Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: Ui4osU0V/kMSR/NawJ321ISYnMoPRRgIEf/dT8hyAtc=
Subject key identifier: 84:60:90:9D:06:F3:5D:6A:D4:B6:2D:61:7F:A7:E0:2B:3A:5C:57:49
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 019CAAC64D4C5BE752F531782BE73C851D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 147A
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: ZU6f15wtJ5qqjgcZU59iI9ba4Nx9kxAlLFLSa8s7LVI=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4d:4c:5b:e7:52:f5:31:78:2b:e7:3c:85:1d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=8460909d06f35d6ad4b62d617fa7e02b3a5c5749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:f0:18:2c:19:ba:b0:78:f8:40:5f:5d:78:
53:0b:f7:e1:e1:81:41:20:fe:ea:84:1f:45:77:1d:
39:96:2d:d0:91:82:9e:fb:5f:b2:a2:ad:ae:7a:e4:
a6:71:80:8a:c3:be:fe:3e:a7:a2:a6:57:38:6d:1c:
bb:f2:f6:df:15:db:75:e0:4d:37:76:5f:75:e7:5f:
3d:fa:88:56:f5:ce:78:09:2a:de:3b:d9:34:48:e6:
d7:fd:ab:a9:7b:87:23:ee:25:ea:bb:95:29:43:1a:
f3:79:47:39:b5:d8:91:40:a1:9c:d6:31:fa:04:5a:
15:7f:28:52:1d:79:b9:ee:7e:10:e6:f9:bf:1f:03:
2a:54:c7:d9:26:96:ab:08:fd:b0:5a:ed:d5:65:62:
a4:ed:77:68:4a:e5:26:04:18:1b:88:d7:69:3c:41:
ef:84:b5:d1:8b:71:3b:96:12:07:9d:91:de:98:8e:
0b:c6:88:06:97:ba:a6:1a:54:c7:33:90:fa:23:e4:
f3:f7:84:c9:b7:f4:c3:43:d1:72:6e:b7:4c:c2:8d:
d2:e7:66:1e:a5:4f:39:26:0a:67:ef:93:6f:0a:b7:
b8:56:51:c1:76:3a:44:31:e0:e1:c4:25:3c:ba:51:
9b:40:56:b0:64:43:d9:e7:bb:c1:92:29:31:be:c2:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:60:90:9D:06:F3:5D:6A:D4:B6:2D:61:7F:A7:E0:2B:3A:5C:57:49
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a3:28:ee:36:85:d7:68:51:e6:cd:0f:a9:26:eb:21:95:2a:
5c:87:15:fd:c4:3c:60:b7:be:1d:1a:58:57:32:32:c8:7d:04:
84:19:bf:d4:c2:68:26:0f:67:cf:72:a2:c8:02:20:9a:d9:aa:
73:68:8a:99:ce:11:b2:d1:88:c0:fe:ae:ca:74:a6:7d:ca:d2:
01:63:03:f0:7f:17:73:12:09:a9:a4:97:5b:6b:f5:a9:e1:e1:
5e:58:35:71:c5:f8:5d:6b:98:4d:11:b1:f3:d3:60:a8:ad:82:
6d:cc:4e:99:ac:9a:a3:61:10:af:0f:f7:e0:18:0b:69:cf:da:
79:95:bc:32:8d:db:45:ad:68:f6:d8:f9:4d:1a:06:65:8a:06:
fb:84:ec:23:bf:7a:40:bb:ca:ce:c9:76:00:3e:14:35:17:91:
75:35:cd:4f:a9:73:4f:75:28:63:a8:ab:1c:17:d3:bc:ff:73:
37:e9:43:4b:31:08:d6:61:9a:98:10:f3:6b:d5:a8:08:88:f8:
cc:a1:aa:52:b1:95:76:e0:dd:11:54:d1:8b:d4:1c:c5:85:88:
28:7e:74:43:af:2e:4b:e4:20:76:c5:57:10:3d:95:3b:5e:03:
86:80:77:7c:3f:ab:af:5f:e3:2f:5d:fc:14:1d:f9:47:11:4d:
50:59:bc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:08 2026 by rpki-client