Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
File: OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json)
Hash identifier: LC7uv9149n6fEOlMgSzlBDU/MZIvRGXm8eNspHUIqwU=
Subject key identifier: 8C:CB:63:0F:29:AA:65:05:6B:FA:E1:E6:19:58:12:2E:64:1D:DE:FE
Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
Certificate issuer: /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Certificate serial: 019CAD597D35BF2C82785749BE4163F89EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
Manifest number: 0FA4
Signing time: Mon 02 Mar 2026 07:00:48 +0000
Manifest this update: Mon 02 Mar 2026 07:00:48 +0000
Manifest next update: Tue 03 Mar 2026 07:00:48 +0000
Files and hashes: 1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: LHO76k0LfftFCRJyMLQgYtHj3mTaHIU03+W8DvEbAaw=)
2: nZmUNx60tBq0xrGS7jldkZK6ecc.roa (hash: sjJTaq5f6jNHN9R7kd3r95jiTe0+BXzf/lUFmIOlkdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:7d:35:bf:2c:82:78:57:49:be:41:63:f8:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Validity
Not Before: Mar 2 07:00:48 2026 GMT
Not After : Mar 3 07:00:48 2026 GMT
Subject: CN=8ccb630f29aa65056bfae1e61958122e641ddefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:31:af:a7:cd:61:c5:6b:27:53:7c:41:83:
d9:70:9f:7b:14:17:9d:a2:27:af:13:88:ac:12:64:
08:d7:a6:d1:45:8a:68:61:1c:3c:a3:80:3b:e3:c3:
b3:b7:df:fb:d1:e6:b0:87:7d:79:10:bd:52:c5:e2:
ec:f0:d8:3d:c5:27:0c:bc:ca:35:82:35:94:4c:aa:
ce:c8:70:3b:d8:6c:23:af:af:0d:3b:45:27:bd:ac:
c3:ae:00:ba:20:87:94:ac:e1:35:bb:dc:67:fc:b8:
ff:5e:4c:31:df:1b:09:23:6f:bf:35:ff:3a:09:76:
f3:50:ea:3b:11:06:d8:fd:b1:13:d4:9c:75:13:9b:
39:02:d4:5e:52:10:17:05:87:2e:38:b6:80:17:57:
31:05:46:d3:3d:91:fd:81:7a:3e:fe:dd:12:f5:f8:
70:56:26:b4:b1:15:95:29:06:77:ab:bb:04:4f:59:
40:27:34:95:2d:f7:a0:67:d8:5c:7a:41:0a:5b:ed:
23:fc:dd:7b:5b:ee:01:b4:46:43:ef:9d:34:41:27:
dc:6d:8f:a3:d9:f4:70:63:ca:8f:d3:1a:79:e5:82:
eb:eb:7e:14:38:ac:57:26:29:0e:07:e3:47:ea:78:
e3:23:a6:ee:0c:27:0a:54:fa:83:83:d8:52:40:6b:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CB:63:0F:29:AA:65:05:6B:FA:E1:E6:19:58:12:2E:64:1D:DE:FE
X509v3 Authority Key Identifier:
keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:28:eb:1b:d7:ce:54:c0:c8:6c:b1:ab:43:aa:e0:1c:b5:6a:
44:0c:e4:e1:27:3d:cb:24:39:41:d1:7e:90:e5:75:c9:09:f0:
1e:ef:00:34:25:7e:cb:ce:75:5c:1f:24:23:d1:f2:be:56:b4:
64:e7:92:d4:3b:be:dc:16:6b:e7:87:8b:57:7b:a2:a7:c5:b4:
db:f4:fc:94:92:62:7f:40:5f:dc:10:48:bf:2d:d5:28:be:f4:
b9:52:f5:ed:da:c1:1b:b2:1c:37:37:de:4a:92:eb:83:df:2a:
ed:a3:d7:15:fc:9d:36:06:0b:cc:6f:c5:f5:2d:cc:c1:15:1e:
8e:d1:53:5e:0d:28:92:93:ae:fa:33:19:3d:f1:75:a6:14:ca:
e4:98:76:5b:5d:4e:9f:e2:5b:e5:19:06:79:99:2f:1e:eb:c3:
98:b6:db:0f:e8:d6:9f:a6:5c:12:2b:60:4b:b8:b5:2e:3c:5f:
5f:3a:2c:c6:f3:86:c5:16:68:54:d2:f5:c9:6d:2d:e5:68:19:
13:31:f4:22:95:fb:c2:1e:7e:d3:46:3a:d0:1a:81:fb:59:8b:
24:68:b5:27:40:e0:8c:f8:ff:a6:43:23:1e:50:09:e7:08:b9:
49:ab:58:f1:c3:3d:3f:93:fd:65:16:ce:42:6f:b2:09:fd:df:
68:42:90:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:55 2026 by rpki-client