Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: aONe2fIq1RkCsf9pfd/3JkyC2COwBTm2cHkTLgllLVY=
Subject key identifier: FC:F3:F8:2B:84:CF:60:73:DF:EE:AE:E7:10:05:42:32:3C:BD:2F:B2
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 019D058B62C518208D343D48886488542A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 14A9
Signing time: Thu 19 Mar 2026 10:01:53 +0000
Manifest this update: Thu 19 Mar 2026 10:01:53 +0000
Manifest next update: Fri 20 Mar 2026 10:01:53 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: W+TxS0AsdNWC93UAxHPdcy0j+Qw2WSvZjGQdBHUDoN0=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:8b:62:c5:18:20:8d:34:3d:48:88:64:88:54:2a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Mar 19 10:01:53 2026 GMT
Not After : Mar 20 10:01:53 2026 GMT
Subject: CN=fcf3f82b84cf6073dfeeaee7100542323cbd2fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:70:d9:d8:4d:a7:0f:ea:7d:3c:8e:9f:8c:
4a:42:45:43:e0:be:f6:ad:fd:22:b4:43:ce:42:18:
59:ec:22:82:9e:d3:e5:0b:b2:58:42:8f:ef:ce:2c:
ca:f0:91:08:13:71:7e:f5:2a:59:d7:a8:6f:f3:11:
0d:41:c7:25:5b:d5:c4:58:a1:db:19:1f:44:db:f4:
e0:6c:06:ca:32:3d:e5:e6:41:cf:e9:8a:e1:bc:08:
ca:8d:5a:f1:d0:3b:a1:55:de:1d:82:9d:7b:d0:10:
08:4b:c2:83:48:d7:e7:d7:4f:be:88:19:5d:7a:c9:
20:6b:c0:ce:d5:53:45:d6:46:89:db:03:a3:37:13:
f8:62:84:58:7d:55:c3:24:15:59:5f:59:7e:98:76:
ab:eb:a3:19:46:9b:5e:3d:ca:f5:37:2f:58:5f:98:
70:ee:e2:3e:c6:dd:5c:ce:2f:6c:c1:50:b3:2c:88:
45:d8:eb:e7:2e:ba:de:6d:99:67:f4:a6:e9:20:7e:
27:80:5b:99:d1:00:91:11:9e:4c:78:c4:43:fb:e8:
78:a4:51:67:e4:c0:bc:2a:3a:56:d1:47:35:91:21:
cb:e1:ad:88:10:63:4e:35:23:1d:47:ab:12:ce:39:
e5:01:65:ef:3c:84:49:5f:79:b9:cb:15:b4:85:4f:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F3:F8:2B:84:CF:60:73:DF:EE:AE:E7:10:05:42:32:3C:BD:2F:B2
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:34:c0:e4:77:85:de:c4:53:f2:8b:f0:88:a4:3c:99:9a:e1:
a9:c9:dc:fc:71:5d:c9:8e:3b:28:bd:ea:a2:9e:cd:31:c4:73:
58:09:07:e7:af:9f:46:30:53:3d:2f:61:71:8c:8c:1b:53:90:
1d:91:bd:ee:66:5b:ef:56:e9:fe:84:ab:9f:ae:4b:1f:fc:7f:
c3:c1:13:ff:aa:d7:63:14:8a:15:63:8e:06:3a:f2:0d:24:3b:
3c:ed:5f:39:59:1a:3b:a6:0a:d2:f8:81:eb:a1:40:56:70:08:
58:88:76:bd:13:e7:ed:dd:89:5b:53:19:bd:f1:01:de:8c:9a:
af:76:e2:07:30:8e:37:72:2a:04:f3:3c:77:b0:b5:16:c1:18:
a9:3a:d8:0c:a4:4f:c8:b9:ff:92:f1:e0:e1:8f:40:ff:7c:67:
64:c2:62:f4:20:88:c0:7c:82:cb:b1:3d:46:cd:32:87:e2:e6:
5f:e3:be:58:81:92:aa:7e:23:64:30:d9:2e:89:93:b9:bf:a3:
1a:9c:4c:27:92:f9:16:63:09:b5:53:8f:5f:46:83:ed:1b:63:
f1:7b:98:73:bd:3f:0d:6b:4c:88:83:81:ee:f3:c1:09:3f:b8:
93:f7:a1:ea:5f:87:77:5d:ec:59:9c:f4:8a:48:fc:35:10:e8:
8a:d8:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:07:17 2026 by rpki-client