Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier: WM2p/Gruu6ew+7r3A8FuSLkYjTkFzZdQjEhXpMT5jEc=
Subject key identifier: 48:03:56:83:62:36:B1:90:D8:47:F4:BD:AD:D6:CF:6F:3A:90:B4:FB
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 019D38665F667BFC204FB4384EDFB2BB2BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: IkpqFJlNa2437VP_tcxeJyVAPMM.roa (hash: mlTIEBNdJZbIbhX3NLDEQ4pnepBeofaptKU6NdPs/uI=)
2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: rqrXSMTF0cc8Jw8E8/4UgVIHSsAvu+H91nf3iJb255g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5f:66:7b:fc:20:4f:b4:38:4e:df:b2:bb:2b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=480356836236b190d847f4bdadd6cf6f3a90b4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:b3:24:85:35:17:bb:c9:80:4c:68:21:c2:
8e:a2:26:fb:6a:05:a1:ea:db:19:62:7f:4e:79:5d:
6f:4e:a8:0a:92:62:f6:80:ee:28:46:0f:bb:ce:74:
d4:03:6e:2b:5f:ef:1b:c3:cb:7e:b6:44:18:5f:12:
95:a9:fe:11:a3:be:44:df:3e:6a:84:31:da:88:b3:
e3:5f:ff:0d:8e:ec:13:b8:86:25:ea:6f:02:0d:e9:
9f:37:18:33:10:0d:93:cb:44:7f:7f:1a:68:58:6d:
64:a9:ea:80:60:d8:f5:11:4c:51:2d:2f:47:b5:12:
21:18:4e:b4:bc:88:b6:a8:5e:ae:f7:8f:91:96:6e:
81:af:9a:f7:30:35:c4:55:cf:65:30:94:3a:28:f8:
da:ab:fa:04:10:a1:75:eb:fd:8f:62:fa:c2:1a:6c:
05:33:74:fd:ea:4d:b9:d7:56:92:9b:ee:11:27:49:
f8:53:43:94:2c:a6:7c:c3:b5:37:6a:5c:bb:8a:49:
1b:fd:71:ff:1e:58:59:d9:47:c1:3e:08:5f:42:cb:
ad:0d:0f:d6:e6:e5:b4:ba:77:b0:b7:23:f7:80:51:
0e:6b:16:4d:e8:7f:56:9a:8c:e2:1b:f4:c7:14:b7:
71:96:9f:ba:56:b6:a7:d3:d6:40:56:07:dd:f0:a5:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:56:83:62:36:B1:90:D8:47:F4:BD:AD:D6:CF:6F:3A:90:B4:FB
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:69:0f:47:2a:c2:8b:d5:4b:3b:ff:f0:92:39:2e:5b:ff:04:
dd:bd:31:4c:3d:02:51:ab:04:38:e7:a7:72:16:9d:49:63:98:
39:5b:55:8c:35:4d:fa:fa:fc:60:a9:ed:9f:6b:ad:ec:a6:b5:
e3:62:70:79:ce:bf:a8:4a:16:5c:55:02:e4:65:b7:63:98:cb:
4a:96:e5:92:9b:f0:01:27:c9:f3:d9:37:53:cd:9e:bc:03:cb:
1c:bc:67:bd:79:9e:31:4f:f6:3c:4d:57:17:cf:c3:6a:ea:b9:
1c:f9:f8:4d:8c:b0:51:ae:bc:cd:df:14:bc:74:c3:65:b3:73:
fc:6f:57:e2:98:3f:51:44:39:2e:66:e8:9a:fc:d6:5a:b7:9f:
66:0d:11:7d:f9:71:fa:52:3a:e5:8e:3f:11:fb:bb:b8:8a:49:
6f:06:10:f8:f3:98:21:28:f7:5d:9a:1e:8e:d2:3a:d1:8c:a4:
27:83:04:1d:0b:d9:e6:b5:3d:4c:4d:4c:11:fe:8f:85:18:b9:
ac:eb:6b:4a:ed:11:25:4e:ee:ca:64:93:df:4a:f4:ab:e1:e4:
44:69:25:d1:1b:2c:08:38:19:e5:13:30:73:e4:b1:5c:ea:b4:
51:9e:66:8e:17:e9:e4:e1:ec:9b:2f:dc:d0:6c:1a:47:b5:2f:
0f:f8:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:52 2026 by rpki-client