Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
File: OXbmqwhMnu7ehuKva95yFSdLlac.mft (raw, json)
Hash identifier: mHRodr7oY0WKfeDNtgBuh8AztpaN4BC1qwUjXwY0swo=
Subject key identifier: 0F:4D:65:56:6B:B9:EE:7E:9E:0F:88:B3:A9:58:04:3F:6A:E8:5B:E9
Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
Certificate issuer: /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Certificate serial: 019CABD9962C879494C81145DE5BED535322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:29 +0000
Manifest this update: Mon 02 Mar 2026 00:01:29 +0000
Manifest next update: Tue 03 Mar 2026 00:01:29 +0000
Files and hashes: 1: 5W8H3hdhAkKM671WDMnpy7cCJuY.roa (hash: NKgi04O8geWs7LDTxcDB8TiJxs4zQ7+9gL3r7rWfDxU=)
2: OXbmqwhMnu7ehuKva95yFSdLlac.crl (hash: rhIwF+fnCSkv5634A2VacENX5Hh4IksD1X9JWqmVinA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:96:2c:87:94:94:c8:11:45:de:5b:ed:53:53:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Validity
Not Before: Mar 2 00:01:29 2026 GMT
Not After : Mar 3 00:01:29 2026 GMT
Subject: CN=0f4d65566bb9ee7e9e0f88b3a958043f6ae85be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:aa:5d:e8:6b:b9:21:81:72:af:7c:1c:d0:
ab:24:e7:ac:72:1e:c4:69:a1:a3:2a:8b:a1:20:e4:
2f:e1:88:a6:16:15:09:f0:bc:ae:23:b4:e7:7d:be:
4f:65:8f:73:86:e5:cf:74:41:25:e1:1b:36:c0:b3:
40:58:10:c3:92:99:4b:ec:ca:87:d8:2f:3a:53:63:
2e:e4:e9:f5:6f:7b:73:9d:6f:b5:6f:94:e3:05:81:
7d:9c:64:89:34:ef:9b:f3:3c:3b:03:19:5f:db:0a:
25:67:62:1f:14:ef:a4:85:71:b0:af:a6:9b:3f:80:
fa:00:05:0a:3c:00:d6:f9:04:c6:29:29:87:b6:85:
84:d1:81:8c:35:ce:f7:ad:c0:15:01:72:c0:03:22:
be:31:54:78:30:aa:b2:fe:48:f8:f2:6f:2e:44:4d:
13:2b:2e:3b:5f:65:6a:ec:35:7f:f6:d7:b3:ea:f9:
72:0b:da:e8:6a:df:d2:8c:fe:23:01:46:9e:8a:41:
09:ac:ab:0e:c6:0e:e8:68:04:a8:7f:fe:fe:ec:3b:
43:17:79:fe:e0:82:6e:bf:4c:ea:5a:d5:33:71:77:
ca:d1:3d:9c:2f:75:6a:51:01:c3:81:3c:99:a3:48:
23:db:d6:71:c5:e7:eb:72:85:d7:6c:49:2b:0b:75:
97:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4D:65:56:6B:B9:EE:7E:9E:0F:88:B3:A9:58:04:3F:6A:E8:5B:E9
X509v3 Authority Key Identifier:
keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9a:99:54:ed:9f:70:6b:9f:2f:ea:9b:1a:79:ba:a5:ba:3c:
b6:a7:50:54:3a:98:c3:e9:c3:71:de:4d:94:2c:9b:1a:82:1e:
4f:66:eb:18:2d:01:0b:39:3b:4a:be:76:67:e7:58:80:a2:52:
77:32:0e:4f:bb:1b:34:6f:5d:91:89:81:f0:b0:67:66:b0:c5:
a3:17:10:e6:5f:1c:52:db:00:fa:3c:99:18:46:04:2c:e8:f8:
d2:df:b8:0c:2f:be:f3:42:ed:40:45:28:6e:49:cc:db:89:d0:
c2:71:8c:cb:9c:a7:cc:d9:b6:c2:fc:c6:47:64:5b:b3:8e:fa:
c8:81:4d:1a:e6:18:00:29:32:a8:64:8a:d0:ba:7a:ba:3b:2b:
5c:41:4a:e3:ec:0c:45:cb:28:04:21:bc:82:18:1c:1b:8e:12:
19:80:b7:71:b1:fb:1d:e7:81:a5:8f:83:9a:07:0e:06:03:f9:
be:48:b2:ba:87:2d:fc:b0:eb:10:16:59:2a:2c:89:0b:47:f4:
8e:e4:f2:0e:cc:60:91:70:b1:a8:3f:b8:01:95:42:1e:ea:a6:
6f:96:f3:f3:ee:73:d7:6a:22:af:e0:cc:67:19:28:f9:c8:c3:
72:8f:cf:a2:6f:6d:0c:80:16:9c:93:93:d3:8c:6f:4d:db:ba:
3f:54:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:04 2026 by rpki-client