Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier: WH1Rju2ala9jLxdFf+w0kibhO1oJNrxhrl2wpMBjyUc=
Subject key identifier: 23:2D:97:0A:E8:12:7C:B7:1E:19:E5:B7:C0:56:AD:A5:F5:40:6C:04
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 019D371B45704FE4C0FB2D90ABB950D5C3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number: 15C9
Signing time: Sun 29 Mar 2026 01:00:27 +0000
Manifest this update: Sun 29 Mar 2026 01:00:27 +0000
Manifest next update: Mon 30 Mar 2026 01:00:27 +0000
Files and hashes: 1: lh0K5-Z5Aaz0j8wGnxp6HsFtPYk.roa (hash: JhDyY/3KKD4NQI4A4Yynp5xK7eSjDNrmxGYBJDA+6gE=)
2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: 7+5hc7QDxE+imprLjbgwcBUX/8C4vIBXGNdg1145RlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:45:70:4f:e4:c0:fb:2d:90:ab:b9:50:d5:c3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Mar 29 01:00:27 2026 GMT
Not After : Mar 30 01:00:27 2026 GMT
Subject: CN=232d970ae8127cb71e19e5b7c056ada5f5406c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:71:08:ff:3b:c0:0c:38:0a:c1:d5:35:4c:
5c:aa:1d:06:da:d5:7f:42:b1:0e:53:92:c6:91:dc:
97:2e:c7:c6:ff:08:7e:9e:7e:d2:be:1b:23:e8:ad:
c3:65:b0:0c:b6:50:f6:b6:7f:c7:22:55:61:0c:32:
d4:dc:5b:15:cf:31:54:5f:0d:bc:9a:9f:4e:c2:21:
24:49:e0:40:74:de:5c:b7:8f:2a:46:6d:1b:40:bf:
36:f1:50:4f:2e:73:f8:ae:4c:12:bc:d8:f7:b5:cc:
b2:24:96:2e:73:d5:83:2d:f2:b5:de:d0:35:d8:90:
b1:31:c9:21:eb:07:93:39:6f:97:8c:3e:64:31:3e:
12:19:f6:32:22:15:d0:b2:77:53:fb:c0:b0:b9:f8:
94:6d:23:cf:9b:f7:6b:47:d4:a2:75:68:49:89:7a:
2b:d1:c0:17:8d:fc:f2:20:19:6d:db:f5:92:bb:22:
9a:a3:a4:29:b6:63:cc:bb:7e:a1:79:ff:18:de:8a:
6f:93:2c:44:f5:99:52:b5:df:5e:89:79:91:22:02:
d9:4e:46:4b:db:48:1c:96:b5:ad:06:d7:76:5f:79:
02:0f:bf:38:3e:42:17:d4:90:10:47:5b:15:23:a1:
4c:b3:78:c9:38:c5:23:64:a9:17:59:09:f0:25:1f:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2D:97:0A:E8:12:7C:B7:1E:19:E5:B7:C0:56:AD:A5:F5:40:6C:04
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b7:7d:29:54:7c:bb:8c:d3:86:fb:94:c4:a3:7b:0b:90:75:
65:66:1b:7e:35:b1:6d:71:e6:db:e2:50:cd:98:9f:de:10:ff:
13:fb:ac:2b:84:69:f4:d6:f0:8b:a0:24:51:d7:bd:f4:b1:a7:
17:75:a1:3c:36:c4:f8:67:93:f5:4e:87:98:4e:e4:10:10:4d:
1c:fd:06:fb:72:94:71:0d:80:47:95:ed:ef:72:8b:6d:f7:68:
a5:87:d7:d6:9c:f3:bb:6c:f2:8c:b2:de:b4:f4:d6:4c:37:a8:
2b:be:38:77:c9:e0:36:26:53:40:8a:96:5f:49:d2:78:28:ca:
1d:25:4f:28:b5:b4:8a:e7:77:3c:a6:87:4f:1d:02:a4:f6:f7:
2b:89:1f:9c:68:5b:ba:38:2f:42:87:49:6d:c0:dc:5f:8a:30:
3d:51:1a:39:87:f0:0c:42:26:f5:39:bc:c2:a8:06:2f:4b:5c:
55:30:56:01:57:52:cf:48:50:b9:a6:3d:e6:91:36:c2:df:25:
4a:df:2e:5f:84:59:af:dd:ed:af:ed:78:8d:e5:ca:0c:b3:08:
14:fb:14:97:63:4b:56:7c:4f:c2:94:b5:f9:a5:64:cf:25:e1:
72:82:6e:57:ff:cf:a3:e2:2e:51:ee:c9:49:9a:c1:4d:b1:ac:
a2:c5:a6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:33 2026 by rpki-client