Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
File: oJfWos9CiA2-v0KjJRkHohyRpKU.mft (raw, json)
Hash identifier: TahyQcPiOq7LdeoQm6/DYevE42l88QwuogcfNqAuJh4=
Subject key identifier: A4:DC:83:95:28:6F:29:97:0E:6F:FD:30:97:44:78:00:CC:57:D0:53
Authority key identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
Certificate issuer: /CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Certificate serial: 019D38D3A871C69DE0C3FEAB631EA6580656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:28 +0000
Manifest this update: Sun 29 Mar 2026 09:01:28 +0000
Manifest next update: Mon 30 Mar 2026 09:01:28 +0000
Files and hashes: 1: dqDFD25-lBr1H4kU-f-eIMyH1ao.roa (hash: aZMJNfpwSLS2DvVJl8WR74MQgSeC0Vd4cP1ssZtEpxQ=)
2: oJfWos9CiA2-v0KjJRkHohyRpKU.crl (hash: iPdFP2PBBFL/Ljv2ZcNGDUgV4GqtY1LDXvKPIterwGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a8:71:c6:9d:e0:c3:fe:ab:63:1e:a6:58:06:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Validity
Not Before: Mar 29 09:01:28 2026 GMT
Not After : Mar 30 09:01:28 2026 GMT
Subject: CN=a4dc8395286f29970e6ffd3097447800cc57d053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:c4:8e:ab:4b:d9:f9:fc:11:dc:e8:f4:41:
99:13:fe:5b:3d:aa:6f:7c:51:0e:f6:3f:e5:69:c0:
9b:09:bb:9a:d2:5e:64:05:e3:62:d6:52:73:a0:07:
23:f8:7e:2a:45:ef:3c:4c:13:49:14:3a:97:76:d2:
b2:11:28:15:ea:87:6f:cf:ef:f4:bc:d4:74:d9:6d:
74:2f:7b:c3:cf:c4:f6:dd:5e:fb:44:9e:32:32:db:
ae:e3:ca:10:10:5d:41:be:78:49:20:77:3b:32:41:
70:ed:c3:32:49:ea:6f:46:a0:ba:9f:e3:ba:a8:36:
38:31:15:f4:30:ba:09:29:45:c1:3b:af:63:e2:19:
e3:ec:5e:28:1e:5e:8d:a0:55:ff:d1:c5:6d:87:03:
60:3f:56:12:0f:1b:c0:74:0a:7e:d7:df:7a:9f:b4:
89:74:60:28:7a:2c:97:d9:f4:0c:2e:6f:80:15:ba:
46:de:6e:ae:2c:a5:86:c9:83:40:0e:65:24:05:b0:
9b:5c:fb:7b:8c:76:f4:bb:c0:34:2e:88:35:e6:6c:
19:e0:8c:76:5e:6d:10:04:8e:f7:96:f0:ae:8f:05:
3a:2d:df:8e:38:aa:4a:c1:9c:8c:7f:04:1c:6a:01:
3f:46:04:c1:c0:e6:4d:6b:8b:f9:65:77:7b:6c:c9:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DC:83:95:28:6F:29:97:0E:6F:FD:30:97:44:78:00:CC:57:D0:53
X509v3 Authority Key Identifier:
keyid:A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:32:21:25:73:fa:eb:28:63:87:76:ec:79:b4:8c:00:19:d6:
68:b6:c3:54:86:41:7f:c0:d0:54:47:d6:a2:b0:c4:ba:c9:9e:
3b:d7:4b:44:96:18:55:f2:a0:5d:60:8c:8c:f4:30:7c:fa:84:
cb:77:44:57:a8:c8:b5:ec:9c:43:55:5e:42:81:8e:44:13:c0:
e7:b5:9d:82:43:81:2e:b1:22:d2:3e:f8:23:16:a9:4d:6e:3c:
8a:4c:86:81:1a:de:cd:85:5e:61:a0:89:13:88:93:2e:7e:45:
ad:c3:6f:c4:8d:91:be:c2:35:fd:e0:5c:ae:4a:2d:67:19:dd:
47:88:41:f7:33:c8:00:b3:0b:bc:19:17:9a:dd:1b:9a:07:1e:
5a:cb:41:f3:93:26:7c:68:d0:8b:bd:9f:01:ed:1c:de:41:ff:
a9:dc:05:33:7a:f4:6f:98:c0:74:f6:0d:db:f5:62:8f:c7:50:
14:aa:3d:87:8d:e3:b9:93:7c:c3:c5:15:e3:91:29:66:f9:fb:
30:4a:7a:f8:b6:4f:71:ea:85:aa:a8:30:16:a4:f0:e9:cf:87:
ce:36:2c:15:2d:ab:11:43:1f:83:22:db:ea:19:9f:dd:79:9c:
7d:93:24:26:20:d1:46:fb:06:a9:37:74:aa:77:03:45:64:20:
b9:0c:ad:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:45 2026 by rpki-client