Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: PY2oH3+iqS6OmMqBUtCHmUhi7bNVoAoFXCu5esm/244=
Subject key identifier: 7A:D4:5F:53:30:BB:85:E7:2F:CD:AE:0D:9A:48:05:9E:49:64:9C:80
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 019EBEEC3EED7F1E184DEF8751F119620BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 0B7B
Signing time: Sat 13 Jun 2026 03:00:14 +0000
Manifest this update: Sat 13 Jun 2026 03:00:14 +0000
Manifest next update: Sun 14 Jun 2026 03:00:14 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: CG7Ij9V9rTo/1rk/JJDiYgXVVKus7xhkFZYrqTSdCzI=)
2: a8XnUOfpz8ZY7eKp-4bvRwhsoUk.roa (hash: ezF+mZ7l6Eoc1jbkNrsOHMCf2Y5Hcn8BAe23t9pa+WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:3e:ed:7f:1e:18:4d:ef:87:51:f1:19:62:0b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Jun 13 03:00:14 2026 GMT
Not After : Jun 14 03:00:14 2026 GMT
Subject: CN=7ad45f5330bb85e72fcdae0d9a48059e49649c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:20:09:06:25:bc:d9:b0:23:ce:28:ba:41:
02:3d:89:15:00:a0:b0:0d:af:4d:d9:d1:56:c3:cf:
ce:78:49:58:14:1a:d8:86:39:be:c5:0f:a3:10:55:
c1:48:54:cf:64:67:72:6b:27:7f:fd:ea:84:c7:d0:
7e:14:34:2f:2a:87:8e:78:0b:de:ba:4c:7e:0a:4a:
16:76:b6:10:82:4d:80:9c:4a:85:d2:c1:65:0f:85:
b4:50:fd:1e:c1:df:51:71:eb:7a:06:94:a7:74:29:
a1:3d:41:56:96:73:4d:80:35:a8:3a:5c:91:5c:ae:
5c:1e:2e:fd:6d:c7:e2:51:cf:81:3f:b1:fd:a9:0d:
64:2a:b9:7e:7c:d3:ab:91:dd:33:e7:89:33:25:04:
44:ac:19:58:d8:36:52:e0:b2:8d:3f:16:29:48:10:
8c:05:d3:0b:0d:d6:c3:3f:1b:6c:b4:6d:da:d0:db:
34:a4:38:7c:9a:f0:ee:d9:74:93:50:7e:02:36:17:
07:7e:19:f1:e6:bc:c2:f9:a4:86:bc:f3:4e:39:1c:
80:4c:3d:04:cb:a2:0e:da:cf:c5:99:69:aa:70:56:
b6:99:b4:dc:11:57:62:a6:80:9d:3f:14:14:35:c9:
e9:ea:06:d0:96:6b:06:7d:8e:54:eb:47:76:4b:9b:
03:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D4:5F:53:30:BB:85:E7:2F:CD:AE:0D:9A:48:05:9E:49:64:9C:80
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a5:f7:ad:96:cf:3b:f4:f5:f4:e3:6a:b0:96:a3:ee:cc:89:
35:11:19:b4:96:f8:40:0f:ca:5b:d1:52:0e:a4:3b:36:ee:91:
f7:57:18:c9:c4:33:34:71:96:f9:fd:0c:16:9e:06:28:5f:40:
d2:1e:e0:13:b1:f2:04:39:3f:12:33:3b:22:80:7a:90:55:b0:
b8:29:a3:62:fb:3a:43:c4:46:0a:ad:06:bd:ec:48:96:6f:65:
f9:19:d0:5d:23:3c:c3:e6:94:d0:43:d7:ef:6e:3a:71:2b:a3:
07:26:0a:52:b2:d6:4c:d9:de:41:56:28:d9:7d:47:44:56:ed:
59:9a:10:a7:24:e9:b4:48:94:3f:d0:53:96:79:03:1f:db:3c:
b6:93:b5:7b:e2:aa:a9:eb:f4:bb:ef:1b:08:81:58:9c:a0:88:
ed:af:89:67:06:97:cb:0f:63:c5:7a:50:f2:1b:4c:bc:82:f1:
70:1d:f4:6b:ed:83:fd:71:70:ea:29:cf:4f:3a:44:d2:8c:7c:
e0:95:ce:0b:9e:60:67:04:5d:93:7b:2d:aa:95:ef:8f:77:b6:
24:35:0b:42:eb:a3:a6:f7:b4:24:f9:e6:2c:e7:e0:86:8a:f3:
a6:5a:0c:6a:fd:32:c2:16:db:65:4b:64:02:7a:65:fa:66:5c:
1b:bd:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:52:04 2026 by rpki-client