Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
File: oikngd9NLEc3PD_fY_u8mSdL2ds.mft (raw, json)
Hash identifier: jWW4BPb29Vcbtr2AlFCqjjJGPmQGLEszM3Mvb/0XYck=
Subject key identifier: 55:6C:3A:4F:43:6D:70:6C:69:B9:15:FA:74:76:99:B7:56:D1:15:9B
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 019CAC100C23E149924F3F4E1B5DF8F81F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
Manifest number: 0B
Signing time: Mon 02 Mar 2026 01:00:58 +0000
Manifest this update: Mon 02 Mar 2026 01:00:58 +0000
Manifest next update: Tue 03 Mar 2026 01:00:58 +0000
Files and hashes: 1: 8IaNzILRluMfhJGh9Sp2iK5EyEM.roa (hash: 3vEUGcIacC6NznoAP1opqDvHOyB7wnzG3LAD/dsWwPU=)
2: gD1shI7_ncKmAHHzuQDRToVphgs.roa (hash: b21XJdYw0N5m8mPRwkbYiHzi3HRna1r0I2/FnRhaR68=)
3: oikngd9NLEc3PD_fY_u8mSdL2ds.crl (hash: 4pTtSIX3mvnTz5VsTNlJk53gsvNNhb+UnXanzfV7lGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:0c:23:e1:49:92:4f:3f:4e:1b:5d:f8:f8:1f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: Mar 2 01:00:58 2026 GMT
Not After : Mar 3 01:00:58 2026 GMT
Subject: CN=556c3a4f436d706c69b915fa747699b756d1159b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:30:94:ad:8d:54:ca:a1:9f:44:2a:d8:ef:
17:60:4f:52:6e:f0:2e:0e:59:52:16:3b:4f:4d:cc:
b1:98:3f:e5:1e:a5:95:c2:40:54:19:25:50:2a:ea:
9e:39:15:13:11:ae:1d:86:8f:a4:5d:76:2e:fd:70:
a3:31:9e:01:64:34:08:3b:98:24:44:da:5e:de:f6:
be:65:2c:01:b3:cc:f4:5d:2c:1d:da:bc:89:af:af:
9d:60:5f:fb:84:25:8a:eb:2e:4b:e5:c3:b4:b2:9f:
b6:69:73:84:36:95:b9:e2:12:99:0b:66:37:79:cd:
22:fe:1f:24:14:1a:fe:df:ea:c8:d0:a1:98:7b:a9:
bf:02:5c:80:fc:ce:b6:3d:e6:33:7c:ce:9f:ba:d9:
cf:e6:d7:a8:a1:89:cd:ff:77:c0:fc:5d:03:7d:76:
18:38:a7:81:eb:15:0d:16:fe:7d:a2:6b:bb:16:2d:
48:52:9f:e8:ae:b3:b5:de:f6:e9:ba:3d:31:f5:b1:
0c:b4:28:25:f8:90:47:37:e1:08:37:01:df:d1:74:
7b:1e:65:a7:14:2b:0b:c6:c5:01:f9:34:f8:2e:c0:
14:8e:ed:f8:65:bd:a2:20:fd:04:bf:7c:e0:30:b5:
05:59:f6:4e:88:10:9c:46:c5:ee:9d:8b:3d:09:4b:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6C:3A:4F:43:6D:70:6C:69:B9:15:FA:74:76:99:B7:56:D1:15:9B
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:73:b7:45:b0:d1:ab:3d:8d:23:54:1f:19:49:26:d2:ea:3e:
aa:17:16:e1:4f:11:1f:74:8a:52:64:c7:d6:53:a8:4d:b7:fe:
fb:11:a5:22:49:24:57:dd:0e:79:f0:75:04:64:6f:0a:10:f0:
79:a6:ad:31:fc:a2:5f:7f:ad:98:4d:12:15:5e:9c:38:b5:c6:
33:ea:f4:ab:b3:57:cd:83:b5:c1:6f:19:10:8e:1b:0d:96:cf:
3f:c4:1d:84:e6:0b:a2:60:2b:6a:c7:63:d0:5b:0a:ac:d3:4c:
bf:9e:7b:86:fd:47:05:a2:c3:e3:fd:24:b2:34:b6:4c:38:a0:
e8:8f:d0:4c:de:60:16:09:6a:60:37:b7:02:b0:2a:73:4c:f1:
9b:a3:6d:0a:63:d4:01:1b:c8:b3:3e:9a:be:08:69:7b:5d:c8:
de:c9:e1:1f:56:83:46:99:f0:0a:c1:1f:76:6f:58:90:16:43:
9e:dd:12:af:58:53:6e:a1:54:0e:0a:8b:73:6e:c8:04:9a:92:
76:eb:6d:1b:0a:e7:58:a7:2a:60:28:d5:a1:cb:22:50:b4:80:
c2:88:e4:4b:6d:73:62:25:a8:39:79:ad:6f:8d:5b:68:7a:b0:
ef:21:d6:97:c6:7e:19:04:de:d3:18:19:bf:31:0e:24:7b:d5:
7c:40:9c:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEAwj4UmSTz9OG134+B8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMjkyNzgxZGY0ZDJjNDczNzNjM2ZkZjYzZmJiYzk5Mjc0
YmQ5ZGIwHhcNMjYwMzAyMDEwMDU4WhcNMjYwMzAzMDEwMDU4WjAzMTEwLwYDVQQD
Eyg1NTZjM2E0ZjQzNmQ3MDZjNjliOTE1ZmE3NDc2OTliNzU2ZDExNTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2owlK2NVMqhn0Qq2O8XYE9SbvAu
DllSFjtPTcyxmD/lHqWVwkBUGSVQKuqeORUTEa4dho+kXXYu/XCjMZ4BZDQIO5gk
RNpe3va+ZSwBs8z0XSwd2ryJr6+dYF/7hCWK6y5L5cO0sp+2aXOENpW54hKZC2Y3
ec0i/h8kFBr+3+rI0KGYe6m/AlyA/M62PeYzfM6futnP5teooYnN/3fA/F0DfXYY
OKeB6xUNFv59omu7Fi1IUp/orrO13vbpuj0x9bEMtCgl+JBHN+EINwHf0XR7HmWn
FCsLxsUB+TT4LsAUju34Zb2iIP0Ev3zgMLUFWfZOiBCcRsXunYs9CUsBoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVsOk9DbXBsabkV+nR2mbdW0RWbMB8GA1UdIwQY
MBaAFKIpJ4HfTSxHNzw/32P7vJknS9nbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NjY1N2YtMGQxNS00MjExLWEzMjgt
NjllYTgxNDU5NThiLzEvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS83NjY1N2YtMGQxNS00MjExLWEzMjgtNjllYTgxNDU5NThi
LzEvb2lrbmdkOU5MRWMzUERfZllfdThtU2RMMmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXO3RbDR
qz2NI1QfGUkm0uo+qhcW4U8RH3SKUmTH1lOoTbf++xGlIkkkV90OefB1BGRvChDw
eaatMfyiX3+tmE0SFV6cOLXGM+r0q7NXzYO1wW8ZEI4bDZbPP8QdhOYLomArasdj
0FsKrNNMv557hv1HBaLD4/0ksjS2TDig6I/QTN5gFglqYDe3ArAqc0zxm6NtCmPU
ARvIsz6avghpe13I3snhH1aDRpnwCsEfdm9YkBZDnt0Sr1hTbqFUDgqLc27IBJqS
duttGwrnWKcqYCjVocsiULSAwojkS21zYiWoOXmtb41baHqw7yHWl8Z+GQTe0xgZ
vzEOJHvVfECc3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:48:58 2026 by rpki-client