Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
File: Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft (raw, json)
Hash identifier: 0Zs0povZfQFd9j3Apm+RK9WHT/ELYRjXm09E8hG+A1Y=
Subject key identifier: 9C:DF:2A:6F:6A:51:B5:92:11:6D:33:8E:C2:F8:9A:CB:FA:C5:80:6A
Authority key identifier: 3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
Certificate issuer: /CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Certificate serial: 019CAB3449BD1C06FC4EE45FCEFEBD9CC731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
Manifest number: 11C3
Signing time: Sun 01 Mar 2026 21:00:56 +0000
Manifest this update: Sun 01 Mar 2026 21:00:56 +0000
Manifest next update: Mon 02 Mar 2026 21:00:56 +0000
Files and hashes: 1: Ci7T1oVNHc8tbnfw-kXncqBB7cQ.roa (hash: Yv125oxquEywJASaTcgTVq9eUxE+9scmAg56tEvF/Ww=)
2: Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl (hash: 2GanLQEBYWBcGhoMQnkpxcx2TfdoTG/iTTLM0t04VPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:49:bd:1c:06:fc:4e:e4:5f:ce:fe:bd:9c:c7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Validity
Not Before: Mar 1 21:00:56 2026 GMT
Not After : Mar 2 21:00:56 2026 GMT
Subject: CN=9cdf2a6f6a51b592116d338ec2f89acbfac5806a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:17:40:4e:e6:0f:f8:30:1f:75:65:b9:86:
50:18:b4:89:94:24:e1:b4:dc:34:17:45:98:f4:64:
0a:fb:69:05:59:37:c7:e0:47:c2:84:cf:74:1a:c0:
37:b2:65:53:ce:60:44:96:9d:0b:05:3b:8f:19:dd:
64:f8:6f:f5:c6:87:96:ef:f2:64:33:90:99:ee:59:
08:80:d5:59:12:bb:de:d9:fc:b4:71:7d:3a:28:d6:
6c:dc:f1:61:66:52:98:59:33:5f:ca:4c:18:f0:7b:
af:64:47:48:c5:47:b5:e5:b7:04:c5:bd:d9:5c:9c:
4e:b8:2a:be:1e:f9:f6:c4:2e:36:7a:23:fc:9a:d6:
67:99:a9:fa:3c:2f:59:2a:d5:75:f0:e1:5e:4d:93:
07:4b:b2:da:30:fb:f7:91:7d:7a:ad:86:44:2e:93:
f3:4f:2b:c3:08:71:b9:9b:f9:74:8a:ce:af:c5:5d:
cb:f5:f4:51:89:98:8a:b2:7c:77:3d:88:5d:b5:8e:
0f:1b:3e:21:df:f7:ee:eb:b4:3c:ef:60:76:97:12:
89:28:aa:3d:e6:ef:d8:90:b0:a3:35:2a:c7:e0:26:
a1:98:bb:dd:7c:9e:b6:76:a1:cd:73:b0:68:e4:7a:
22:c0:65:14:22:3a:18:9a:34:04:43:72:2b:a5:a9:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DF:2A:6F:6A:51:B5:92:11:6D:33:8E:C2:F8:9A:CB:FA:C5:80:6A
X509v3 Authority Key Identifier:
keyid:3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0d:bf:66:e0:9a:25:ea:59:3d:b6:11:b3:8c:05:a0:9d:62:
56:c4:fb:ff:70:57:08:f9:90:aa:36:28:cc:3e:bc:4b:bf:f5:
53:9f:5d:14:b1:e2:53:b5:b9:2d:25:7e:53:f0:e6:9c:52:f7:
8d:ef:b1:78:1b:39:b5:15:4c:6b:d7:54:dc:63:f1:39:8a:78:
bd:74:5e:d3:6f:20:48:98:b0:2d:5d:91:1c:7f:11:0c:e7:9c:
25:ec:de:d5:9b:10:7d:80:ee:6a:fe:72:c0:f6:83:9d:10:ea:
7a:b1:2b:9e:57:1a:fe:0e:93:91:65:89:19:93:85:ec:44:c8:
ef:ff:14:ef:51:a2:ef:21:b0:4b:54:62:35:ca:a1:59:05:f8:
c4:d8:64:3e:03:9f:f5:81:3b:6c:ec:7b:12:42:fa:74:4e:98:
24:33:ea:d2:5d:a5:6f:8f:b7:33:54:ce:ab:6f:23:a8:2b:30:
f3:bd:34:5f:8e:8d:d2:8d:f4:d9:4f:ac:f0:d5:2d:2f:39:ba:
28:eb:ef:95:5f:bc:cd:49:60:cf:ab:15:39:db:43:2a:df:b8:
c0:c7:d7:35:93:de:ba:2b:a9:0f:e8:2f:10:11:a9:4f:18:bd:
97:d3:a1:62:52:97:7a:0b:f3:c9:17:64:08:4c:57:19:8f:2e:
d9:a3:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:44:08 2026 by rpki-client