Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier: fE31pRdO/2zoTAioyyj4mdRq9LFoho5LVVvVaZok4Lk=
Subject key identifier: 3E:3A:1E:BD:72:21:23:27:E7:E5:CF:91:2A:26:88:2B:A6:96:45:04
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial: 019CAC7DF32AC4EF12281A04825D52A4491E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number: 1285
Signing time: Mon 02 Mar 2026 03:01:01 +0000
Manifest this update: Mon 02 Mar 2026 03:01:01 +0000
Manifest next update: Tue 03 Mar 2026 03:01:01 +0000
Files and hashes: 1: DSJIzkN5q_rXnrR_sSD03uwjKLk.roa (hash: RgGL0auNuSKpj8cmVmNM1N0Gw/VXT4lpjwBiD7OAxgM=)
2: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: /SCbkHTkHgBzRtIZis8iQMO1LR6cu4zMb6HzcZxuuz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f3:2a:c4:ef:12:28:1a:04:82:5d:52:a4:49:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Validity
Not Before: Mar 2 03:01:01 2026 GMT
Not After : Mar 3 03:01:01 2026 GMT
Subject: CN=3e3a1ebd72212327e7e5cf912a26882ba6964504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:a5:94:74:bc:50:4b:a0:3b:26:50:88:9e:
1b:9d:77:d6:b8:bd:67:35:1d:e3:13:f1:76:ef:89:
f1:3f:67:dd:18:98:92:0e:0e:88:9e:17:2c:09:33:
24:63:5f:0d:07:99:9a:8d:c4:05:33:cc:af:2d:30:
9c:3d:fb:ff:90:c8:97:44:3b:36:e5:fb:f8:16:bd:
81:43:5a:1e:9a:66:88:e1:75:bf:2e:26:04:0c:b4:
58:70:dd:9d:3d:9a:9c:56:1e:ef:1c:16:30:29:57:
ee:a9:ca:ec:39:3f:ca:a6:9a:6f:f6:e5:84:c1:43:
a9:9a:9a:31:b6:6d:32:ea:b9:cc:a1:ef:39:ab:50:
fa:3c:72:49:54:93:b2:6e:18:24:76:3d:2a:b5:19:
44:fb:85:ef:4a:a3:9c:8e:6d:28:c5:60:f0:11:5c:
7c:20:05:58:18:7a:c1:f4:f9:86:ec:e2:ec:f1:d0:
51:c7:39:bb:d6:0e:0e:18:d7:00:a0:8a:6c:d0:30:
72:d9:9f:cf:60:89:64:a4:6a:78:a2:10:0e:0f:d0:
ca:4d:66:a9:1a:cb:bd:7a:8b:25:ca:22:55:9e:4a:
bf:a7:12:3d:90:01:b7:d2:2c:d0:8e:f6:d4:01:93:
f2:af:01:31:25:68:82:21:01:72:c2:2f:2f:9d:60:
bf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3A:1E:BD:72:21:23:27:E7:E5:CF:91:2A:26:88:2B:A6:96:45:04
X509v3 Authority Key Identifier:
keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c4:88:b3:63:ef:2f:c3:8d:42:cb:3b:a2:bf:df:90:54:0c:
0c:8b:cb:5b:ce:aa:a5:92:62:60:3c:ad:7d:c6:e4:2f:4c:28:
7c:24:83:cb:1a:7e:eb:f3:c1:bb:9c:d7:01:78:12:b1:2c:05:
bd:55:c0:f0:c0:e9:7d:6f:a0:32:af:ae:17:d0:97:8f:de:55:
07:ad:76:06:02:09:5c:fd:ea:e6:ff:52:1d:a6:3c:53:23:72:
0e:cf:c6:1c:08:f5:9f:7a:20:66:c1:07:e6:7e:45:40:f9:14:
fd:42:14:8f:2b:1c:5e:6b:87:c2:cd:e5:9e:c0:c5:84:65:7a:
a9:a6:bb:5a:21:91:5f:f6:02:bb:20:90:78:f9:80:20:57:1e:
44:c7:06:03:65:1b:0c:bb:e4:ca:4a:d5:e1:f3:b8:e9:57:90:
90:d0:36:68:ee:5b:af:de:d4:ea:de:8b:7f:4e:76:8b:78:ce:
bd:18:77:7c:7c:ce:20:55:bd:c6:7e:1c:37:1a:cb:d1:0b:1e:
aa:9d:36:0f:4c:20:0b:9b:82:7a:2c:bf:07:ef:f4:0a:98:26:
02:29:d2:77:03:63:72:e0:1a:1a:45:30:cc:08:17:02:57:ca:
32:31:29:d6:67:3d:ff:6e:3e:f0:14:c6:ea:b0:2e:d0:a2:b2:
84:04:62:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:10 2026 by rpki-client