Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: zYyMJVgDGOp3AOT7woUcuSZQPym2nIR44FqvNM6hYuc=
Subject key identifier: 95:43:0A:51:13:8D:1B:44:B9:3C:B2:E5:1F:8A:E3:D0:E2:77:2F:C2
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 019D97AAD8392A95930810CD82E8E9FE39FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 0572
Signing time: Thu 16 Apr 2026 19:00:49 +0000
Manifest this update: Thu 16 Apr 2026 19:00:49 +0000
Manifest next update: Fri 17 Apr 2026 19:00:49 +0000
Files and hashes: 1: 38pGZs7H26DrGSXKpy7NGMGvyNg.asa (hash: ZxC1UU+w8hDxkvYvkuN6y+g+zQIOTKFm51EQ8DphQn4=)
2: 3xF5zXncC4lUUlVcqraWFOzrS7Q.roa (hash: vnW96IIO7KZsSM+69xxxO0ynFQjIBJXcCGymfdrv09M=)
3: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: 6gMDS3rJvyogqQ79jWU+4AKb/NYj/Td5SZgFSjoULLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:d8:39:2a:95:93:08:10:cd:82:e8:e9:fe:39:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Apr 16 19:00:49 2026 GMT
Not After : Apr 17 19:00:49 2026 GMT
Subject: CN=95430a51138d1b44b93cb2e51f8ae3d0e2772fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:27:77:a4:4b:20:81:78:27:31:12:fc:e0:
0e:61:f2:f6:08:5d:9c:c6:1a:4b:97:da:2c:a2:68:
55:f6:40:34:4f:c6:04:bc:04:86:65:1a:ae:7a:e8:
4c:a4:03:87:32:76:b6:2d:63:97:6b:d3:26:86:df:
da:47:18:5d:9b:60:8c:3a:eb:f1:3d:ba:97:02:52:
44:d3:52:80:73:13:c9:cf:09:59:84:3a:e0:78:13:
0b:60:c1:e5:30:11:e8:d3:93:fb:ba:df:66:91:61:
a0:57:40:ed:ff:7d:f0:46:7c:55:85:7f:56:e4:29:
aa:59:8f:be:46:03:4e:60:98:b2:41:cf:0b:8a:64:
eb:ab:90:2b:83:f4:02:68:d5:82:b4:e8:00:f4:f8:
d5:4f:6f:2c:6e:78:e7:18:6c:11:2d:38:a9:e0:ae:
d8:cc:b8:4a:f1:c7:34:27:87:6c:00:80:2d:ca:9e:
d2:fa:5c:fa:4a:ee:6b:1d:b2:ed:e0:b4:fd:4f:fb:
97:e4:ce:93:76:68:01:1b:58:42:d5:27:4f:df:8b:
2a:da:bf:7b:76:c5:29:ce:d8:7c:39:48:00:62:28:
d6:cc:e0:16:6d:4a:cf:54:d0:c5:f5:48:5a:09:75:
20:b6:63:7d:8d:d7:1e:56:27:20:23:7f:c0:60:68:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:43:0A:51:13:8D:1B:44:B9:3C:B2:E5:1F:8A:E3:D0:E2:77:2F:C2
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:48:55:16:36:b7:f2:fb:d1:36:17:a8:5a:91:d1:98:36:bb:
38:83:d7:65:9a:22:fe:c6:0a:b0:75:99:fb:a7:93:9b:04:0d:
73:13:f6:b4:df:ec:81:bd:8d:90:46:bb:cc:b5:d4:73:6f:8d:
26:9c:68:02:70:fd:5b:10:44:1a:fc:0f:5f:b3:5e:98:8a:64:
d6:4c:2a:35:94:45:46:b7:49:14:68:01:cc:70:a2:12:aa:1f:
19:6e:5c:b2:71:8a:e3:c7:ff:ce:22:86:50:b5:77:ef:c3:c3:
55:8a:6c:19:1e:bd:bb:34:8d:c1:fe:c4:c1:92:7c:be:89:c2:
f5:20:4e:bf:94:16:be:75:89:f8:67:9d:f1:bc:5a:bf:06:34:
6a:bf:a2:2e:87:ad:74:f2:b9:4c:03:7f:04:76:80:8c:a7:20:
56:cc:f2:8d:95:bf:c5:35:2a:ab:81:fc:ac:63:be:15:b1:7c:
36:b7:f2:be:ca:b4:04:e9:47:e7:09:73:de:66:7a:a2:69:bd:
fd:92:c8:a4:9c:56:55:84:7b:4f:8a:6a:67:75:f9:56:c3:b8:
2a:69:64:d2:43:ef:48:e1:d4:4e:7a:60:fd:7b:9a:b6:c0:41:
12:d8:bf:56:d2:8c:fe:50:ed:ce:f3:60:32:c8:56:7e:48:93:
4b:4b:14:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:26 2026 by rpki-client