Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
File: OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft (raw, json)
Hash identifier: 1Arv4tg9pdJLC9NEkF74z54t7we1IRX86rxg+t2fSqk=
Subject key identifier: 3D:00:DF:58:39:96:A6:60:03:34:E2:2F:6E:A2:89:1A:8D:01:5F:CF
Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98
Certificate serial: 019D3977C82BD28587AAA46C82C49C274916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
Manifest number: 1524
Signing time: Sun 29 Mar 2026 12:00:44 +0000
Manifest this update: Sun 29 Mar 2026 12:00:44 +0000
Manifest next update: Mon 30 Mar 2026 12:00:44 +0000
Files and hashes: 1: 4l0Qm7hiBf49LBhzNTcelNcpnnQ.roa (hash: fwyySipc+KRVGtJdEtG/OeuQDdMJxdBVXvf+3AzPh0w=)
2: OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl (hash: jluesg3JUw6awKpJptapGF7JtfYs1wxIMkm+xbZmc78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c8:2b:d2:85:87:aa:a4:6c:82:c4:9c:27:49:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39abeb591716e908345d329fffd3700352315b98
Validity
Not Before: Mar 29 12:00:44 2026 GMT
Not After : Mar 30 12:00:44 2026 GMT
Subject: CN=3d00df583996a6600334e22f6ea2891a8d015fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:24:54:01:ed:35:c5:c9:fe:50:91:c4:dd:
ad:2f:62:aa:b5:3d:7b:56:4d:fb:6f:e3:8f:b0:fd:
bc:82:2c:41:a2:fe:c1:a3:1c:16:ae:23:de:9a:3e:
1c:0a:78:d1:7b:31:00:a6:60:58:71:b7:64:eb:ca:
81:82:e4:52:bd:c3:3a:9e:ba:82:ed:12:26:fa:ff:
c7:35:6a:ac:83:5f:6c:20:04:2c:cf:46:ed:43:5d:
7b:0f:3d:d1:1c:fd:1c:79:5c:f5:20:d6:8e:42:93:
7c:69:8c:65:de:28:67:ac:15:39:42:b4:cb:ba:8a:
6a:f9:2b:c7:c5:cc:16:04:17:f3:dd:89:10:79:a1:
54:21:87:69:c4:c9:fa:d3:1e:97:bb:86:ea:05:86:
17:f3:30:d6:c6:a8:67:93:33:d1:8f:a9:7c:08:70:
58:ca:59:fa:68:99:47:2b:ec:2d:e1:44:f5:4c:61:
90:4e:f0:91:02:11:61:4c:62:c1:29:98:50:a3:6c:
0d:23:06:ef:56:c8:7f:d0:69:41:87:20:f4:31:31:
33:eb:32:21:fb:3c:49:7e:37:f9:44:2e:76:91:c7:
67:2d:92:90:2c:5d:80:a8:45:7b:76:cc:3b:8e:1a:
ec:f6:36:98:bf:76:23:c4:8c:89:b1:5d:e1:52:15:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:DF:58:39:96:A6:60:03:34:E2:2F:6E:A2:89:1A:8D:01:5F:CF
X509v3 Authority Key Identifier:
keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c5:70:f5:7f:52:c1:cc:b3:00:44:7c:15:91:f9:47:04:e6:
c3:0e:9f:12:4d:0a:4b:31:29:8b:04:c5:1e:45:3b:a9:a4:8a:
eb:01:55:e3:52:e8:82:53:ab:8b:03:90:2f:6c:8a:8f:69:6a:
bc:f2:24:40:fe:71:8f:8d:38:d8:a0:23:c2:5d:c3:ab:37:bf:
95:b4:c5:bf:61:71:1a:27:64:10:c2:d2:93:7b:44:8a:98:aa:
f5:0c:b6:41:e1:7e:7b:bb:88:29:4e:61:49:4b:7a:63:40:f6:
56:79:ee:e0:6d:7c:e1:69:e9:62:ea:62:c7:1c:af:17:57:c8:
be:81:82:26:01:6f:9b:00:f1:b7:1b:36:8b:50:0b:1d:a3:b3:
93:8b:7b:cb:79:a0:fb:ee:e5:1e:14:bc:1d:9c:99:f1:6c:b6:
4e:95:d8:3d:b8:14:11:77:6f:95:c5:f4:57:64:f9:cc:17:74:
83:77:ac:93:0a:0f:3f:02:c8:2f:01:cc:80:ac:68:d5:77:12:
11:d2:c3:c7:6a:f7:69:c3:83:87:e1:18:f1:a6:89:87:44:e5:
65:83:18:4f:cc:e1:9f:39:21:22:07:f4:10:6b:27:fb:73:3e:
39:6f:be:1c:16:c4:15:20:05:bb:2e:60:6f:15:34:1a:3b:99:
3c:ee:09:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:14 2026 by rpki-client