Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
File: ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft (raw, json)
Hash identifier: zHbI5WVnYPaxzmZ7m40AiUUeRMoCO/DvXDHYdSU6ACw=
Subject key identifier: 56:17:86:8E:6C:D0:48:B8:73:D3:D6:55:EC:41:5A:6E:3E:A8:B6:13
Authority key identifier: A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
Certificate issuer: /CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Certificate serial: 019CAAC6D8798056CFCE4B0F4B5F8160EC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 19:01:24 +0000
Manifest this update: Sun 01 Mar 2026 19:01:24 +0000
Manifest next update: Mon 02 Mar 2026 19:01:24 +0000
Files and hashes: 1: ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl (hash: paPz9aME2whTebbpniU0vH8ZgaaGciQS1IuMAJa5ViQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d8:79:80:56:cf:ce:4b:0f:4b:5f:81:60:ec:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Validity
Not Before: Mar 1 19:01:24 2026 GMT
Not After : Mar 2 19:01:24 2026 GMT
Subject: CN=5617868e6cd048b873d3d655ec415a6e3ea8b613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:48:09:64:f7:17:9d:dc:96:be:26:89:c3:7f:
f7:77:a0:af:34:d7:1f:75:50:a0:96:4c:44:b9:ab:
d3:64:6d:32:70:f3:cf:b2:e0:4d:61:65:1a:7a:48:
ce:3a:78:f9:cc:28:fa:3a:b9:38:99:aa:a7:50:ad:
e0:da:bb:26:80:28:9b:b3:89:06:44:da:28:34:8d:
81:40:78:6f:30:26:9c:c7:bd:fd:37:22:88:c3:60:
63:38:a2:41:a2:39:29:3b:c0:e3:2a:98:49:9d:9a:
a9:7e:d9:0b:3f:90:ee:2b:14:f2:e6:4e:c7:69:20:
30:3d:24:a8:75:03:91:fb:55:dc:13:e7:47:e3:a5:
3b:51:df:1c:d9:c6:76:ba:0b:6c:e1:0e:45:7d:ed:
1b:69:8b:5d:8a:4b:85:d8:a8:af:c3:ec:b5:30:a1:
51:98:50:22:9f:14:80:fd:30:cb:73:cd:14:32:86:
1b:9a:fa:02:bc:ad:96:fa:ad:07:04:e2:62:54:b4:
6f:67:52:e8:ac:2b:4a:e1:28:53:3b:b8:4f:cc:a1:
32:8c:8b:5f:6b:30:bc:e6:fa:d1:37:da:6a:5d:84:
00:06:c3:17:5d:6a:9a:26:a7:be:4a:d8:57:f8:6d:
f2:d7:af:58:1f:da:94:92:2c:d3:c9:c3:5e:ce:d5:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:17:86:8E:6C:D0:48:B8:73:D3:D6:55:EC:41:5A:6E:3E:A8:B6:13
X509v3 Authority Key Identifier:
keyid:A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b5:63:32:2a:ca:fe:fe:2f:6c:c3:7a:83:19:bf:d2:09:23:
1f:00:3b:36:9f:c5:28:83:0e:ba:19:7e:65:f6:67:31:4d:26:
c1:0e:7c:fd:ce:47:ac:cf:c2:97:86:a7:7e:03:2d:f9:b8:46:
67:b0:58:d2:f8:99:67:e9:c5:6c:aa:a3:c5:39:d2:c5:4a:e0:
7c:3c:69:0a:45:04:a4:5a:fa:e8:0b:33:b1:4b:01:c8:0d:5b:
87:10:7c:e6:90:25:2d:89:33:79:29:98:f7:5a:fe:36:35:25:
c2:db:6a:9e:b9:6e:ec:fd:d5:46:a6:28:b6:aa:f6:7a:47:39:
b1:79:1e:0e:75:f5:36:1b:9a:e9:0d:2a:fe:b2:7a:ac:b8:b2:
45:2c:c4:a0:2c:10:fc:50:ce:04:a9:2c:d4:ba:59:6e:bd:96:
11:ef:6a:8a:41:64:d9:43:aa:0a:99:5b:8b:28:df:ef:ac:f6:
2a:f1:94:a9:34:78:e7:0e:7f:fb:73:67:b8:6b:b3:d4:29:4d:
24:e0:65:19:c7:b6:af:40:a9:25:9a:50:a7:fa:a1:b7:f6:dc:
d4:df:96:c9:e1:6b:4f:27:17:67:14:a4:2a:9b:2b:a2:78:ae:
44:e2:0f:8e:53:08:ce:db:fa:10:d0:5f:24:5b:ae:c3:bf:88:
4b:bb:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:55 2026 by rpki-client