Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: DIrUxAt/EU/H25bZpT4a2PU2RZS+2RwHyKnhMYxaiEQ=
Subject key identifier: C5:77:A1:A9:2A:6D:C6:F1:CA:99:C1:8F:A8:62:C8:1D:DA:4A:06:C5
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 019D38660EBE582000FDE8CB0F1D6CC1563C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 18A0
Signing time: Sun 29 Mar 2026 07:01:45 +0000
Manifest this update: Sun 29 Mar 2026 07:01:45 +0000
Manifest next update: Mon 30 Mar 2026 07:01:45 +0000
Files and hashes: 1: C53oCg7kRoBXocgajR_ZpGWJqn4.roa (hash: PkakGt0bbQY/2tn/r6YJVwwmAKETiXnq03+IjFLAZQs=)
2: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: DnJ48gGTGde0MCHdPwvSSt4+9gCAVPpCMUDtlHGIOxE=)
3: SNyntTwsIIpefS6otR0nRSZTl0M.roa (hash: 7Q0juJOhLraTf25d8amnxUBMIjfjOKD/x6SVvjGWFnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0e:be:58:20:00:fd:e8:cb:0f:1d:6c:c1:56:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Mar 29 07:01:45 2026 GMT
Not After : Mar 30 07:01:45 2026 GMT
Subject: CN=c577a1a92a6dc6f1ca99c18fa862c81dda4a06c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:9b:d6:f5:e8:1d:65:08:73:c8:c5:2e:e3:
05:f5:2a:b9:24:8d:ae:3d:10:f9:d5:db:95:70:ef:
a7:5e:a7:70:6c:b1:67:fb:96:40:46:ab:df:d8:ab:
4a:0d:ee:e3:3a:e0:6b:ca:8e:59:2b:c7:0f:c2:8b:
75:e4:41:82:e4:d1:5d:d1:62:6b:07:fe:8b:23:dd:
8e:1f:42:95:ee:0a:2d:c4:34:ef:48:e8:8c:83:2e:
5e:e3:42:b9:3e:8d:67:dc:5a:79:a4:92:60:91:03:
6c:1a:70:6c:f0:d4:8d:2e:6c:21:f5:36:17:73:94:
e5:2e:2c:1a:0d:66:d4:66:e5:25:3e:80:86:d2:49:
3a:6d:6d:90:e4:0a:fc:1a:3a:7a:82:ee:30:ad:c4:
24:cb:a9:a4:ce:d0:0e:a8:f7:54:5e:85:aa:a2:c5:
ed:f8:15:e3:eb:ad:a4:93:a2:10:88:23:af:ca:4d:
3c:b4:6c:df:23:e4:86:61:38:71:80:02:b6:43:89:
0a:f9:92:9f:0d:11:c9:71:4a:85:69:cb:36:dd:16:
14:f2:d3:1d:79:db:d5:e8:70:c2:8c:db:95:bb:a9:
8a:d2:33:d0:47:b5:64:4c:da:4a:19:d0:41:5b:1a:
42:73:3a:7d:a5:f8:3d:f3:46:ad:37:7c:66:2a:64:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:A1:A9:2A:6D:C6:F1:CA:99:C1:8F:A8:62:C8:1D:DA:4A:06:C5
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ee:32:90:42:0b:8d:7e:3b:37:88:f3:d8:10:ce:d7:1b:41:
47:48:85:4f:16:a3:74:56:46:1e:81:17:a1:4d:c4:db:f1:b8:
86:3e:e3:af:ba:50:c6:8a:8f:4a:7f:a7:25:5e:b1:69:e4:2d:
09:be:17:71:e5:c2:81:46:77:10:34:53:e9:ee:92:20:1d:f2:
88:4b:75:1d:1a:97:34:ed:4d:c1:6f:ef:e3:46:09:1e:95:71:
4f:31:0a:49:2d:87:0e:54:87:a6:3e:95:f4:5e:6f:ec:b0:6e:
cc:58:19:51:bc:5b:74:d8:1a:b6:48:a2:ac:46:25:31:06:a9:
14:17:1d:0d:8e:89:8c:99:87:2e:da:42:25:be:89:72:ed:72:
68:5b:b0:47:f3:bb:38:38:f4:02:29:fb:68:a9:89:d2:41:de:
87:19:aa:ad:f3:23:5c:ac:bb:41:64:f0:23:af:7d:82:db:11:
9b:f5:79:8d:6a:41:18:89:de:fd:37:cd:68:0e:62:f4:89:01:
af:ca:ff:d5:26:b0:09:54:d1:d5:00:1e:5a:ea:bd:39:1a:ac:
5a:1e:14:b5:a6:ff:22:03:0a:fe:62:15:a0:f9:12:d1:be:73:
ba:36:28:5c:8b:f9:70:26:74:4a:39:0f:87:01:18:2d:b5:6a:
68:58:dc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:19 2026 by rpki-client