Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: PcDOamPbEZ8t8vhI24MKCtVq8qselXYsJvpiJzlcRdk=
Subject key identifier: B3:9F:C1:09:99:4E:55:2E:05:E5:92:8C:22:25:0B:9E:7B:7F:7C:15
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 019CA90EA27F14DAA4019C2CE224F7398F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 04FA
Signing time: Sun 01 Mar 2026 11:00:34 +0000
Manifest this update: Sun 01 Mar 2026 11:00:34 +0000
Manifest next update: Mon 02 Mar 2026 11:00:34 +0000
Files and hashes: 1: AgJDjffcx13iFGg7O-6BTWa5Mi8.roa (hash: F0nKF0WSY8oAZJYmoA/vzmlCpRXcrLqKk16YPUwPz6o=)
2: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: IgoMv+zhz2EQIcuefLzzlBMJMK/PGADRTeDOmqR/OUk=)
3: _oWKFee77v9hsdPrrddU5tQ-R0A.roa (hash: RjU3IT8W3Ea39zUeKnm2sOei/TN9Q78ucxQb3LukHT4=)
4: xiMdBnBAVbzMONM7bWyZSTHXags.roa (hash: R9sPzPBlp0RJe+m5WxmViRNBW2hNOa0kbVaZ9zt/4VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:a2:7f:14:da:a4:01:9c:2c:e2:24:f7:39:8f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Mar 1 11:00:34 2026 GMT
Not After : Mar 2 11:00:34 2026 GMT
Subject: CN=b39fc109994e552e05e5928c22250b9e7b7f7c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5b:23:34:41:5f:cb:ff:d8:eb:d5:6c:7d:39:
e6:84:ab:af:6c:8d:91:0e:91:15:7e:0d:0a:05:a9:
2d:86:6a:09:ad:a9:7b:df:b9:47:a5:0b:ab:1d:9b:
36:0e:da:92:8e:77:52:5a:dd:d5:61:03:b5:7a:a6:
77:d7:b4:f5:f0:23:a4:cf:c4:ba:94:98:d5:1b:4b:
70:81:05:53:06:8f:61:b9:33:db:75:cd:ad:a3:27:
8e:f1:86:d6:50:11:8e:22:8f:1c:bb:4c:35:1d:7f:
d7:a1:d7:fd:10:cc:68:58:5f:ae:ab:66:d5:21:a6:
8c:f8:51:f6:45:8a:fe:ef:cf:94:6b:55:e2:71:8e:
7d:ad:cd:98:fb:08:da:36:a9:cf:e3:38:20:0e:6e:
82:e6:56:6f:b2:88:df:80:7e:dd:2c:a5:bd:bb:a3:
59:a6:ab:1f:d6:63:ef:d2:fe:3b:dc:3d:ee:42:06:
00:ea:b1:3f:27:66:30:9d:94:7f:30:42:4e:dc:f3:
eb:97:d4:86:a3:22:b9:15:94:38:01:f0:d1:6b:91:
51:69:f1:11:60:a8:47:33:29:6e:c6:76:53:26:a1:
e1:3e:88:74:34:df:f0:d4:63:8f:eb:4d:b3:05:fd:
a1:d1:2a:df:12:8c:8a:25:6f:55:35:97:68:b9:66:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9F:C1:09:99:4E:55:2E:05:E5:92:8C:22:25:0B:9E:7B:7F:7C:15
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:61:85:d2:ac:3d:ae:f2:8d:60:e5:01:c5:ae:49:f8:fb:70:
80:b7:40:e1:6a:ff:58:e8:71:9c:b0:28:aa:f3:4d:9f:2e:e0:
db:a5:44:f0:2a:96:0d:74:b5:b1:10:c3:4e:ac:a3:1c:88:46:
d1:52:02:64:01:8d:aa:9a:3e:4d:59:7a:82:1d:dd:b1:d6:1b:
d6:df:94:0e:59:8b:9f:af:32:34:aa:3c:d6:a8:5a:87:a3:47:
81:59:7c:3d:6a:e0:41:e8:5a:92:48:42:eb:21:ba:7e:82:4d:
4e:9e:43:e5:f4:7c:40:44:c0:32:86:e9:c7:40:8a:2a:5b:6a:
b2:7c:a1:f0:da:06:ca:f4:de:41:25:5c:c5:f1:c9:f7:26:e3:
34:33:f2:9b:82:83:e1:de:d5:c1:fd:f0:06:ae:f8:91:8c:ab:
58:3f:46:ab:8e:2b:36:25:9d:f7:47:bb:e2:b4:b2:d1:84:83:
0e:89:1a:1f:dd:06:22:ce:00:36:ac:6d:5c:fe:e4:09:7b:27:
6d:6f:c3:c8:7d:7a:fe:89:66:22:64:d7:49:cb:61:df:4f:0e:
3a:8f:26:fe:58:14:a0:eb:ba:ff:9e:1e:6b:f8:b1:50:5d:a9:
40:02:15:53:b2:d6:dd:b1:c6:0f:2e:f5:b2:aa:b6:fc:28:0b:
5a:a1:c0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:14:58 2026 by rpki-client