Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
File: OJDnpFSaVx9otoja1PXO2OUpBos.mft (raw, json)
Hash identifier: 0iW+yhfwGl3KRJgj5fV7AAFl2aRKKlEgf9whQLIoGak=
Subject key identifier: AE:6F:2F:E0:38:EE:D7:2F:80:6A:50:2B:37:7E:86:32:5A:72:20:36
Authority key identifier: 38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
Certificate issuer: /CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Certificate serial: 019CAA21E7C3F35CF1768C77B3D17C6AEC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 16:01:14 +0000
Manifest this update: Sun 01 Mar 2026 16:01:14 +0000
Manifest next update: Mon 02 Mar 2026 16:01:14 +0000
Files and hashes: 1: OJDnpFSaVx9otoja1PXO2OUpBos.crl (hash: DV8MfYYbQNL997B3fRcqf0dJL8676M8XAtjG7fEQOqs=)
2: YyuaBUM2DfGwrhhloV5aHuzBCI4.roa (hash: CVz/owS5fTPJx5btZA+MB4GhmLyvwbOLmAgKI8HaW2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e7:c3:f3:5c:f1:76:8c:77:b3:d1:7c:6a:ec:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Validity
Not Before: Mar 1 16:01:14 2026 GMT
Not After : Mar 2 16:01:14 2026 GMT
Subject: CN=ae6f2fe038eed72f806a502b377e86325a722036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:c2:22:eb:51:3d:57:61:99:1c:ef:23:8a:
b1:b7:a6:e1:7a:ca:78:68:b8:40:0c:73:f5:ad:ab:
dd:7f:af:84:1b:3a:17:3f:00:54:5b:44:f4:43:5f:
a1:2a:2e:8e:53:d2:3d:32:f2:5e:c0:bb:b9:d5:39:
a8:b7:12:3a:66:e2:1b:46:a0:be:83:3b:7d:e3:29:
37:79:14:95:8b:54:64:88:e6:3a:1d:26:9a:f5:0c:
c5:de:a4:76:ab:00:7c:92:dc:7e:f5:b6:40:87:af:
0e:e3:0c:97:a3:a7:d3:14:1f:30:10:e7:fb:8d:92:
9a:26:64:e4:8e:bf:d2:f9:60:8c:75:15:57:21:00:
d5:cb:fc:48:da:cf:a7:4d:6a:0e:a0:18:5d:e0:1c:
30:fb:8c:c9:d0:87:7f:09:8b:0e:ae:eb:3b:c7:7d:
55:15:da:e6:4c:6a:23:78:bc:8e:0b:7a:20:ff:a9:
81:13:7a:82:81:64:a7:54:05:73:2a:ff:d5:e3:71:
6b:b2:6c:ce:61:1b:c0:24:96:a2:09:41:b8:e4:05:
89:3e:cf:ac:08:01:03:9a:52:1c:c1:b8:e6:05:15:
69:30:cf:33:de:81:63:19:ca:c1:78:b9:16:eb:8d:
aa:66:60:76:cb:36:10:af:cd:ee:d8:95:0a:33:ae:
33:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6F:2F:E0:38:EE:D7:2F:80:6A:50:2B:37:7E:86:32:5A:72:20:36
X509v3 Authority Key Identifier:
keyid:38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:19:96:13:06:92:90:29:46:8e:3c:30:2e:34:bc:29:b3:5a:
71:43:5d:36:ab:b7:47:9d:21:a6:0e:07:c3:f8:83:0a:18:eb:
6d:55:f3:e4:10:99:ab:8a:53:38:e7:ed:6a:e5:fa:de:24:a7:
f0:79:43:db:d6:80:8f:e6:ba:29:9e:35:62:4c:c4:df:b4:72:
67:96:1d:a5:5a:13:62:15:15:18:7a:9f:1c:1b:6e:01:1b:4c:
1e:45:bb:53:73:88:dd:a4:60:18:b4:a0:6d:9e:fe:14:5c:e7:
53:5e:46:9f:7b:3e:a9:75:a4:22:72:6d:1a:ed:64:3e:6b:43:
81:3f:2f:61:d0:d2:a5:cd:59:73:8d:e3:b7:0d:a0:c9:a5:73:
81:8f:37:5d:97:b2:b5:c6:af:8d:78:3f:c5:fa:b4:30:f0:61:
d0:a3:39:7b:c6:f9:46:9a:a4:cd:95:a8:ff:e9:c7:b4:4a:7a:
42:f5:33:08:a6:be:9c:d3:fe:ab:97:f9:1a:27:3d:fd:78:e5:
71:e4:98:b4:bf:b5:43:a7:a5:79:b7:9b:fd:14:77:b1:18:e9:
20:03:9e:b7:d8:ff:ac:7e:b6:07:19:f7:8c:55:54:4b:86:4a:
73:90:46:00:c7:83:2e:77:5c:82:12:c7:28:28:f1:26:b3:1d:
eb:f0:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:46:35 2026 by rpki-client