Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
File: OACZqBs0b5q8ryYFb1t3CU0c8RM.mft (raw, json)
Hash identifier: XNhWHxGhWhmNrTVRjWJnn+vfe2zi5rQP5DwIFL7fo8c=
Subject key identifier: 7A:56:36:B0:4D:E3:B7:A1:1E:C2:6E:16:44:CD:4E:2C:72:52:33:38
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 019D3A544A3F3C82912D5BB78CA247B445E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 16:01:35 +0000
Manifest this update: Sun 29 Mar 2026 16:01:35 +0000
Manifest next update: Mon 30 Mar 2026 16:01:35 +0000
Files and hashes: 1: 5tf62tGZz7nxnApGHs0XPt8oyEo.roa (hash: eqObETU4MUet/YxGyvd+4bjlEhpIkWmlGdSy4IzjRT0=)
2: C4lzeE9s0JPh3LMFogAb2-unpfM.roa (hash: B/VA7Y5H146Nk4o0VlZHFllZAXs0gNzPmZMsk3LGaPk=)
3: GlGwuQ4tVBcVbzdxZ764xAH4ZKY.roa (hash: dAsL5YC+dtQ5UOuP3k5Dc/1X4NRNua75JEno17YoMPc=)
4: MhSY36OZkDXTKKOaDPZo_gxxyys.roa (hash: 2VWhIerfpwbk0gwrISpBPr4SWZ289fTqKRc3I0+Rsfg=)
5: OACZqBs0b5q8ryYFb1t3CU0c8RM.crl (hash: ZgcyF66T6zxtVP1c+VA7Kttey5yKte7R0aOB75kQgoM=)
6: SV9q8qOenCpWfyZ_KmzmoZ8gOso.roa (hash: 316dq0EbdTMXN9J+sZt1LaGvCQCGOGhyEJsLNYpVENg=)
7: Un1O1eVRsl-RNFGZVC7Hh1zlUso.roa (hash: wb6n3U2bPJOBiqYHITV1Aqlnrh4S2E/QbN0YryOpk2o=)
8: h2NmHgEuIROZq_hEdlknexmBTGM.roa (hash: 7SwAGH9Cu/tcgfRdpv3e3i4Xnp328jS2BOR70XX2pq0=)
9: n6AwAFReNaZdbkfki7LETtgHQPk.roa (hash: 1R1A1mLyenvEeIw8x55MsxtBChYHFqi/CKG9tPv+lwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:4a:3f:3c:82:91:2d:5b:b7:8c:a2:47:b4:45:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Mar 29 16:01:35 2026 GMT
Not After : Mar 30 16:01:35 2026 GMT
Subject: CN=7a5636b04de3b7a11ec26e1644cd4e2c72523338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8a:0c:8c:89:87:68:5d:c1:c8:92:8e:f0:c8:
27:95:f6:b9:a3:40:ac:5b:cd:38:7a:22:79:5d:65:
df:7b:e7:c3:06:ba:4c:58:94:74:72:ba:c0:8e:93:
0c:05:56:3d:f6:da:16:d5:35:40:01:01:b6:e4:52:
e4:84:2b:22:b1:c6:6e:be:6d:a1:a1:ac:5f:5d:a3:
00:41:36:94:bb:a8:69:18:39:36:29:4b:ea:f0:fd:
a1:d3:0c:d5:1f:51:c8:8a:bb:c0:c7:3d:38:f9:03:
c4:64:0c:7e:eb:32:89:ca:d9:72:47:24:43:47:ae:
e9:c4:8d:77:2a:86:7e:f0:e1:28:e4:da:43:26:6a:
3a:0a:14:77:b5:b6:4d:13:d0:32:77:55:98:e7:bd:
ce:e0:4e:b6:55:1b:7c:00:fc:3b:a3:e2:c8:3a:16:
cb:99:d2:ce:4c:8a:00:68:55:e7:ed:21:69:f3:d6:
e2:a1:dd:91:27:a0:89:cb:70:3b:2d:5c:8a:b1:15:
e6:f7:81:6c:bb:b2:43:f2:f3:92:2c:c3:c7:b0:b1:
f9:0d:3b:c1:d2:15:b0:f4:52:6d:df:ef:ee:1e:a2:
74:b0:37:41:9d:79:cf:c4:4a:b7:2e:2b:f0:90:b6:
22:c9:41:2e:15:df:7a:10:37:7e:74:c0:8b:28:41:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:56:36:B0:4D:E3:B7:A1:1E:C2:6E:16:44:CD:4E:2C:72:52:33:38
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1f:0d:07:98:3b:f3:c1:c2:7c:b0:cb:60:4c:a0:97:f2:17:
57:b4:07:0b:ad:d7:73:db:06:50:0d:b1:e1:f7:6d:3e:41:62:
c8:bb:56:e9:eb:85:f2:ca:54:d4:4c:f1:63:d8:2d:2a:6f:e7:
ef:ed:5d:75:24:ea:5d:78:7b:a2:c6:a8:12:f9:c8:cc:ee:9b:
08:60:59:7a:a3:a5:fe:0e:5b:90:96:11:ed:f6:57:cc:d7:3a:
ad:34:8b:8e:ae:31:e5:f4:a0:80:de:12:f2:32:59:81:15:29:
d0:5b:4d:92:a8:04:f7:28:e3:8c:fd:ae:24:d2:0c:79:6a:6b:
46:f1:04:30:a0:b5:26:7a:5e:54:40:8e:fc:05:5e:37:d6:2f:
c5:67:e0:25:f0:14:65:b3:e8:74:d6:bf:83:25:e8:f5:59:fa:
a3:d3:cc:a6:36:a6:9b:10:e7:ba:63:1b:6c:4d:fc:49:49:5a:
e3:7f:b3:2e:6b:ab:38:11:96:dd:3b:bd:f3:1a:3c:23:a6:b3:
45:df:55:ca:17:6e:43:d9:70:18:9f:b2:33:1f:a4:2d:95:28:
32:e1:0a:1e:c4:30:8d:25:3e:7e:8b:95:b9:e5:82:1a:6e:9d:
89:48:26:f8:02:d3:93:06:b1:2b:b0:65:c8:d6:87:22:53:c3:
cd:70:52:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:26:04 2026 by rpki-client