Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
File: oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json)
Hash identifier: +RyJrMuMr0clzlYpJzoSinRbPq1pInhvrfym81FzCgU=
Subject key identifier: F0:E2:A6:E8:2F:CA:99:84:3E:CF:81:17:34:9A:DE:10:B9:7F:AB:62
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial: 019CAB346E8140BE3FA795428E01A5B98D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
Manifest number: 1242
Signing time: Sun 01 Mar 2026 21:01:05 +0000
Manifest this update: Sun 01 Mar 2026 21:01:05 +0000
Manifest next update: Mon 02 Mar 2026 21:01:05 +0000
Files and hashes: 1: MkHKmr1CCJc2BcOqw-KghmADjCc.roa (hash: mZUESDCQ7pThBi0ruZGxU2DBV/MKZ2Q9xt3I5e6sTr0=)
2: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: H3UAOKMP8WVD93uKa3p/FVczayrEAjaPkwYIGfonXO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6e:81:40:be:3f:a7:95:42:8e:01:a5:b9:8d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Validity
Not Before: Mar 1 21:01:05 2026 GMT
Not After : Mar 2 21:01:05 2026 GMT
Subject: CN=f0e2a6e82fca99843ecf8117349ade10b97fab62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fb:89:46:72:13:4c:50:da:fa:4c:d3:58:aa:
ae:87:2d:ed:c7:5a:0c:62:8a:83:59:d0:ec:cd:be:
b1:39:a4:10:ed:42:e3:24:1f:69:cc:11:e7:8e:18:
40:63:cd:9e:e0:69:7e:a0:96:49:f4:2d:50:05:3f:
88:6c:cb:01:1a:90:08:f3:9c:35:48:cb:bd:eb:58:
cc:23:55:99:0e:b5:30:ca:96:57:00:35:88:9a:09:
15:d5:56:c0:6f:06:d5:2c:e8:0d:19:3d:a5:3a:0c:
d2:95:3f:22:a2:0c:4a:86:87:64:0d:5c:0e:bd:22:
03:92:16:84:c8:dc:8c:8a:f8:db:52:19:4b:2e:d6:
b3:2a:00:fe:18:1c:fc:ad:19:92:2e:d7:e4:af:7b:
1e:13:bf:c2:a1:67:f1:a1:c5:ae:58:d7:63:8a:4a:
36:09:66:9a:b0:42:95:bd:68:0d:d3:19:3f:67:60:
55:06:88:1f:de:29:f7:55:86:0a:d6:3a:7d:81:ec:
e4:d6:00:d7:4a:0f:0b:5b:91:61:48:c7:de:7f:66:
61:f2:36:13:1b:60:05:30:a8:ac:54:89:67:58:5c:
9d:18:18:f0:68:8e:9e:fd:05:2c:8d:1a:41:2a:59:
ce:43:f5:cb:60:b4:a4:2f:c4:8d:f2:95:22:83:7e:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E2:A6:E8:2F:CA:99:84:3E:CF:81:17:34:9A:DE:10:B9:7F:AB:62
X509v3 Authority Key Identifier:
keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fb:4e:c4:3b:20:28:2d:4d:23:bf:20:8d:12:b2:48:96:a6:
35:d9:17:90:8d:17:af:b9:45:59:f5:ec:0f:76:8f:e6:fa:c8:
30:9d:fa:93:23:66:46:46:2d:7e:17:ce:52:40:cc:ac:f9:60:
83:33:cc:8d:a8:cd:1a:53:82:34:63:48:b4:0e:ac:85:8a:af:
94:36:aa:54:d4:ff:82:14:67:4b:ad:1a:4d:16:ad:3c:29:ff:
87:04:01:22:85:02:e5:00:90:1d:64:c0:f1:47:a9:9d:4a:01:
8f:7b:70:f0:f7:09:60:ef:bd:7e:cb:87:2a:0c:a4:48:86:44:
b8:99:54:2a:86:1a:db:ef:6e:ae:0e:1e:07:43:3b:09:21:cb:
41:c6:71:69:72:39:51:c5:07:64:4c:49:a4:45:e7:84:51:c9:
31:71:1d:94:8f:e6:75:b6:6c:7c:cb:b7:e4:5d:69:42:b9:1a:
f0:d5:e0:3d:ae:86:b7:34:ea:bb:9b:89:59:52:e8:51:64:c2:
5c:75:f8:af:4d:99:e9:a6:c4:43:bc:a0:e9:c3:49:1c:24:70:
ad:06:38:56:be:e7:dc:2e:aa:59:0b:b1:f8:3e:f3:be:54:55:
3a:44:e1:60:fb:0a:7e:73:e2:76:f2:c8:3a:27:5a:4d:17:ec:
83:be:5e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:11 2026 by rpki-client