Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: 8ohz9cxuLmy6x/fu3J77cU2r0OfJ5w08C6avbv4wius=
Subject key identifier: 2A:0B:B1:B4:30:14:93:23:31:0E:BB:08:54:F6:99:0C:AA:8A:21:B2
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 019D3940AD5C7CE6ADAEEA5A5A6CF22033D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: 047E
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: 7lgvftt3YplOqtGKAXFKXfxxBQE.roa (hash: UMQdS0dx3gIMuyKJd19IDX0DWYOOtAEHJUPWP0Uspm8=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: Yrh9HBRnPTNdB8Jq+9m/1xB2kwFTUOSvvXGn+bAM2JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ad:5c:7c:e6:ad:ae:ea:5a:5a:6c:f2:20:33:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=2a0bb1b430149323310ebb0854f6990caa8a21b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:8e:67:26:c4:84:77:11:f4:17:a4:c9:9a:
59:7d:21:c7:00:ae:78:22:8e:d7:3d:58:2e:ad:38:
45:a4:70:3f:ed:b2:ae:6b:ef:ce:09:f0:ec:10:3d:
18:a9:ef:2e:20:3d:3a:ae:9f:fe:cd:67:62:14:15:
42:12:50:4e:b6:bc:5e:34:52:27:bb:b9:bf:81:da:
09:95:92:58:a4:46:9b:4c:39:71:ed:2e:9b:d2:fb:
12:db:f8:00:cf:83:9d:59:d3:4e:6d:aa:d6:25:23:
76:34:14:14:51:60:66:aa:b9:6a:aa:6f:8a:b6:0f:
ba:67:0e:61:28:6c:86:5d:c9:b8:34:f5:1b:2b:67:
ad:dc:07:2b:bc:8e:ea:a9:2b:0d:6a:f1:db:dc:7a:
fc:e5:b3:a7:52:09:78:fd:b5:64:75:e9:36:03:d0:
6c:9c:49:3b:34:42:ca:4d:fc:54:c8:c0:ac:62:72:
57:5f:25:bf:f6:fb:05:06:6d:05:fe:f4:89:b3:f4:
62:1b:bf:82:19:82:80:de:ea:ee:43:30:99:54:7d:
df:65:63:7a:9d:b5:c0:f5:3d:09:bf:c6:eb:bf:58:
d2:5b:49:c1:db:3b:93:4d:99:84:ce:a3:10:95:41:
0a:b0:62:c9:8a:0b:37:f3:ba:65:a6:3e:fa:06:18:
71:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0B:B1:B4:30:14:93:23:31:0E:BB:08:54:F6:99:0C:AA:8A:21:B2
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:60:e9:91:35:21:28:b7:fd:56:66:76:31:f8:fc:ad:61:2c:
00:ef:90:8b:3b:e4:b3:f2:72:05:f7:da:be:fc:89:1a:30:f6:
b8:1c:57:b3:0c:5a:70:9c:a1:9f:81:8d:0b:38:a9:e4:41:b6:
b0:c5:0f:73:20:f2:b2:12:a9:19:ef:3a:0b:a9:29:09:28:ab:
f2:50:ab:81:04:ea:ce:e8:a7:d1:dd:e6:36:80:63:71:c7:32:
7f:3e:e5:02:77:76:8b:84:9f:45:65:44:04:84:73:39:15:6f:
2c:32:46:a7:e2:7f:45:d8:9d:9b:bb:a9:88:f0:69:df:c7:87:
c7:48:2e:b5:b7:60:1d:e0:54:8b:34:06:19:be:1b:a2:d0:02:
9e:d1:64:5a:6b:d4:a5:eb:57:35:47:3e:ad:50:8d:b5:b6:87:
78:e4:2c:f0:6c:19:84:a5:fc:1f:e4:7e:be:62:85:eb:aa:e8:
21:33:21:0a:b5:9a:f6:c5:71:bf:0e:d9:64:e9:2f:d3:d9:00:
40:6a:14:62:1d:e0:ac:8b:57:a9:ae:e1:16:bc:fc:d6:47:a5:
14:e7:51:fb:1c:78:b1:8f:ce:29:28:ab:b3:53:d2:02:91:11:
03:83:5a:12:cd:15:b2:55:2d:44:c2:fa:ce:13:3e:ff:c0:65:
93:fe:4b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:28 2026 by rpki-client