Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
File: oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json)
Hash identifier: p7cS+PJlOThAZVXcZkaLqDFphpxAqswQgbwQN27+Yrs=
Subject key identifier: 3D:78:4D:E7:EC:B0:85:D7:5F:63:B7:B7:14:09:AF:50:C5:40:04:4D
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial: 019D382E78E465BD2847D52F9615F45F89E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 06:01:02 +0000
Manifest this update: Sun 29 Mar 2026 06:01:02 +0000
Manifest next update: Mon 30 Mar 2026 06:01:02 +0000
Files and hashes: 1: MkHKmr1CCJc2BcOqw-KghmADjCc.roa (hash: mZUESDCQ7pThBi0ruZGxU2DBV/MKZ2Q9xt3I5e6sTr0=)
2: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: mNztSLWJ5HVwatyqJZLpcBF7g5ophsbx2nlhhWKL470=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:78:e4:65:bd:28:47:d5:2f:96:15:f4:5f:89:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Validity
Not Before: Mar 29 06:01:02 2026 GMT
Not After : Mar 30 06:01:02 2026 GMT
Subject: CN=3d784de7ecb085d75f63b7b71409af50c540044d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:89:be:2b:f2:b5:b7:08:c7:9e:f9:63:46:
aa:f0:be:83:14:60:69:1f:4a:9e:2a:c9:13:92:47:
25:ee:17:47:3f:90:96:e4:e2:8a:98:14:c5:d4:c6:
d6:3a:9e:8c:6a:26:39:15:8a:f3:54:01:a2:82:31:
38:4d:60:42:35:42:1f:b5:51:0a:0d:ab:cb:1a:54:
ff:7d:33:e6:64:86:a9:9b:75:c1:ad:35:a0:bd:8a:
c5:32:57:33:ce:71:59:cb:7d:65:33:88:84:b9:ed:
03:73:2d:e8:b4:36:05:fc:2a:d0:d9:cb:e2:6d:b5:
5b:ae:aa:0f:d4:52:27:46:60:e1:c2:5f:97:a0:4e:
fd:59:58:c2:8e:3e:0c:c3:f5:0c:2c:cd:ce:e2:4f:
2d:fd:25:46:f4:96:a9:17:55:49:7c:68:33:be:84:
96:30:57:77:dd:2e:4a:9e:8e:08:84:25:cf:1e:54:
5c:a1:17:43:58:68:a2:d0:b8:b5:8f:92:ae:f3:c0:
eb:15:d2:e1:7c:ce:1c:08:ab:f3:cd:98:30:4b:bc:
f0:5b:95:0b:15:e9:de:f4:38:20:e3:ef:a1:68:0a:
0c:3e:3e:60:95:d7:5a:6b:e0:f6:46:be:3d:98:58:
f0:fa:86:1a:81:30:8f:f8:0c:53:82:2e:2e:aa:1d:
51:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:78:4D:E7:EC:B0:85:D7:5F:63:B7:B7:14:09:AF:50:C5:40:04:4D
X509v3 Authority Key Identifier:
keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8a:a1:f5:8a:68:4d:27:43:53:e7:6f:6d:0b:8e:9a:3a:cd:
26:dc:d7:2f:19:33:7c:d9:1d:18:55:92:c0:df:cc:5a:45:2e:
19:73:ca:4e:92:b3:1b:14:53:1f:f5:ec:cb:25:1c:29:1f:b2:
cd:83:95:10:1e:cf:b4:1d:51:0e:28:a3:bc:3c:4c:47:fc:27:
07:2b:a3:34:78:67:97:4c:44:4d:37:81:6b:d4:d7:c3:fc:a7:
b1:52:e1:d2:48:8d:e4:72:f2:a9:22:ef:10:b5:af:88:52:d9:
61:3b:92:76:db:8e:a4:e2:c7:66:99:41:bc:4c:16:26:9d:50:
76:6d:7b:4d:eb:3f:fa:f5:e8:58:df:d6:d3:4c:8f:2e:f6:6c:
04:2c:7c:0b:db:9a:bf:c7:e9:4b:3a:1a:6c:5c:dd:be:a2:b8:
e7:45:95:c8:93:1c:26:98:17:31:f0:37:cb:55:97:40:32:7b:
fb:63:0b:80:81:3b:54:26:ae:42:07:5e:a3:97:84:9c:c2:41:
5c:55:57:a4:0e:37:d1:a5:f5:a2:e1:15:9c:75:15:32:51:85:
e3:10:5d:8b:2a:1f:92:6e:9a:7d:3e:b4:0c:b8:3f:3c:26:97:
84:4b:90:db:6a:ab:60:1c:26:d7:d0:1d:1f:90:14:28:b2:3a:
a4:ee:db:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:19 2026 by rpki-client