Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.mft
File: OJehKeNgcDqAL9KNkQv6hNowKaA.mft (raw, json)
Hash identifier: Yz/k17V2+MxmQT0C4MQRG8jMI84s2kyjdXWHigd7M+A=
Subject key identifier: 5A:A9:E2:2B:2F:A5:A0:09:AB:E0:02:F2:86:F9:9A:BE:F0:0F:5A:FF
Authority key identifier: 38:97:A1:29:E3:60:70:3A:80:2F:D2:8D:91:0B:FA:84:DA:30:29:A0
Certificate issuer: /CN=3897a129e360703a802fd28d910bfa84da3029a0
Certificate serial: 019D3752E0D20DC0231AB8713094D0AD2D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJehKeNgcDqAL9KNkQv6hNowKaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.mft
Manifest number: 16
Signing time: Sun 29 Mar 2026 02:01:11 +0000
Manifest this update: Sun 29 Mar 2026 02:01:11 +0000
Manifest next update: Mon 30 Mar 2026 02:01:11 +0000
Files and hashes: 1: 9J4WhJU8xeDrSSOcg_wxEbasVbk.roa (hash: BemndY3hRh+XxhZrf5Kkuo7O8IjD5PRmJSBt4L95bOo=)
2: OJehKeNgcDqAL9KNkQv6hNowKaA.crl (hash: 2fOh99fbojpfZtdkYekuvC/arLPlHb4YUhWuSLFvnGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJehKeNgcDqAL9KNkQv6hNowKaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e0:d2:0d:c0:23:1a:b8:71:30:94:d0:ad:2d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3897a129e360703a802fd28d910bfa84da3029a0
Validity
Not Before: Mar 29 02:01:11 2026 GMT
Not After : Mar 30 02:01:11 2026 GMT
Subject: CN=5aa9e22b2fa5a009abe002f286f99abef00f5aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:bf:6c:17:7d:63:8b:a3:79:0b:5c:42:80:
04:3b:1e:de:a7:52:bf:f6:b1:d5:2c:b1:e4:6b:39:
fe:e1:f9:ed:19:f2:3b:34:f0:2d:76:bf:66:c5:22:
3d:a1:8e:23:42:08:69:d1:bc:e7:a1:48:cb:cd:e9:
b9:05:7e:f7:a1:f5:35:37:1c:63:e9:81:40:8f:d7:
d6:2c:9a:55:33:46:a3:c3:39:f9:a2:65:55:85:b9:
98:4f:b6:58:dc:2b:8d:aa:37:9c:fc:26:cc:9e:18:
13:8d:49:a3:ec:25:cb:d6:a3:7d:9e:2f:b8:62:0b:
c6:c3:64:c1:3e:1b:01:5b:8d:cb:a7:af:13:c2:e1:
96:6d:50:4d:5a:11:ba:d8:80:0d:b9:17:54:43:23:
5a:43:41:88:6e:97:89:b5:76:f1:1b:e8:55:df:d4:
7b:de:e4:dc:35:47:de:51:95:8e:12:1c:74:d3:93:
b1:ed:df:78:e4:42:e7:cb:b4:44:55:8b:0b:96:5d:
c9:74:b0:bd:82:ea:00:c5:1f:2d:b8:80:14:b5:86:
68:5c:40:74:ef:a7:ab:af:96:3b:d3:b0:e4:c1:f0:
99:74:69:b2:c2:30:08:9d:8f:cb:82:0f:01:99:02:
a8:c2:ca:9b:14:45:f6:48:8b:1d:c6:35:7f:3a:ae:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A9:E2:2B:2F:A5:A0:09:AB:E0:02:F2:86:F9:9A:BE:F0:0F:5A:FF
X509v3 Authority Key Identifier:
keyid:38:97:A1:29:E3:60:70:3A:80:2F:D2:8D:91:0B:FA:84:DA:30:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJehKeNgcDqAL9KNkQv6hNowKaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/679f98-6df6-4cc0-bd2a-f543d226ec84/1/OJehKeNgcDqAL9KNkQv6hNowKaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c8:88:6d:25:b7:3f:93:4f:76:c6:bf:fd:88:12:ee:01:28:
12:56:85:90:1c:51:9e:f9:fd:6b:9a:28:8e:46:78:07:a8:25:
06:b3:1e:b9:68:ee:a7:3f:64:f1:ca:13:2f:15:3b:ce:8b:6e:
ac:20:be:58:4a:ed:26:ef:9e:d8:cd:3f:cc:c5:34:47:fe:a1:
46:d7:c1:5d:6e:5e:ff:43:a6:34:a7:67:4c:e7:e0:29:ca:11:
2b:c9:1c:f4:bc:02:86:77:01:8e:6e:ce:0e:e8:27:bb:26:4a:
61:64:3c:cc:95:ef:b2:4d:ea:ba:a9:51:d1:6d:16:df:fc:1b:
e2:2a:17:19:85:2d:e6:43:43:b8:47:a8:fe:dc:47:88:7b:dc:
b5:44:21:81:10:1e:1d:c2:fa:31:6d:1c:91:2a:77:33:66:d9:
d9:bb:52:c1:be:f5:1a:48:46:20:30:ca:3f:b7:f1:5f:3d:5f:
d9:b4:28:b2:70:e5:f1:5d:44:da:19:5a:4f:41:48:30:a8:f0:
7f:21:26:6f:ef:d0:70:f5:6e:ee:f0:66:bf:d4:98:a9:0a:ed:
df:e0:d1:53:bd:0c:d3:3e:bb:58:33:25:79:b0:2e:57:ac:e4:
9b:bb:f9:41:56:84:53:72:29:8a:50:ff:95:e8:1b:a4:32:44:
a4:24:fd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:10 2026 by rpki-client