Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
File: OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json)
Hash identifier: Xh9bbVSdX9nrBtyWOHciGmDgdazDUTZENRs7rLWrAaQ=
Subject key identifier: 52:5F:BF:33:51:97:CE:85:13:EF:B1:4C:89:B9:63:C5:64:F3:10:C8
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 019CE55AEFDC13D897475576B201706AAA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
Manifest number: 104F
Signing time: Fri 13 Mar 2026 04:01:07 +0000
Manifest this update: Fri 13 Mar 2026 04:01:07 +0000
Manifest next update: Sat 14 Mar 2026 04:01:07 +0000
Files and hashes: 1: 5ojvbfCctNCB5Gqhmzf0iwXXOEM.roa (hash: k8Uj++Nl/KE3zAMHJHLKpfjTAKVmdctYhbK1Afyv9Ns=)
2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: aJsXOifinl7m2S42DYYRutJwjiYv3qewusb2S5mQIbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:ef:dc:13:d8:97:47:55:76:b2:01:70:6a:aa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: Mar 13 04:01:07 2026 GMT
Not After : Mar 14 04:01:07 2026 GMT
Subject: CN=525fbf335197ce8513efb14c89b963c564f310c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:b3:57:91:c3:12:3b:a3:a0:7e:cf:27:5a:
70:89:69:4a:8d:e6:12:f7:41:b8:aa:55:53:f7:aa:
30:95:1e:4a:54:15:24:2e:53:7b:ac:aa:a1:5b:6a:
3b:86:f7:b6:91:80:b3:4f:9e:08:c4:5a:5b:c4:89:
6d:e6:cd:55:b6:bf:66:68:3b:26:65:fe:11:6c:b7:
20:3f:4c:8f:4c:71:b7:63:01:17:ce:0b:a2:83:66:
a2:69:57:1e:f2:85:e7:c8:8f:12:c4:99:7e:a6:eb:
a2:f4:06:7b:3b:b1:5d:a8:45:02:ec:47:1c:79:89:
e7:30:f2:95:d8:1a:3f:b8:5d:e7:c8:c5:7d:e4:34:
10:b1:7c:4a:1f:fa:25:31:b6:2e:77:df:a3:3d:e1:
bb:e1:e9:10:35:5a:ed:07:84:44:62:76:4e:69:ce:
99:fe:86:66:8e:03:0e:4b:50:a0:2e:e6:b7:9a:87:
65:6b:63:e3:87:26:2a:9d:3a:29:f4:1d:e7:77:38:
ee:31:b1:42:df:97:33:b5:59:92:1d:29:14:17:d7:
55:3a:b2:ed:99:3b:58:2f:0f:ba:70:58:f1:e4:2d:
57:74:44:a0:41:d0:9a:27:b5:4c:76:0f:d4:c7:6a:
e7:1b:8a:4e:61:b3:89:b5:73:2f:78:e1:40:ea:36:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5F:BF:33:51:97:CE:85:13:EF:B1:4C:89:B9:63:C5:64:F3:10:C8
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9d:e8:5f:fb:3c:4d:a8:59:3f:fa:07:59:94:7a:66:97:97:
58:6d:38:25:c7:96:3b:f2:b8:1d:8a:f4:47:e8:bd:c3:46:6a:
f9:d0:5b:5c:33:90:c3:44:e8:97:0c:b7:ce:7d:9d:b2:c2:b5:
b0:f8:e8:fa:da:1b:f9:d6:fc:4f:de:d5:d3:a3:d1:c7:d6:0f:
59:4d:b0:6b:04:9a:76:74:7f:92:e3:83:4e:db:de:4b:5c:f0:
a2:ba:25:1d:ec:3f:f6:dc:df:f9:2b:7d:8b:6a:a6:46:c4:d9:
a9:11:4c:0d:91:ee:5e:b3:9a:fb:3c:72:87:dc:88:de:3a:70:
95:8e:99:ee:4a:7b:4a:11:0f:20:b4:a0:1f:77:f6:4b:7c:eb:
d0:5b:03:ce:d6:76:c1:ae:ea:41:bf:25:22:92:35:fe:3d:50:
18:56:f9:33:82:b1:29:72:93:f6:b0:95:0f:dd:8a:d2:16:16:
56:fd:c8:b9:b5:c9:88:81:f7:97:e9:05:1f:c2:30:25:61:04:
30:f2:a1:19:53:2b:62:b4:c5:2d:81:f6:36:22:e3:a4:8a:f0:
7f:b9:8e:d5:0c:27:51:6a:ca:aa:fd:83:c5:0e:b4:1f:16:ee:
44:a6:52:d2:92:21:42:69:b7:f9:39:e7:72:93:a5:ee:0d:bd:
08:4a:34:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:53:01 2026 by rpki-client