Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: wnIefqEoypxPlr5CUqb73AVTsw3vwp6JBHrfjfRoenw=
Subject key identifier: B6:EF:9D:01:0E:47:06:7A:FC:09:3B:A4:78:D5:6A:BC:D8:17:F0:BB
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 019D37531FE7407F657139CF2DBFDF8BEB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 137E
Signing time: Sun 29 Mar 2026 02:01:27 +0000
Manifest this update: Sun 29 Mar 2026 02:01:27 +0000
Manifest next update: Mon 30 Mar 2026 02:01:27 +0000
Files and hashes: 1: hXAXsmUnJiWV8z-SUw75JeiGESc.roa (hash: VUrv1bazpJi2/YTeV0TBl6sYZknhiXdswe7oWJCYACU=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: hgFJC34OQzAu2+QJddQDjqpxk8q0iGNPYwfCSLf3ZMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:1f:e7:40:7f:65:71:39:cf:2d:bf:df:8b:eb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Mar 29 02:01:27 2026 GMT
Not After : Mar 30 02:01:27 2026 GMT
Subject: CN=b6ef9d010e47067afc093ba478d56abcd817f0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:12:e4:d5:0b:39:5d:54:58:e1:97:0a:63:
13:77:ac:c1:34:33:e4:33:72:33:36:b6:d8:9d:c4:
98:cc:56:ed:6c:13:35:a3:de:55:13:49:8e:35:66:
66:97:8c:69:91:b5:44:f7:32:95:87:2a:b3:ad:5e:
9a:43:80:ba:b2:e7:e8:a3:35:b4:14:96:1c:51:46:
da:f9:cc:c4:5f:f1:72:05:48:05:4f:b2:c6:a8:e6:
4c:3b:54:58:07:82:19:ac:c6:96:c9:82:b4:15:3a:
7c:92:20:14:ab:92:8a:0b:19:19:fb:eb:ad:d5:12:
a4:7e:52:a6:84:bb:bb:ab:4a:dc:b7:ac:dd:b2:48:
d8:8a:6b:2e:05:e2:65:0a:a5:ab:c6:12:0c:6b:12:
20:b8:ff:49:79:7f:70:b8:6a:56:66:c3:3a:72:59:
a0:5c:2d:7e:11:09:ec:07:c0:7f:c7:34:0a:54:c7:
d0:80:c3:08:6d:23:49:8f:50:a2:15:2e:53:92:13:
2b:20:79:23:01:85:50:07:fe:60:11:0e:36:85:04:
33:6b:5d:63:bd:04:0a:c8:0f:43:20:c2:e2:bc:2d:
ba:13:c8:b2:81:df:4e:97:94:47:bf:06:59:47:0f:
0d:cf:85:7c:b1:70:e2:af:ac:29:2f:b0:35:09:bc:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EF:9D:01:0E:47:06:7A:FC:09:3B:A4:78:D5:6A:BC:D8:17:F0:BB
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f5:1e:c9:45:83:e2:f3:c3:2c:43:01:03:70:cc:02:3e:2f:
60:80:28:e5:3a:07:cf:08:b8:04:c9:69:ba:2b:2d:69:4a:b9:
a0:88:1a:10:83:79:02:d9:35:06:d0:17:63:30:db:af:f3:f6:
d8:d6:b5:e3:41:40:78:02:f4:ff:87:0c:a7:72:04:e2:3c:34:
31:f8:8d:7c:48:ef:12:35:f1:27:58:41:5f:b1:77:b1:fe:59:
ff:c8:14:43:17:b8:ff:9f:c3:2d:18:b5:d2:ab:c0:23:02:b4:
5a:4e:31:5f:55:5e:c6:eb:59:32:d1:ed:8f:24:95:4e:fb:3a:
18:6f:9d:53:e2:fb:64:68:d8:6d:27:54:9c:68:50:12:5e:c8:
48:30:6e:39:6b:91:d4:eb:7d:80:24:c4:32:7d:66:c4:31:59:
81:87:c3:d2:b1:f5:9f:13:bb:8d:c2:1b:27:24:3f:0b:98:10:
8b:67:a6:20:21:e4:e7:b1:d4:31:9d:1f:83:5b:73:ad:93:24:
db:a1:8f:cd:6c:eb:e5:6e:35:50:f2:2a:20:f4:d7:49:66:4d:
ee:00:ca:2a:ac:19:db:5a:b3:3b:a0:1c:f1:f3:be:76:3f:98:
d2:ba:30:f0:41:30:c5:05:49:9b:44:69:4c:b3:39:73:7d:31:
2d:fb:d4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:25 2026 by rpki-client