Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: 0HeNxBeBJG5Zo8/cfKhPqpQ44BbQxZw/GR04bhLIvdw=
Subject key identifier: 59:4E:06:CA:C3:35:DF:12:02:BD:3B:8A:6D:6F:3A:EA:C7:1C:D7:58
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 019D99625B08F6C9737D6629E50691C067AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 0AE3
Signing time: Fri 17 Apr 2026 03:00:53 +0000
Manifest this update: Fri 17 Apr 2026 03:00:53 +0000
Manifest next update: Sat 18 Apr 2026 03:00:53 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: lSD2wZqJW6lQfB/VgPxaFkfY9Y4F1yIPRiNWYQOWZq0=)
2: a8XnUOfpz8ZY7eKp-4bvRwhsoUk.roa (hash: ezF+mZ7l6Eoc1jbkNrsOHMCf2Y5Hcn8BAe23t9pa+WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:5b:08:f6:c9:73:7d:66:29:e5:06:91:c0:67:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Apr 17 03:00:53 2026 GMT
Not After : Apr 18 03:00:53 2026 GMT
Subject: CN=594e06cac335df1202bd3b8a6d6f3aeac71cd758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:4e:a5:ca:3c:46:6e:30:96:cf:7d:8b:58:
f3:51:4c:68:61:a6:4c:b3:d8:b5:9f:01:94:45:58:
62:a8:c2:71:31:45:14:0e:0f:97:fa:5d:4f:27:6e:
d3:e6:f3:35:60:16:0b:ef:d4:b3:e0:83:3b:83:35:
51:39:6c:28:84:7a:23:62:13:c4:18:c9:71:4c:1b:
3e:80:a8:24:f6:20:40:61:f9:f8:ef:1c:95:ee:0a:
9e:34:4a:ad:76:10:62:21:d6:c5:d0:01:43:85:3a:
a5:f1:14:b9:20:76:c0:4f:c2:1d:79:c1:cd:c0:38:
aa:c1:05:2d:27:e8:79:72:fa:7d:21:68:49:89:19:
d2:89:5a:6d:dd:52:80:e6:58:bc:a6:e0:13:7c:7b:
2a:77:09:ca:59:51:3e:22:f7:09:47:54:d5:09:ac:
60:0e:ff:0f:55:31:52:57:22:92:23:a1:0c:ea:42:
69:03:2d:56:c9:58:38:ad:25:b4:20:21:05:ed:61:
27:39:c0:5a:8b:9a:89:5b:68:c7:f3:d7:96:13:b9:
23:6f:ba:d8:ec:61:a6:e4:1d:e1:bc:71:0e:f2:48:
a5:af:d2:12:75:c9:49:7d:fe:3d:36:63:ff:84:36:
fb:50:ad:32:46:64:ca:71:4a:01:e1:ef:50:66:69:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4E:06:CA:C3:35:DF:12:02:BD:3B:8A:6D:6F:3A:EA:C7:1C:D7:58
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:91:db:cd:8f:c9:ca:d7:30:cc:3c:11:ce:2f:5c:94:c5:41:
d6:bd:3d:2f:f1:79:18:f2:a6:fb:23:df:f1:85:e2:4c:01:d2:
9a:5d:96:8d:31:1a:a6:19:c0:5b:63:71:0e:a0:30:9d:0b:72:
6c:9d:07:8a:3e:f8:fd:63:3f:15:fe:bb:79:df:ef:52:d7:bf:
ae:cd:c9:5d:ac:4a:c6:51:a3:59:2d:b1:af:75:9f:26:e5:17:
4b:a2:70:b1:d9:5f:3b:77:8f:5f:ec:bb:13:ce:a4:99:56:f4:
f2:5a:89:4d:63:59:37:41:d8:19:e2:c8:b2:d4:02:5f:29:ea:
65:69:b1:ce:4f:ac:b1:1d:ea:22:3d:1d:55:f4:00:45:fa:5b:
82:e0:ff:34:90:a0:07:9f:1e:83:65:25:97:13:80:4a:6b:da:
2c:fe:3d:e8:ad:94:f3:63:48:97:40:fa:74:3f:d9:30:85:b2:
b0:8a:5f:4c:2d:2d:67:07:66:38:99:53:99:ec:7f:e9:a9:e5:
ec:0b:9b:54:11:0a:d3:5d:a9:4f:11:13:78:00:7a:9e:71:fe:
e1:f2:31:ad:59:3c:95:3b:87:d3:02:73:00:3d:63:39:79:9d:
10:d0:62:f0:30:ce:76:04:b3:13:25:21:c1:1f:4c:ca:e5:f4:
1d:79:97:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:00 2026 by rpki-client