Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
File: oJRwOdnwgKQn91JcXQZvbPYhNPM.mft (raw, json)
Hash identifier: /wr+WVJZf4XaCvLphDO4b/0qMHteAgDexIv+5BTBUJA=
Subject key identifier: 91:5A:6E:1F:82:2F:59:9F:ED:29:99:3F:CC:34:56:7C:81:53:62:35
Authority key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
Certificate issuer: /CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Certificate serial: 019CAAC63496C46652CBA6F43B3EF57EB512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
Manifest number: 09C0
Signing time: Sun 01 Mar 2026 19:00:42 +0000
Manifest this update: Sun 01 Mar 2026 19:00:42 +0000
Manifest next update: Mon 02 Mar 2026 19:00:42 +0000
Files and hashes: 1: YQbAqJ7asgFGYO3z_k0v9YgK57g.roa (hash: RmvGtF2+R8JrPIka6fJbEr327La/wJJ+N/n7t1M8mPI=)
2: oJRwOdnwgKQn91JcXQZvbPYhNPM.crl (hash: qwZu11fb/fBFbIjytUWhc5moWoc0EN0T9CJ++bUv0bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:34:96:c4:66:52:cb:a6:f4:3b:3e:f5:7e:b5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Validity
Not Before: Mar 1 19:00:42 2026 GMT
Not After : Mar 2 19:00:42 2026 GMT
Subject: CN=915a6e1f822f599fed29993fcc34567c81536235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:f4:62:be:ef:e7:16:21:eb:bb:09:27:d1:
29:ab:7d:b3:62:e7:2d:0c:74:03:3e:5e:23:d8:0a:
90:b8:c2:61:b1:41:83:f3:4b:a2:83:47:f3:d0:8c:
77:aa:c7:43:7b:d4:87:65:c3:04:b0:c4:85:6f:03:
54:e2:5c:73:0a:9b:9d:2c:b6:f0:54:bf:b9:b0:2c:
26:05:8f:da:ef:f7:5d:20:9a:34:b8:34:02:8a:b4:
09:a4:10:65:7f:e3:e3:34:59:1a:f5:94:d0:7f:74:
92:df:27:e1:9b:c7:a0:fa:c5:70:7a:1f:38:63:31:
ca:b7:5a:b1:6a:b2:39:99:35:24:76:fd:2f:8f:b0:
44:2d:34:79:d0:20:8d:43:cf:73:d8:12:05:b2:3d:
f3:1c:7f:bc:b5:5f:15:dc:7d:f6:1e:9e:d0:db:18:
91:b6:29:a2:08:db:52:ec:4e:38:5c:99:c8:10:7e:
e4:cc:53:9d:10:f2:0b:c0:da:74:8b:2f:30:f8:76:
17:a2:42:63:97:48:94:5e:3a:39:6c:83:c7:23:ae:
15:e9:42:d4:49:4d:14:64:0d:14:89:dc:4e:e0:6e:
8a:50:e6:5a:f4:11:72:92:7e:a9:c1:54:f9:c7:c7:
c0:45:44:80:48:a0:6c:e8:8a:97:19:3b:88:33:d6:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5A:6E:1F:82:2F:59:9F:ED:29:99:3F:CC:34:56:7C:81:53:62:35
X509v3 Authority Key Identifier:
keyid:A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d0:e5:ad:22:d6:73:45:61:19:5f:bd:a1:10:75:22:6e:ac:
2d:10:17:d6:fd:22:a8:ea:9d:7f:fd:d3:89:8d:7f:0a:d8:08:
71:8f:62:14:9b:0b:a2:82:a7:ed:d9:70:45:29:40:8a:82:2a:
65:fa:cd:77:a3:95:8b:c4:c4:28:51:ad:e6:4d:23:60:db:45:
93:07:24:59:0a:38:6c:d0:3d:bf:c7:9f:4e:e1:d0:ea:6f:43:
f4:e4:16:60:99:fd:5d:26:fb:6c:97:47:59:41:a0:14:07:91:
db:af:c5:9b:d5:ee:3e:26:ed:8f:52:05:5f:9a:5a:b6:f5:25:
93:a1:cc:8e:16:00:ac:1e:aa:85:f5:7a:65:f4:bc:7e:06:03:
14:f7:ab:c6:10:77:74:ff:f5:63:fe:20:45:3e:55:a5:d0:34:
08:5c:3b:d5:7b:2e:7c:23:b0:9a:24:25:89:17:e1:b7:92:ee:
f6:62:57:18:47:c8:fb:ea:37:58:57:da:0b:61:38:70:d8:19:
5f:c9:6f:c1:53:dc:6c:48:d8:b0:72:1f:c5:d5:1c:61:61:90:
c2:60:12:7c:e1:0d:9e:2f:f9:b6:89:4e:32:72:0d:15:0d:28:
88:b5:06:00:fe:e6:c4:51:89:63:04:53:98:8f:c8:a4:f5:ec:
32:86:8a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:31 2026 by rpki-client