Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
File: OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json)
Hash identifier: QL/UwWYlHgHTwaiYOYFhQE5ECD9Riu/BL9m/GbPJR8A=
Subject key identifier: 4A:60:58:EE:6D:67:DD:06:74:52:AD:FF:76:35:A8:32:85:4F:20:12
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial: 019D37F776D3BEE06D899D58A91657E214A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
Manifest number: 0781
Signing time: Sun 29 Mar 2026 05:00:57 +0000
Manifest this update: Sun 29 Mar 2026 05:00:57 +0000
Manifest next update: Mon 30 Mar 2026 05:00:57 +0000
Files and hashes: 1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: okhuE6+00qXZtxNIFgX13ZRCxfcWMEEmMyztgQpS8mE=)
2: g9D60eT4osY914CQ4MsZqD3p_Gw.roa (hash: 9V83sePRPvQWxHMpiIJhpUEoLq1Krp0NLVKYoKzzAfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:76:d3:be:e0:6d:89:9d:58:a9:16:57:e2:14:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Validity
Not Before: Mar 29 05:00:57 2026 GMT
Not After : Mar 30 05:00:57 2026 GMT
Subject: CN=4a6058ee6d67dd067452adff7635a832854f2012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:7d:74:9b:bd:4a:ce:bf:8b:e2:77:73:52:
db:80:dc:e8:54:59:d9:1b:e3:30:89:e0:eb:ef:d7:
97:86:40:df:0d:f2:28:3e:83:cd:27:06:60:ff:8b:
5c:bd:bf:4c:27:93:16:20:82:59:4d:76:71:8e:2f:
08:19:78:d1:e4:76:08:88:a5:a7:39:58:04:ce:40:
6d:12:ea:6c:dc:a5:2a:50:9d:fb:0f:23:2e:df:1c:
ce:6b:b2:ff:fe:f7:36:d1:c0:50:9c:0c:11:f7:a9:
01:63:5a:47:88:a7:04:da:9e:88:c6:ea:7c:1b:34:
ef:29:74:96:40:f3:f5:eb:ff:a1:4f:2c:6a:13:51:
ea:03:af:71:90:a9:0e:ae:c3:39:48:41:69:34:d3:
f8:49:e9:db:0d:d5:eb:ac:14:49:ab:3c:32:33:22:
62:c3:0a:53:ef:08:cb:ba:f8:c2:12:10:7f:2c:d8:
48:a9:09:b7:c7:c7:89:fb:19:23:3f:e1:62:91:82:
1a:6b:94:10:17:03:e1:6c:18:57:c2:70:ae:18:ca:
4e:95:97:ba:90:e0:29:3d:9a:25:8f:2e:df:8a:cf:
12:2b:e8:00:8f:7c:fb:36:60:e4:76:47:0d:9d:18:
3a:f1:94:fe:4f:aa:1d:5e:3e:fe:61:f0:3c:10:c8:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:58:EE:6D:67:DD:06:74:52:AD:FF:76:35:A8:32:85:4F:20:12
X509v3 Authority Key Identifier:
keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c9:56:71:61:3f:7b:70:ce:af:ba:18:21:42:b9:35:24:c4:
23:be:cc:0a:11:aa:55:36:a9:bb:cc:de:26:50:4e:fa:14:03:
60:33:18:ae:52:b4:68:fa:07:f3:03:4f:02:0b:a8:c4:1e:da:
30:fd:90:cd:a6:ac:37:fd:8e:23:c0:51:ac:f0:75:cc:6a:32:
61:b9:89:c1:9a:b9:96:b2:6c:3f:29:bf:5a:13:02:67:d0:2d:
af:aa:50:ee:27:43:3c:1e:1a:90:42:56:b8:b5:30:3a:a9:a4:
15:b1:21:f6:35:d5:0e:27:b0:be:f0:ce:e3:b9:5a:fa:e2:05:
13:c0:60:e1:5f:06:8b:c0:63:65:de:07:bc:ec:a4:e4:81:49:
f6:45:6a:f0:cb:4f:0e:ca:c0:d6:b9:87:a9:df:ce:d8:18:85:
5f:6c:09:12:5c:c5:69:cb:09:23:3f:fd:01:ee:3b:97:4d:d7:
4b:5d:83:f6:ed:1c:27:f0:5e:11:d2:01:63:e0:62:1e:aa:30:
69:e2:b9:5d:72:10:1d:c8:58:04:f4:51:de:cd:49:e1:77:db:
7d:19:e7:ad:ee:41:f4:2a:c0:dd:de:09:89:18:77:ac:cc:b5:
a7:2b:e8:84:27:b8:55:1d:a0:7b:c8:19:4d:8c:67:48:77:e1:
61:95:e5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:19 2026 by rpki-client