Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
File: OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft (raw, json)
Hash identifier: bJAP/N43fPSkIZNHA1Lpzv4XjLMAewEDNq394m6jqDE=
Subject key identifier: F3:9D:48:E5:72:4E:AE:34:F6:49:E9:45:D0:13:9E:A7:21:1D:FC:8D
Authority key identifier: 39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
Certificate issuer: /CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Certificate serial: 019D390A35F8250DBD861D4F2AAAC15716AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:01:03 +0000
Manifest this update: Sun 29 Mar 2026 10:01:03 +0000
Manifest next update: Mon 30 Mar 2026 10:01:03 +0000
Files and hashes: 1: OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl (hash: RCHes8WwuGRRo5TjcuDccrYkD6PK1xtqt/Idt1RtkvI=)
2: YPDieqd7uprhg0mt2VMKKGKhE84.roa (hash: POXauAFc4bLGuqw0rVwSSwjNmzs6KXUe2cK744fFvLA=)
3: nQXtvYrXtPyWo8wdiVt03n7okKI.roa (hash: +Td1mWZIUIswdEduLgPTGcO3qf/mkOmktChvzCE5tck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:35:f8:25:0d:bd:86:1d:4f:2a:aa:c1:57:16:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Validity
Not Before: Mar 29 10:01:03 2026 GMT
Not After : Mar 30 10:01:03 2026 GMT
Subject: CN=f39d48e5724eae34f649e945d0139ea7211dfc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ea:31:c6:dd:fc:39:36:a9:34:c7:4b:28:48:
d0:79:fc:c6:25:8c:51:7a:ca:24:55:44:8c:06:ae:
7c:d3:df:a8:aa:01:10:b8:5e:67:ca:a0:1e:7e:d2:
22:dc:66:7a:17:f1:a1:f1:1e:b2:95:06:8e:3d:f7:
29:ac:e7:6b:63:04:e9:60:03:ea:00:8f:06:b0:cd:
57:c5:14:cd:09:5d:3d:5c:34:35:a7:fe:ec:da:23:
1e:2c:ef:fc:5d:91:7e:3e:86:b6:5b:99:92:4b:7f:
e1:35:eb:3f:8d:c0:a8:c6:bd:97:87:49:85:31:bb:
90:37:5a:f6:09:f9:d8:e2:f0:f2:2d:da:bc:8a:c8:
86:09:46:2f:17:6d:3d:05:d9:57:bb:85:a4:68:ce:
f9:0d:ea:43:0b:3d:6c:30:3f:39:18:ad:fe:66:83:
de:7f:d9:69:a7:ed:d2:70:84:5e:a7:8c:bc:bd:00:
bf:a8:8a:c8:1c:22:50:db:3c:2b:03:d6:37:b1:5f:
c3:4b:c0:a1:05:79:55:bf:21:1a:43:fd:94:01:c1:
c5:96:1d:e6:0a:b8:83:86:f7:80:11:dc:88:9a:1b:
6d:26:57:53:bf:d0:9c:f1:f5:69:62:2f:86:a3:03:
de:20:c3:cb:eb:7c:d7:c4:71:8f:1e:52:41:c3:bc:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9D:48:E5:72:4E:AE:34:F6:49:E9:45:D0:13:9E:A7:21:1D:FC:8D
X509v3 Authority Key Identifier:
keyid:39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:21:27:e5:f2:7b:f8:f9:d4:42:cc:10:7a:e3:94:ef:ab:01:
9c:0b:79:f4:f2:b9:32:66:de:a8:da:f6:4c:a1:84:3f:81:4b:
d2:8b:f3:83:56:42:30:e1:50:7c:99:9f:6d:24:c3:54:12:f8:
50:d3:e7:ed:c8:c1:72:5b:16:4b:72:e0:87:27:35:c8:39:d1:
f1:2b:a3:d4:f8:9d:93:f3:09:cb:9f:ce:54:41:10:b7:8c:50:
db:c2:d5:06:c9:7d:92:38:fa:1f:cd:fd:50:cd:19:b1:70:df:
df:ec:00:39:83:b2:23:0b:b5:49:1a:95:d5:78:64:db:6a:59:
34:98:dd:bd:8f:3e:e6:ce:ba:19:af:b7:e8:f7:10:14:5d:ec:
3c:40:1a:db:40:af:0b:a8:16:71:e3:25:82:fe:c3:b3:79:5d:
0f:60:87:df:e8:83:b0:54:40:11:43:38:34:46:aa:ab:c8:45:
a5:93:0f:5e:5b:56:9a:5a:7c:c1:21:4c:22:6d:1b:c3:7a:dc:
fd:7e:5f:87:c6:d1:61:74:6e:82:5b:35:54:0f:ad:a1:0d:9f:
c0:c3:f5:0f:4d:9e:b7:4c:38:69:69:3a:2a:5c:53:a1:c6:73:
4e:fe:47:89:1f:96:12:9a:c6:8c:d0:f5:41:39:ec:12:df:04:
23:31:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:16 2026 by rpki-client