Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
File: oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json)
Hash identifier: EqSHFh21HlE/lkrbp51A5B8Mv+eUVMJUZSPwYuXrf/c=
Subject key identifier: C0:C6:00:7D:E1:88:32:74:6E:07:2C:44:76:84:9B:E1:C8:28:3E:13
Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
Certificate issuer: /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Certificate serial: 019CAB6B13400964F16B9C942F6492424575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:00:47 +0000
Manifest this update: Sun 01 Mar 2026 22:00:47 +0000
Manifest next update: Mon 02 Mar 2026 22:00:47 +0000
Files and hashes: 1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: OAkGcYwGW4+cXin1Ui2/G+aUZPbGISckhvnQyCPIzW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:13:40:09:64:f1:6b:9c:94:2f:64:92:42:45:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Validity
Not Before: Mar 1 22:00:47 2026 GMT
Not After : Mar 2 22:00:47 2026 GMT
Subject: CN=c0c6007de18832746e072c4476849be1c8283e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:dc:f9:7f:5f:c6:fb:fd:17:a5:a9:ca:5b:
35:5b:63:96:f9:92:e0:d9:33:3e:45:e3:6a:eb:b1:
72:b9:71:8b:6a:e9:39:fd:61:52:20:29:a0:29:45:
e5:87:05:74:29:fd:44:32:d1:3e:a2:ef:d1:f3:05:
ce:9e:7e:20:73:10:e6:85:b6:38:84:a8:25:05:4c:
96:ae:29:92:5e:b3:13:6f:98:8f:b0:a7:a2:1c:a5:
c9:b8:3c:9b:b8:1e:f7:99:25:fd:4b:cc:fa:66:65:
cf:00:62:d1:2c:63:c9:4b:88:8c:92:9b:d3:61:43:
ce:de:ca:ac:52:42:e8:50:83:0f:47:36:9c:c3:67:
01:bd:6f:54:7c:e2:61:a4:9d:32:15:86:e9:b4:39:
d0:ae:29:2d:86:94:a4:0c:66:78:5f:5b:94:92:b2:
ad:f3:7b:2d:6e:34:c9:65:a2:36:d9:1c:b8:b8:a2:
14:13:d1:80:19:90:e0:5d:27:20:9f:34:b3:5c:f9:
a4:36:a3:9c:39:ec:59:21:6a:18:12:d0:9b:58:c2:
64:ab:6b:44:13:b0:bd:5c:51:2d:5f:2b:b3:59:79:
35:66:8a:57:7b:14:77:cd:b6:c4:10:56:74:91:fd:
fe:cd:e6:cc:a0:68:f7:f4:a7:42:52:30:c5:92:68:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C6:00:7D:E1:88:32:74:6E:07:2C:44:76:84:9B:E1:C8:28:3E:13
X509v3 Authority Key Identifier:
keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:34:17:d1:ae:cd:d5:33:6e:90:16:2e:db:54:d3:6b:f8:27:
09:70:3f:66:d8:ff:5f:e3:05:b7:f9:ad:9b:e0:74:d5:60:0d:
b6:b2:2a:9f:7e:f0:e7:1c:7b:8a:1c:43:d7:8b:59:5e:0b:0b:
8b:63:ac:eb:14:8c:d9:ab:ba:6a:13:bd:9f:f6:fb:f0:39:f0:
ee:4b:66:b2:26:f4:90:96:ba:e8:d7:88:89:44:33:81:f4:9b:
95:0c:62:fb:19:a4:ab:41:52:b6:7a:d5:d1:d7:19:b8:31:5b:
a4:4f:63:79:a3:96:ab:0d:2e:c4:51:d9:30:4a:6b:c1:83:b0:
95:23:17:a6:bc:4a:04:c5:a5:71:ba:c9:a4:d2:fb:7a:29:b5:
c1:a2:50:07:4d:0d:03:b7:0c:f6:ca:36:a4:05:33:b7:fc:b1:
b3:fa:eb:e0:63:72:41:38:a0:96:49:64:5e:12:bb:99:e7:cf:
e7:2c:ba:ce:c6:2f:54:c2:c2:3c:1e:54:5d:ce:4e:f3:30:e7:
20:79:15:f3:0a:d8:f6:19:31:e3:fe:33:cd:31:84:f4:b9:5c:
b5:13:32:f3:f2:05:bb:90:21:89:71:17:10:93:27:3d:a9:da:
df:ab:68:06:7d:29:06:6b:8b:25:92:37:42:c1:26:04:98:9b:
0d:a6:cb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:24 2026 by rpki-client