Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
File: OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json)
Hash identifier: Xf/7i82nF80onfsKZ0iOsdocyIJGlXfJq5jc8fFoz5Y=
Subject key identifier: 19:FD:F9:0C:AA:6E:41:D4:98:49:70:8D:14:36:CA:C4:46:30:D6:B3
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial: 019CAAFD62E4D3DF105C2B73074E7FF97B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
Manifest number: 0738
Signing time: Sun 01 Mar 2026 20:00:58 +0000
Manifest this update: Sun 01 Mar 2026 20:00:58 +0000
Manifest next update: Mon 02 Mar 2026 20:00:58 +0000
Files and hashes: 1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: HolHlDg/NWpT1IipL97ZjMqDFhMUXIXQ1KLzrZ6pplQ=)
2: g9D60eT4osY914CQ4MsZqD3p_Gw.roa (hash: 9V83sePRPvQWxHMpiIJhpUEoLq1Krp0NLVKYoKzzAfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:62:e4:d3:df:10:5c:2b:73:07:4e:7f:f9:7b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Validity
Not Before: Mar 1 20:00:58 2026 GMT
Not After : Mar 2 20:00:58 2026 GMT
Subject: CN=19fdf90caa6e41d49849708d1436cac44630d6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:b1:1e:39:c6:69:3b:e1:5f:07:12:8e:6e:
e4:92:e0:2f:e5:c2:57:e1:bb:19:48:31:35:6b:2e:
94:26:49:db:b5:54:64:d1:12:d4:f3:9e:6c:cb:a8:
b4:81:af:1b:d8:03:4e:3c:c3:40:68:2a:02:53:8c:
e1:a3:89:04:8a:eb:7a:2a:eb:75:49:ca:54:6f:cd:
df:a5:d2:7b:68:93:d8:fa:18:26:ab:4c:4b:52:41:
dd:1e:d9:7b:f1:14:97:99:67:54:ed:d4:e1:27:56:
65:2e:56:6c:2f:3b:f8:3a:2c:7a:97:42:52:a2:f2:
ae:f3:19:94:24:de:e2:e7:74:ad:5b:73:d4:3c:c9:
e8:33:aa:30:4f:c6:ea:e5:24:bc:07:99:03:ee:14:
86:4c:fb:6a:30:bf:32:e8:ca:b9:2d:fd:f6:ca:19:
bf:6a:57:f3:53:1e:24:c4:e5:6b:19:65:b2:38:62:
82:96:5f:12:a1:09:8a:0e:c3:40:4d:45:a2:13:5e:
bc:cb:53:ce:83:75:82:02:ca:97:fb:79:9d:c1:e6:
09:b9:28:22:76:a8:4d:24:d6:a7:eb:4b:60:97:f2:
0b:a0:e6:74:c0:95:4b:fe:ff:9e:03:49:c6:fd:15:
9d:12:10:13:60:a9:b8:f9:19:7e:9a:59:94:49:a8:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FD:F9:0C:AA:6E:41:D4:98:49:70:8D:14:36:CA:C4:46:30:D6:B3
X509v3 Authority Key Identifier:
keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:62:c1:bd:7b:17:45:af:01:1f:91:c3:84:6d:5b:00:57:69:
2a:d8:62:9c:06:d0:dc:64:80:be:7c:47:af:52:08:7e:25:c9:
89:df:70:04:dd:9d:42:7f:8a:dd:32:b3:97:99:9d:44:d3:aa:
62:c5:76:93:61:97:36:db:3d:ba:e4:f3:ce:d8:93:f7:52:57:
a0:27:bd:fe:f2:db:90:36:93:81:7a:76:25:c7:92:8b:0d:5b:
7e:89:4a:f7:af:7f:e8:31:78:52:2e:ea:1e:0f:d1:ab:4a:30:
10:35:f4:92:21:00:a6:53:20:68:2d:a2:2a:44:4d:d0:47:a0:
56:59:0a:1f:10:b8:49:82:4b:03:90:b5:ec:f3:50:11:69:24:
71:be:0b:c8:29:18:b4:7e:52:d2:9c:e8:48:a0:4b:95:ac:15:
8a:99:b0:94:28:a1:3b:7e:d0:b9:29:69:66:1f:77:71:1d:99:
b9:9e:e0:15:6e:53:48:f2:4d:d6:25:c9:ba:b7:a1:11:ca:cf:
98:06:d2:37:cb:6a:9b:c4:23:98:cc:18:96:20:4c:17:17:55:
9f:4c:e2:14:e5:14:81:5d:d1:84:72:db:14:25:14:90:90:4b:
05:b0:0e:32:28:2a:8b:3c:eb:08:a1:a9:1f:e9:09:d3:cd:4b:
ca:5f:d9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:12:44 2026 by rpki-client