Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json)
Hash identifier: 9QupQbM2vdNZ2O+zciKtI9v17PIhvrgkqkMqwRX1aOg=
Subject key identifier: FF:00:9F:8F:ED:39:FE:3E:03:C0:58:15:E4:51:A5:71:09:5D:4B:06
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 019D378940434C51FE74F30F48B92F4B9CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:34 +0000
Manifest this update: Sun 29 Mar 2026 03:00:34 +0000
Manifest next update: Mon 30 Mar 2026 03:00:34 +0000
Files and hashes: 1: 27jrzr1xWogH3ddsATux5O5Jw1A.roa (hash: xfv2vIRKihnS8ExH9lEFM1xLctm/mcM8AdL4KJZKGlc=)
2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: mIEzmsbo9nYY+NW43eq6smhNQNOUF8yY7U5i5IMNc3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:40:43:4c:51:fe:74:f3:0f:48:b9:2f:4b:9c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Mar 29 03:00:34 2026 GMT
Not After : Mar 30 03:00:34 2026 GMT
Subject: CN=ff009f8fed39fe3e03c05815e451a571095d4b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:37:f1:7f:6a:89:7a:7e:4c:b9:25:be:94:8f:
44:5c:af:ab:89:d8:9b:f6:55:bb:2b:58:52:f1:9a:
49:ca:eb:5f:81:b9:d8:ee:cc:3b:e0:70:e5:ce:8f:
25:f6:c3:7a:0c:64:2f:1f:70:77:ae:e5:a2:2f:cc:
5e:92:be:8b:aa:f7:ea:2c:e6:70:28:74:e2:76:2e:
39:ce:68:8e:a4:d6:79:e4:4f:bc:59:4a:8e:0c:63:
51:28:b7:76:24:eb:75:06:b9:33:2d:94:51:26:67:
ed:06:b6:66:60:d5:a1:61:84:9a:b0:61:8b:34:e6:
6b:d9:95:2b:f2:5e:c3:97:c5:c4:47:7f:ec:f0:3a:
a3:41:86:88:b3:40:86:33:d7:ff:c3:d3:0a:06:32:
44:85:77:95:5a:0f:d1:76:72:ec:1b:d9:ed:a5:4c:
d2:3e:78:66:ab:59:68:06:f3:54:46:87:07:e9:3a:
34:c6:e6:3d:44:04:f0:f8:e9:10:8d:e5:1d:ff:58:
76:ab:fc:5e:0c:4e:79:61:0e:9c:03:1b:ca:01:dc:
84:0d:09:5f:79:a4:e8:d5:35:a5:ce:56:ef:0e:48:
72:e4:05:bf:ef:f5:fe:df:8e:68:a1:50:05:49:4e:
c3:94:cb:0d:d3:ff:dc:b8:6f:36:92:3b:1d:6b:48:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:00:9F:8F:ED:39:FE:3E:03:C0:58:15:E4:51:A5:71:09:5D:4B:06
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:56:b5:f3:d0:d2:d0:76:35:b5:fb:9b:8e:92:70:8c:2f:5a:
20:2a:20:80:e9:2f:cc:0f:fb:c7:be:d7:31:b0:e7:ac:9a:79:
d0:97:35:28:8e:29:5d:37:5e:44:3d:a6:fc:e1:c7:a9:82:36:
aa:92:5c:12:d2:80:e9:9c:be:a6:99:c0:4e:d7:4e:d0:b4:33:
18:bc:60:a8:9a:e2:8b:0f:2c:00:17:f2:00:dd:8d:f6:42:43:
25:b5:e9:6e:ea:3c:81:39:b5:31:be:22:f4:ce:e5:64:b1:50:
bb:e2:4f:50:66:f0:ab:b1:52:7f:5d:f5:4d:3e:47:3d:04:69:
b9:3c:51:de:4b:fa:5b:a5:6f:79:46:61:5f:e2:fb:84:4b:75:
ce:1f:6e:fc:7e:49:9a:47:bd:3c:62:e6:a8:5c:2d:9d:62:06:
fc:3d:7a:f3:70:27:48:08:30:8d:d9:48:c3:b6:43:12:de:4f:
54:c0:9b:fe:77:8d:7a:a3:e8:76:60:2a:51:9f:80:89:57:6c:
28:29:29:6a:79:f1:85:f0:a2:d5:18:6f:77:f1:8e:75:d3:6d:
ef:46:5d:29:bb:72:b0:77:5a:fe:e7:86:d8:45:de:2d:81:90:
ed:e0:db:4d:a6:b8:3d:3c:4f:10:f8:11:7a:ef:94:98:06:ae:
10:af:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:30 2026 by rpki-client