Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: ZX/Z7hU2ELba8MM+NVDgeVRr4QXtQhT2QzM7qWwGKC4=
Subject key identifier: 3D:A4:D3:BB:70:6B:5F:3E:2A:F6:D2:72:51:6D:F5:11:81:B7:6C:66
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 019CF384331050A53D0998FE3743E1BE0A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 051D
Signing time: Sun 15 Mar 2026 22:00:53 +0000
Manifest this update: Sun 15 Mar 2026 22:00:53 +0000
Manifest next update: Mon 16 Mar 2026 22:00:53 +0000
Files and hashes: 1: 38pGZs7H26DrGSXKpy7NGMGvyNg.asa (hash: ZxC1UU+w8hDxkvYvkuN6y+g+zQIOTKFm51EQ8DphQn4=)
2: 3xF5zXncC4lUUlVcqraWFOzrS7Q.roa (hash: vnW96IIO7KZsSM+69xxxO0ynFQjIBJXcCGymfdrv09M=)
3: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: 19WrSBpbFkBpCKGTOSC8G83KotmWONI7PKC+3fggDn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:84:33:10:50:a5:3d:09:98:fe:37:43:e1:be:0a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Mar 15 22:00:53 2026 GMT
Not After : Mar 16 22:00:53 2026 GMT
Subject: CN=3da4d3bb706b5f3e2af6d272516df51181b76c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:f2:fa:c4:6f:4e:fb:9e:b1:f7:6b:20:8b:
d9:f5:11:50:f1:c8:a3:ba:9d:fc:52:ba:c4:64:b9:
c1:6b:36:7f:5e:b5:c1:97:ba:c2:00:fc:a5:47:c7:
b3:fb:b2:bf:9a:49:50:e9:82:77:d3:57:46:69:6f:
e4:1e:62:9d:13:cb:a9:6e:3c:56:21:0c:38:20:b9:
d9:9a:53:7f:e5:e2:eb:9e:dd:80:7e:ba:78:14:8d:
39:5c:d3:4a:75:e7:1e:15:3a:27:55:59:b4:9c:e0:
67:e2:22:66:b8:82:1f:72:4b:ad:e6:27:67:ed:ab:
b1:66:09:91:c2:8b:81:14:7f:4d:50:83:d9:87:03:
ae:b2:79:8c:ac:01:d8:78:a6:d3:dd:48:d2:fe:3c:
19:04:93:f2:df:2f:c7:e3:e7:82:b8:ac:eb:e2:df:
c8:cf:39:a8:2a:50:38:37:a6:83:89:6b:25:58:82:
19:07:2f:97:56:50:a9:06:ba:5b:fb:90:c7:04:23:
86:0e:70:aa:e0:a4:f1:4c:4b:89:17:60:83:54:6f:
60:85:47:4f:23:24:c5:02:e5:a3:52:ec:18:5e:30:
d9:21:fb:79:32:b2:3b:a1:db:f5:8e:34:f7:8d:4e:
18:8b:07:77:7a:0f:c9:53:56:98:a6:74:51:d9:94:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A4:D3:BB:70:6B:5F:3E:2A:F6:D2:72:51:6D:F5:11:81:B7:6C:66
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a1:ff:a5:8b:a8:b5:ce:9c:7e:6d:5a:8c:eb:fe:f3:5e:12:
87:6b:4d:18:a0:6a:58:ee:e9:7c:e5:81:4d:f0:b9:b6:e6:c0:
54:5a:4c:2a:c9:a9:fe:da:5c:e5:f6:f4:eb:59:34:fb:18:39:
f1:ac:1e:71:45:e3:05:c5:aa:e9:84:ce:7c:dc:f0:47:21:ba:
28:47:cb:1c:50:64:35:19:25:8e:6c:6b:75:09:a2:06:44:8c:
e6:0d:be:a4:24:34:ab:41:ba:b9:0d:2e:f2:4c:6b:6a:67:cb:
6c:9b:79:fb:f0:60:55:ae:41:dd:ae:4e:36:e3:a6:bf:54:1d:
f9:f6:a6:47:f2:83:9c:f6:fa:d5:37:ab:3c:a0:06:95:d7:31:
11:18:1e:f3:e1:81:4d:03:0b:09:53:98:8c:d9:f7:93:eb:51:
b9:1b:9a:68:23:93:68:80:17:74:cb:47:62:7d:48:5b:d4:7e:
cf:41:b9:7f:0f:8a:7a:e1:16:23:36:28:6f:4f:c4:65:a3:52:
c7:ea:9c:3b:22:82:41:fe:d7:de:d8:17:1d:54:4e:50:c6:d5:
cf:de:a5:ff:28:75:dc:5b:84:f0:b5:3f:21:8c:78:11:83:45:
c2:1a:6f:d2:30:80:bb:67:c0:07:24:d0:eb:b5:d7:d9:ae:3f:
23:79:b3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:05:10 2026 by rpki-client