ba:25:91:c1:ce:3b:f6:8a:79:7c:
76:b2:11:72:b5:24:bd:53:eb:8b:78:3d:b5:3a:29:66:fa:86:
87:3c:f6:10:0e:b2:e5:55:cb:af:d3:b7:99:34:f6:04:df:52:
c8:cf:67:d5:5e:09:5d:e6:00:b8:1b:1a:6e:43:1f:e5:23:08:
ff:89:97:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 16:59:39 2026 by rpki-client