Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: CauPvnhw9EWri83rjp2IAd+D3RZYASIUs67iAcLTdnI=
Subject key identifier: 04:D4:F9:E1:37:4A:6C:D5:04:6C:41:0A:67:A5:21:77:FF:E2:00:82
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 019CABD9FD6A8632CE6C1A4E6E9EF0F8F281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 0A68
Signing time: Mon 02 Mar 2026 00:01:55 +0000
Manifest this update: Mon 02 Mar 2026 00:01:55 +0000
Manifest next update: Tue 03 Mar 2026 00:01:55 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: IRN7zcXNaUy0faiLOcrDhkZ0qd3qX0pGUHL6J3F+17I=)
2: a8XnUOfpz8ZY7eKp-4bvRwhsoUk.roa (hash: ezF+mZ7l6Eoc1jbkNrsOHMCf2Y5Hcn8BAe23t9pa+WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:fd:6a:86:32:ce:6c:1a:4e:6e:9e:f0:f8:f2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Mar 2 00:01:55 2026 GMT
Not After : Mar 3 00:01:55 2026 GMT
Subject: CN=04d4f9e1374a6cd5046c410a67a52177ffe20082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:7d:ff:f3:63:34:74:9d:07:7b:f4:cb:eb:
6c:b9:46:fe:9f:8c:63:ab:54:1d:7e:f9:64:a4:c4:
7f:e3:26:dd:95:57:47:da:4a:78:da:49:66:ae:54:
4a:6f:35:2b:15:19:35:e2:1a:49:b0:c9:bf:b9:74:
26:3d:c3:0f:35:55:f4:1f:de:7e:31:2f:b9:aa:45:
ef:cb:44:f6:70:ca:11:4e:72:27:ff:16:eb:1d:d0:
78:0f:01:51:39:0f:c3:14:c4:62:8e:f0:4f:52:6b:
12:91:75:a3:e0:25:02:a3:fb:3a:dc:a1:a8:6b:17:
94:5a:40:df:d1:dc:b4:1a:52:93:da:4f:f2:ed:da:
f3:ef:2f:12:cc:71:bd:de:9d:6e:57:36:a1:99:bb:
63:1e:5b:ed:29:6e:ea:6a:79:88:ed:c7:0c:2f:b4:
f9:9c:1a:5e:a1:1f:0f:56:dc:77:77:5b:b1:8a:e8:
d8:3f:c9:e9:96:8a:2c:ee:0c:65:89:83:70:f1:20:
02:8a:86:75:5f:2b:a3:cb:15:9b:5e:9a:96:61:0c:
c0:28:db:75:b3:bb:e8:0f:d6:17:4d:b6:33:a1:61:
88:57:5a:ab:6a:85:4e:58:5c:fc:06:5e:b2:94:37:
a9:31:f7:2e:82:75:be:f1:9a:45:05:39:04:3e:4e:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D4:F9:E1:37:4A:6C:D5:04:6C:41:0A:67:A5:21:77:FF:E2:00:82
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d5:2c:03:0d:76:87:aa:3d:59:3b:a2:76:db:05:da:f2:8d:
4c:6d:57:af:a7:de:d0:2f:55:da:5c:a9:47:ad:e2:94:de:86:
4a:8a:53:8d:40:50:cb:b3:cf:5d:87:16:84:65:6c:a2:cf:2a:
4e:2b:a9:17:6e:b9:d2:43:e8:0c:c6:43:12:ff:ca:37:7a:23:
d0:5f:a8:fd:0e:3c:d6:8f:88:60:b7:69:e9:0d:83:a7:a6:bd:
ea:93:4b:10:a0:ee:a7:ea:94:c2:77:44:49:9f:9b:ce:aa:b6:
11:f6:77:d6:b0:cc:14:3d:2f:b4:8b:21:37:27:0d:a7:87:8c:
fc:db:aa:e2:8f:45:8c:30:25:3c:0f:80:34:44:cf:8b:24:49:
24:a7:8a:95:31:16:76:34:a2:c3:0c:17:18:2b:9e:4d:de:82:
d2:48:02:a2:ca:a5:5c:9c:d7:bc:ac:45:a4:65:7d:5a:74:06:
ae:4b:34:3e:ed:90:57:47:5f:51:e8:83:c0:49:90:e8:de:fe:
c4:ed:7b:59:10:f5:1b:7d:1a:ac:9d:8a:28:a5:2b:31:44:68:
dc:57:4c:a1:db:64:30:30:33:f5:ee:f1:de:12:53:ca:d6:be:
44:ab:a9:e2:cf:f5:a5:d6:fb:62:94:74:60:84:2e:42:9a:aa:
52:28:a3:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2f1qhjLObBpObp7w+PKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OTZkOWYzOTIwMWE0OWZhMTM2OTU4MmUxOGYxYTJiYjk2
NWIyODMwHhcNMjYwMzAyMDAwMTU1WhcNMjYwMzAzMDAwMTU1WjAzMTEwLwYDVQQD
EygwNGQ0ZjllMTM3NGE2Y2Q1MDQ2YzQxMGE2N2E1MjE3N2ZmZTIwMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/N9//NjNHSdB3v0y+tsuUb+n4xj
q1QdfvlkpMR/4ybdlVdH2kp42klmrlRKbzUrFRk14hpJsMm/uXQmPcMPNVX0H95+
MS+5qkXvy0T2cMoRTnIn/xbrHdB4DwFROQ/DFMRijvBPUmsSkXWj4CUCo/s63KGo
axeUWkDf0dy0GlKT2k/y7drz7y8SzHG93p1uVzahmbtjHlvtKW7qanmI7ccML7T5
nBpeoR8PVtx3d1uxiujYP8nploos7gxliYNw8SACioZ1XyujyxWbXpqWYQzAKNt1
s7voD9YXTbYzoWGIV1qraoVOWFz8Bl6ylDepMfcugnW+8ZpFBTkEPk4+LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATU+eE3SmzVBGxBCmelIXf/4gCCMB8GA1UdIwQY
MBaAFDiW2fOSAaSfoTaVguGPGiu5ZbKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTIt
ZTgwYTA1ZTM5ZjRiLzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTItZTgwYTA1ZTM5ZjRi
LzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNUsAw12
h6o9WTuidtsF2vKNTG1Xr6fe0C9V2lypR63ilN6GSopTjUBQy7PPXYcWhGVsos8q
TiupF2650kPoDMZDEv/KN3oj0F+o/Q481o+IYLdp6Q2Dp6a96pNLEKDup+qUwndE
SZ+bzqq2EfZ31rDMFD0vtIshNycNp4eM/Nuq4o9FjDAlPA+ANETPiyRJJKeKlTEW
djSiwwwXGCueTd6C0kgCosqlXJzXvKxFpGV9WnQGrks0Pu2QV0dfUeiDwEmQ6N7+
xO17WRD1G30arJ2KKKUrMURo3FdModtkMDAz9e7x3hJTyta+RKup4s/1pdb7YpR0
YIQuQpqqUiijyg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:22 2026 by rpki-client