Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
File: oI-OKeBCDnI90dxBjocTyOlgQ9g.mft (raw, json)
Hash identifier: uvrLZHXUfiqgKatKMaAgriY2zyxE12JJ7fPvLDzZIXs=
Subject key identifier: 26:8F:1C:40:01:94:7F:37:C8:6B:38:B3:40:C4:2B:3C:88:8E:09:F0
Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
Certificate issuer: /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Certificate serial: 019D378956505FA8FE9DFDCE12D3A98DE307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
Manifest number: 0344
Signing time: Sun 29 Mar 2026 03:00:40 +0000
Manifest this update: Sun 29 Mar 2026 03:00:40 +0000
Manifest next update: Mon 30 Mar 2026 03:00:40 +0000
Files and hashes: 1: oI-OKeBCDnI90dxBjocTyOlgQ9g.crl (hash: 9z85QAbwxSYjg5tX2xAAGZGCt9EpTrY//LOau81RZSw=)
2: sweOVKgXsN3kVUYF6KimvpfAP0U.roa (hash: ypb9r2C25en3AgJorcke1Z6J6YyhaP9BSnmzJXPiBxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:56:50:5f:a8:fe:9d:fd:ce:12:d3:a9:8d:e3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Validity
Not Before: Mar 29 03:00:40 2026 GMT
Not After : Mar 30 03:00:40 2026 GMT
Subject: CN=268f1c4001947f37c86b38b340c42b3c888e09f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:58:8d:d4:92:0b:95:6c:7e:17:39:06:fe:
10:89:46:f4:a0:53:cd:3f:db:f5:9e:dc:b8:5d:2d:
bd:4a:c5:35:6a:07:7e:11:e3:51:cd:7d:1e:d6:7c:
a4:a0:45:7a:20:66:78:04:a6:cd:af:c2:25:dd:2d:
76:a9:06:b7:06:cf:b6:2a:46:37:e1:3c:13:a2:f9:
35:07:cf:52:c7:b6:5b:1e:bc:53:46:5d:c0:83:b6:
91:03:97:71:42:43:f6:43:27:3e:1a:65:c9:24:57:
9b:ac:39:d1:af:6a:f7:19:04:91:29:17:38:cc:7a:
82:3b:7e:43:53:58:f0:7f:c7:a5:cb:7f:07:12:84:
e8:5b:f9:0f:76:d9:0e:a8:20:6b:32:7e:19:a8:c9:
f9:4e:94:82:6c:53:d7:af:8a:93:8a:36:08:e8:e1:
12:14:32:e4:08:2d:82:b6:30:33:2d:43:91:51:b2:
a0:79:b9:49:b9:4d:da:5e:ac:07:c4:c3:7d:4b:99:
9d:12:0b:e6:ea:2c:0c:cf:a1:a6:b8:a4:b0:21:bb:
e0:93:75:73:e6:ed:68:cc:95:94:37:05:27:d5:8a:
c9:1d:d7:47:1b:56:a2:0c:11:e6:20:fe:0f:6e:7a:
a8:e7:2f:98:37:72:7d:b5:08:7e:d9:11:ac:e8:01:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8F:1C:40:01:94:7F:37:C8:6B:38:B3:40:C4:2B:3C:88:8E:09:F0
X509v3 Authority Key Identifier:
keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:40:e5:06:bd:1e:c6:32:0f:b2:52:1e:16:33:89:56:8f:5c:
fc:74:88:77:e2:8a:26:7c:90:5d:53:11:48:40:19:cf:4b:bf:
29:d2:72:e9:fc:c2:2e:12:df:c5:9d:c0:84:04:58:35:25:91:
c9:73:fa:2f:ad:be:1c:76:ab:03:6e:1c:2c:ac:f1:b2:ae:94:
53:7e:42:25:e7:8d:08:86:42:8c:fb:2b:20:f1:9b:00:2e:c2:
db:a5:2f:68:f8:e5:28:2a:a8:a9:04:a8:7a:82:71:81:02:5e:
dd:e2:a8:98:7c:62:6c:7b:af:08:51:9b:6b:f2:5f:9e:52:14:
ef:b0:d0:05:49:c5:cd:c5:75:41:5c:72:11:7f:8b:1c:81:33:
37:df:41:a9:ed:72:87:15:db:b1:36:05:ac:2e:41:5e:b2:12:
5d:a0:79:b2:ad:7e:6b:af:ae:6c:6e:d8:48:59:ca:05:7b:d1:
16:f2:b1:1a:10:9a:a4:7d:23:01:96:10:ea:91:78:ad:bf:41:
66:76:c6:31:54:55:12:6e:69:bc:45:9f:01:0f:c8:d4:c8:f7:
d0:55:a7:7d:23:54:14:a2:31:48:7e:02:61:11:bd:b7:cb:02:
55:51:ee:d7:f3:f4:28:06:36:13:e8:98:03:96:ad:7d:b7:2e:
5d:16:b6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:06 2026 by rpki-client