Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json)
Hash identifier: n1tyZAx/aY5d0lOUsAmOL82wfmLxDGcgkB1RElyQZz8=
Subject key identifier: 51:05:1A:B7:3E:78:65:2D:DC:A2:26:67:C3:EF:D2:77:65:95:CA:11
Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Certificate serial: 019D3909DF9B96AAF3F47DAC7E4FB5DEBCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:00:41 +0000
Manifest this update: Sun 29 Mar 2026 10:00:41 +0000
Manifest next update: Mon 30 Mar 2026 10:00:41 +0000
Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: E/LDmMb23FWUk+IzjMPdXNvlt8Xg8zOqSJPabDaWoD4=)
2: wd-oYNXbGl3iBZHEfglW7P_Xdoo.roa (hash: y4wg+I7p29l8Do6A3p1FTIrG+j7k3dKo1xpUB8J2zSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:df:9b:96:aa:f3:f4:7d:ac:7e:4f:b5:de:bc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Validity
Not Before: Mar 29 10:00:41 2026 GMT
Not After : Mar 30 10:00:41 2026 GMT
Subject: CN=51051ab73e78652ddca22667c3efd2776595ca11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:63:a4:94:a8:7e:ee:b4:27:87:b3:e8:d5:
3c:fb:b5:b4:29:a3:84:00:8c:ec:41:e2:a0:6a:eb:
b1:b3:97:37:6d:67:6d:f8:24:d7:cc:07:2a:46:19:
fa:aa:c4:84:3e:e0:f6:71:81:0f:87:d4:00:89:3f:
0d:5a:91:db:79:91:00:c7:2e:28:80:8d:37:f3:86:
12:18:5b:b5:28:cf:97:f5:a8:40:09:78:ea:17:f7:
ba:aa:ed:68:38:8e:06:7d:39:ee:ab:af:aa:51:78:
03:d7:a9:bc:93:0d:24:a7:56:41:18:af:fb:a3:b9:
38:4a:05:0c:94:0f:c4:1a:74:7a:4e:ba:7d:8f:76:
c7:34:29:52:b3:a7:db:63:61:ea:b2:f1:27:8b:0e:
ee:7c:c4:a4:48:d1:4d:c9:81:07:6f:59:d2:a7:75:
72:60:e6:0c:24:7d:a2:b6:64:0f:8e:5e:76:89:de:
5f:2a:42:f3:26:26:e2:d7:08:ab:8c:5b:01:5a:bd:
09:a0:29:04:90:fc:c0:93:af:53:44:73:05:e0:91:
ab:1d:d3:ef:3b:12:c0:61:cb:af:59:fb:b9:47:db:
94:1c:39:b4:31:99:db:b9:c0:2d:11:e5:c8:29:9b:
60:49:25:6b:93:a9:a0:b2:a3:af:f3:d7:5e:61:cb:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:1A:B7:3E:78:65:2D:DC:A2:26:67:C3:EF:D2:77:65:95:CA:11
X509v3 Authority Key Identifier:
keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b0:e3:d9:41:f5:ac:b0:3d:26:74:87:b4:13:af:c8:90:fc:
d2:0f:81:87:f9:e1:34:24:9b:9c:49:51:19:db:1a:9d:72:a5:
8c:6f:a0:3f:de:58:47:0d:00:d4:a4:bd:ee:55:9d:62:b6:11:
43:8f:3e:94:df:82:ea:49:97:42:36:fa:eb:44:46:ea:b6:06:
c4:d5:4e:4a:76:99:99:93:2b:6e:c0:72:16:cd:2f:eb:34:ea:
93:ed:8c:45:ae:22:0e:5d:66:a1:b1:5d:0b:40:68:79:bb:e3:
3a:a5:fb:9b:1a:8b:8c:ee:df:e3:0b:75:3d:49:aa:2b:6e:d0:
57:05:e9:58:7e:a0:67:b9:a4:be:97:40:00:11:02:f8:dc:be:
fd:5b:1b:c5:95:12:42:e7:23:df:a5:13:87:54:e2:2c:d8:42:
ef:6a:cf:6e:c9:b9:9a:1a:4e:b6:f1:e9:e6:01:ab:84:bb:c5:
ee:59:1e:1d:82:be:24:c4:9c:21:42:bd:c9:20:5d:a2:ca:5f:
c7:7d:4b:40:91:5e:31:38:c8:e0:b6:cb:9b:a2:33:25:f9:da:
62:f3:a9:1e:d6:67:7f:64:33:47:af:eb:09:14:18:ef:07:29:
c6:b0:35:4c:d2:29:ca:95:2c:d2:0e:55:a3:71:fd:32:37:ba:
ec:ea:af:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:32 2026 by rpki-client