Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier: jid/9wGiBAgsxcmkXISSKB920urYMnAbUr9lJwfKvpk=
Subject key identifier: FE:D4:B1:FC:C2:98:E3:76:84:B0:9A:A5:2D:8A:39:3C:27:E7:F7:B6
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 019D382EA1A9507A1E4230C3054335210E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 06:01:13 +0000
Manifest this update: Sun 29 Mar 2026 06:01:13 +0000
Manifest next update: Mon 30 Mar 2026 06:01:13 +0000
Files and hashes: 1: 1qCi6Sq-_dCneR6GoHYrYL634Nc.roa (hash: si5wfQgczxPexpvI3zOZcdBSWeRL01fGRYVbjNQoh5k=)
2: Ey6_U3MNqlk5sSbuI2Okie2De-M.roa (hash: EHs4rxI+XpWq2Dq6A1mosS3qkiasZu2Py2spZNfHGZc=)
3: ZVmzCRGm6Ac5itIuDxSJvmt1oKM.roa (hash: vz5MSkdppxEecAJ47gQzG2qHkIp9VneH0S1nTYp4M1Y=)
4: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: QnNb4XaZIHlzkiFGqVlaHihKxScBjWXq1w71ixT06+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a1:a9:50:7a:1e:42:30:c3:05:43:35:21:0e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Mar 29 06:01:13 2026 GMT
Not After : Mar 30 06:01:13 2026 GMT
Subject: CN=fed4b1fcc298e37684b09aa52d8a393c27e7f7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:bb:af:07:5f:f9:02:db:d1:4e:d0:69:7e:
1a:59:3b:6e:ff:6b:3f:cc:d2:64:1f:25:87:dc:74:
a3:1a:8f:f0:2e:f7:da:54:49:a6:bb:b6:e9:dd:e1:
3b:1f:a9:4c:6b:85:52:fe:9b:21:df:46:f2:7f:55:
78:73:3a:ff:6b:89:78:fc:67:a8:93:e2:ec:80:b8:
14:ac:d8:f0:6e:55:58:d9:d7:f4:fa:af:e2:f6:22:
59:fc:fc:c8:a5:08:d9:52:f4:d9:3d:c3:fc:60:3c:
23:b8:a1:4d:d4:78:7b:39:46:bc:ed:c8:3f:80:af:
98:3b:7b:0e:3b:31:1c:e4:8a:7e:f8:a2:1c:20:68:
f2:51:93:64:55:d5:7b:db:c0:ac:67:b9:23:2c:6a:
42:75:91:25:22:74:40:e9:91:04:90:39:47:fa:97:
45:9d:12:f6:c8:a6:cf:a1:a7:e4:2b:c0:44:b0:47:
0f:a6:e6:9d:c0:a3:6c:b4:90:d0:e4:1a:f5:f3:7c:
e2:05:74:3b:00:bd:6d:c5:f8:f3:d7:86:ea:88:62:
da:75:a4:23:40:a0:77:62:6d:65:72:b1:a2:10:43:
8a:38:99:50:51:1d:fd:63:f5:d0:c7:ac:ea:5a:4e:
d8:58:8c:be:0f:85:63:9f:21:8b:6d:07:e4:2a:cc:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D4:B1:FC:C2:98:E3:76:84:B0:9A:A5:2D:8A:39:3C:27:E7:F7:B6
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e7:75:dd:c1:91:07:83:24:a2:1f:a8:ef:62:9a:df:ae:be:
f4:47:26:34:d6:65:0f:23:31:4b:1a:51:2b:da:79:0f:9b:6a:
9e:6d:b3:27:1a:7a:71:d4:4f:f0:fe:aa:bf:77:d1:68:be:76:
e3:c1:fe:18:27:d3:b6:cb:72:1f:e3:44:f8:47:45:36:23:22:
cd:29:0b:b5:2c:4b:18:b0:49:31:3d:a8:36:37:0b:6b:f6:dc:
66:5b:fa:f7:11:d5:2b:a4:a8:99:d7:ab:d2:62:bc:0f:c3:db:
77:ca:bb:c7:fe:7a:b6:8c:6d:f8:ee:38:fb:39:a8:60:b2:5a:
1b:7b:61:a1:c9:cf:f9:24:34:40:2c:d9:ff:88:5f:3e:c4:39:
1d:44:0f:34:4c:5c:93:08:09:a1:53:b7:ef:18:27:29:8b:48:
2a:63:a3:4b:3c:21:17:5a:df:56:60:a4:4d:a0:71:9f:c3:59:
45:a8:99:4d:09:2d:f4:d3:49:4c:17:df:4f:e8:b2:b5:a9:3d:
a7:2f:5b:ad:b8:ef:0f:a3:b8:63:18:98:13:34:d8:de:ca:e8:
d8:51:97:4d:1d:fa:c0:47:62:8b:35:f1:72:67:e9:f9:e8:ac:
5a:f5:b8:07:34:51:1d:53:1c:73:54:48:f0:89:b3:42:f0:76:
8c:25:61:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:58 2026 by rpki-client