Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
File: OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json)
Hash identifier: e7YQ3kCaYqAtRblJ3pp00VLzVfJGLYJiu3VZUKoP+/s=
Subject key identifier: C6:F4:79:71:BC:F4:C0:80:6C:B5:2D:0A:FB:B3:68:A7:EA:4F:DC:47
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial: 019D9A74D7A2C09B8C5F780F4C10B14B9836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
Manifest number: 07B4
Signing time: Fri 17 Apr 2026 08:00:41 +0000
Manifest this update: Fri 17 Apr 2026 08:00:41 +0000
Manifest next update: Sat 18 Apr 2026 08:00:41 +0000
Files and hashes: 1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: 8Xv0sTo2yRm4l+YxMwZ5W7KYdb0T4Wp/IAH1AXcDezA=)
2: g9D60eT4osY914CQ4MsZqD3p_Gw.roa (hash: 9V83sePRPvQWxHMpiIJhpUEoLq1Krp0NLVKYoKzzAfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d7:a2:c0:9b:8c:5f:78:0f:4c:10:b1:4b:98:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Validity
Not Before: Apr 17 08:00:41 2026 GMT
Not After : Apr 18 08:00:41 2026 GMT
Subject: CN=c6f47971bcf4c0806cb52d0afbb368a7ea4fdc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:48:df:ee:69:d1:1d:e8:c5:0b:ea:a4:5f:
fa:72:22:37:b8:7f:de:f4:0e:b8:ee:17:03:97:8f:
70:13:54:d3:99:32:9f:e3:80:b8:1a:dc:f3:99:cd:
1d:5c:61:4a:db:da:12:21:e3:0f:12:f6:64:a9:54:
7d:65:52:6b:5a:42:fb:4d:99:91:29:64:27:68:1a:
cf:c3:96:8c:d1:5d:70:66:16:a5:2d:4b:f0:78:a2:
b7:9b:bf:6d:6c:c2:27:dc:d6:d9:49:9f:96:c6:a7:
0c:e4:f4:b3:ad:51:c3:ba:55:18:78:6e:9a:d1:93:
85:4a:23:ce:cf:a8:ec:86:56:f0:48:25:05:c7:f4:
66:ad:ec:67:3c:13:c6:24:1b:c6:5c:1c:82:84:d0:
36:31:79:9a:f0:75:65:26:92:91:fe:44:46:90:f2:
ab:2a:d7:8d:17:7d:cc:27:73:75:b1:fe:5b:bb:01:
a7:92:82:ca:1a:6c:2c:44:5f:55:36:81:92:44:0e:
1d:93:f4:90:1e:70:2d:0f:ef:b4:e2:ea:73:df:98:
cc:d7:78:35:06:7a:b1:f5:27:62:af:b9:51:90:de:
ae:a2:d1:46:e6:c7:61:a9:52:a4:a0:07:d4:12:09:
72:b1:dc:0f:19:f1:80:f4:76:a3:52:42:b8:87:30:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F4:79:71:BC:F4:C0:80:6C:B5:2D:0A:FB:B3:68:A7:EA:4F:DC:47
X509v3 Authority Key Identifier:
keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e5:fe:9c:e1:43:f7:b8:7a:ec:35:21:69:8c:d1:67:9c:a3:
20:3f:6a:36:41:63:96:20:af:35:1a:d8:9d:2e:71:64:3b:3c:
65:4e:d5:3e:af:0b:6e:f4:c4:eb:4f:b3:8c:2c:7c:8a:8d:8e:
77:a7:bf:f4:b8:72:f3:76:53:c8:da:49:ad:6b:1b:aa:5a:e5:
9f:4a:4d:de:0c:b7:68:28:c5:dc:95:ea:36:18:8d:39:ba:0d:
90:79:57:20:e6:b0:d8:12:2c:bd:3c:f7:aa:c8:79:65:fa:4e:
59:e5:6b:a8:dd:1b:29:99:f3:da:3e:c1:91:9b:a7:d6:a9:f2:
db:cd:a3:35:35:2e:87:41:e8:47:7d:ea:75:31:32:bb:49:b5:
c5:dd:9e:12:35:08:ad:f8:39:51:8c:90:52:61:7d:d5:c1:bb:
88:e1:87:9b:47:36:66:d1:11:23:bd:b5:09:f4:ba:f6:1b:4d:
3c:b8:a1:fe:0a:19:a9:f3:35:03:14:26:33:bb:8d:4a:93:69:
e3:e8:45:8b:a0:51:e4:54:87:b6:3b:7c:5c:47:c7:37:67:29:
d2:9f:16:4a:f7:3b:21:a1:63:ed:2e:21:88:c4:86:7e:42:ba:
e2:f4:82:18:ce:f3:14:1c:2f:39:a2:77:31:6e:7f:f3:e2:5f:
5b:43:ef:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:03:57 2026 by rpki-client