Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File: oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier: S81SsM0xgbfc8nTKh5jzWcdPfz63qDkPvAmrOs9pnXQ=
Subject key identifier: B9:5F:AE:4E:3A:09:CC:FB:F5:00:CB:CA:EB:BC:7A:9B:35:BA:48:99
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 019D39AF4C4BB2575043AF54E3BC45ADFDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 13:01:22 +0000
Manifest this update: Sun 29 Mar 2026 13:01:22 +0000
Manifest next update: Mon 30 Mar 2026 13:01:22 +0000
Files and hashes: 1: 0Uqlzj0wBudtuwo65E7ecBxR-5I.roa (hash: 3nBce/u/p8RQlISZvZNTZJ4v/xHNCVwY/ApDTxv5Cr0=)
2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: avFJTiXKuBF5OpUClULVR5MjBTuRUwkgFo629hpJjFw=)
3: pDNCrYaJz93_0ruXQrWKPUYVC7w.roa (hash: dZXhJB4noMnp9QFyGzeSZGgePn7dhbkhRF5jupjuOF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:4c:4b:b2:57:50:43:af:54:e3:bc:45:ad:fd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Mar 29 13:01:22 2026 GMT
Not After : Mar 30 13:01:22 2026 GMT
Subject: CN=b95fae4e3a09ccfbf500cbcaebbc7a9b35ba4899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:d0:95:80:68:5c:f8:13:1c:b3:09:d6:f5:
ee:d0:1a:e2:43:2a:f3:76:14:90:d3:ac:18:37:dd:
ed:36:fc:40:b7:ac:24:34:ac:61:72:e3:d7:e7:c2:
cb:74:ec:65:03:24:62:7b:15:52:2c:98:c4:14:ca:
16:6e:07:87:48:df:db:bb:c3:c1:60:a8:d4:f0:06:
7c:40:c7:ff:96:39:49:5b:47:76:0c:ae:3c:48:9c:
83:8e:8c:26:5e:62:97:b8:c8:e5:2a:17:cd:2f:e5:
27:3a:fa:6d:27:46:d9:3f:88:79:56:d4:6b:ba:c9:
b8:59:4b:70:a2:61:33:d1:e5:f7:0f:4d:86:f1:34:
c7:ab:57:32:85:88:57:19:14:16:7c:44:0e:25:59:
04:55:21:de:12:bd:16:17:96:a6:67:02:ce:37:50:
ad:5f:88:fc:95:21:4f:1b:08:6c:10:bf:20:e0:37:
f0:dc:db:01:5d:49:d0:ce:04:1d:24:f4:81:f3:da:
f1:c9:27:e0:40:e3:fa:0f:27:58:33:47:6c:5f:cb:
32:79:6b:8c:79:07:2e:54:7d:74:24:53:20:43:2a:
e0:ff:95:ae:50:da:fe:b4:a8:24:88:f4:45:7c:92:
21:70:ee:1f:9b:df:76:e2:7e:1a:92:87:9d:d6:1f:
af:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5F:AE:4E:3A:09:CC:FB:F5:00:CB:CA:EB:BC:7A:9B:35:BA:48:99
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:79:f8:72:3b:d7:2b:98:1f:c6:e9:37:52:e4:41:7f:79:ab:
f6:b9:51:85:5c:16:ef:ee:c6:40:0f:b7:f3:36:e4:fb:d6:03:
0d:5b:b6:c8:14:a9:74:f8:da:c5:f2:90:86:4a:41:1f:9c:1d:
c1:71:2e:ff:c4:d8:e0:b7:41:6a:49:ba:5d:85:09:4b:8a:0e:
2e:ea:2d:c1:90:07:34:08:3d:6b:a3:3b:bb:97:37:ae:dd:4f:
5a:ac:a4:d5:79:e8:54:04:ef:d7:77:48:7b:78:84:9b:e4:c7:
09:22:ae:c0:68:3b:c4:10:e5:bd:b7:28:49:06:1b:d8:7c:22:
db:6f:82:b3:b6:2c:35:19:89:2e:48:bb:c2:ae:e7:f4:ee:04:
82:fe:f2:94:8e:59:13:3d:1e:71:ba:8f:b6:ba:7a:b6:a4:fe:
01:a6:aa:05:1e:e9:6e:02:3b:c1:26:f0:b3:47:ff:49:40:2a:
22:23:30:d5:02:6f:af:83:f0:8b:ff:ee:58:15:8a:65:2d:3d:
90:25:81:7d:02:eb:03:ae:f5:bc:b4:fb:22:3f:5d:40:1c:3e:
80:bf:29:90:0b:73:be:56:59:71:be:f9:08:98:69:54:7b:6e:
27:86:83:e9:2b:cc:f2:ea:d2:06:14:ed:56:56:1e:7f:35:ae:
69:f7:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:53 2026 by rpki-client