Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
File: oWKOOfRxrdx15xo5G4Ldklx_CB0.mft (raw, json)
Hash identifier: ZGuRfSYF5ymrvOmaAT1v1GOFfLR/ycCQBOujGGQvJ0E=
Subject key identifier: 87:2E:E9:C2:BF:E2:A2:72:83:1A:CA:ED:E0:F3:73:FF:0E:65:9F:A4
Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
Certificate issuer: /CN=a1628e39f471addc75e71a391b82dd925c7f081d
Certificate serial: 019D390A5149D4272FE8751D9C328BB68F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
Manifest number: 1462
Signing time: Sun 29 Mar 2026 10:01:10 +0000
Manifest this update: Sun 29 Mar 2026 10:01:10 +0000
Manifest next update: Mon 30 Mar 2026 10:01:10 +0000
Files and hashes: 1: 5ATSOSiA10EtAdDvyzpiFcAS2U0.roa (hash: FEzcVGC/mYd4L2CAAAA7gfNC+WWkBe4b/x0RPbYqcaw=)
2: oWKOOfRxrdx15xo5G4Ldklx_CB0.crl (hash: QMwSVNWdEAGN/juD4BOivB3KYriJtAZWjC4di7KpYSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:51:49:d4:27:2f:e8:75:1d:9c:32:8b:b6:8f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d
Validity
Not Before: Mar 29 10:01:10 2026 GMT
Not After : Mar 30 10:01:10 2026 GMT
Subject: CN=872ee9c2bfe2a272831acaede0f373ff0e659fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:fa:a6:6c:07:e9:87:d9:16:3c:e0:ae:14:
ab:5a:f6:4f:b5:2b:94:71:e4:b6:a6:32:12:f6:79:
ed:5f:0e:72:9c:59:d5:e0:62:55:b9:c2:90:86:8f:
eb:22:3e:d0:88:64:5b:2e:f3:f1:b9:2f:af:1c:a6:
80:87:e7:ee:b4:ab:83:f2:14:c6:5b:39:0a:86:10:
d3:a7:b4:c4:68:a8:7d:4f:3c:83:ab:85:77:34:b4:
70:33:a7:e3:34:7b:ff:b4:e0:07:65:90:80:e7:cb:
e5:03:b8:5b:13:7b:9b:c1:04:60:66:c1:b4:b9:dd:
95:d9:c3:b1:8c:ed:3e:64:54:ea:bf:87:61:80:33:
10:2a:9d:c4:b6:57:75:71:67:65:50:50:bb:02:74:
09:0a:6e:76:d6:c2:02:3b:5f:73:ec:00:ab:f3:72:
06:ef:41:46:17:b0:0e:dc:0f:61:ab:eb:6c:78:37:
36:7d:1f:29:41:03:30:20:5b:20:5b:3e:db:49:8b:
20:9d:23:7a:66:21:89:e5:4d:39:e8:96:55:10:bd:
17:cb:ce:44:40:00:7d:b8:0c:46:99:a0:94:c8:40:
a3:a1:00:4a:f8:ed:6c:d5:eb:e1:fc:11:aa:d8:97:
d9:a9:f2:45:fe:4a:c7:37:b4:c1:63:e6:8c:97:be:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2E:E9:C2:BF:E2:A2:72:83:1A:CA:ED:E0:F3:73:FF:0E:65:9F:A4
X509v3 Authority Key Identifier:
keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:97:25:7c:d5:44:47:cc:4e:0c:ba:b3:55:fa:87:ca:b2:a4:
29:34:10:65:f4:96:a6:b9:5e:49:78:ad:15:6d:31:7a:7a:29:
4c:90:03:c0:e2:0d:3d:21:64:a3:19:74:30:38:86:b8:e2:44:
66:4b:9f:b7:19:18:07:54:ab:c1:bd:0f:3b:cd:9c:ee:68:0f:
83:3a:7c:04:4a:0e:40:63:3f:06:98:a3:c6:fb:27:18:90:3c:
ba:83:28:0f:d4:19:3f:9a:cc:00:fe:78:87:0c:df:3a:4d:bc:
22:87:54:53:b3:1b:d0:ee:0a:cd:36:80:bc:91:d2:9a:74:12:
bc:31:b0:34:58:93:7f:26:7c:8f:04:4f:4e:33:20:5f:2b:be:
1d:22:53:73:59:a2:8a:c4:2d:29:26:09:36:2d:86:89:05:4c:
fd:aa:bc:ef:3b:68:04:57:3d:fe:db:5e:5e:73:34:41:b4:86:
84:4e:86:5c:14:dd:ba:6b:7f:32:a6:9e:8a:0e:65:fd:02:74:
6d:20:8e:cb:40:7a:de:d5:d9:da:4e:1e:36:e3:8e:8c:e9:8e:
ba:5e:8f:de:23:7b:a7:09:6f:72:66:e6:45:d1:0b:6d:55:0a:
b8:97:e6:34:18:13:4c:6b:2a:2b:73:8e:43:d0:55:68:b2:02:
1e:6d:17:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:12 2026 by rpki-client