Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json)
Hash identifier: scV4STPB0JPU7fc041OjHByIuDbii5NAdZD7cDjH8HI=
Subject key identifier: 0D:6C:71:B9:8D:54:9A:78:45:19:CB:93:D8:C7:B7:72:6B:01:21:D0
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial: 019CADC84A04A3CA42DE8A2A1EC677696E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
Manifest number: 0710
Signing time: Mon 02 Mar 2026 09:01:50 +0000
Manifest this update: Mon 02 Mar 2026 09:01:50 +0000
Manifest next update: Tue 03 Mar 2026 09:01:50 +0000
Files and hashes: 1: TRTbys13hMPw7qPZ6_zT9S6DlZU.roa (hash: UwtEWUeqSkdN9j3umwCxrdjYmKQ9n0cv0zhOxAG4uV4=)
2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: kByvmgefj5TZeiKKr1c60ei6P0BrPxsBT4p2HSxs6TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:4a:04:a3:ca:42:de:8a:2a:1e:c6:77:69:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Validity
Not Before: Mar 2 09:01:50 2026 GMT
Not After : Mar 3 09:01:50 2026 GMT
Subject: CN=0d6c71b98d549a784519cb93d8c7b7726b0121d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:9a:eb:40:f1:1f:71:21:95:39:d9:ce:f5:
48:0e:2b:d3:61:ef:b6:93:4f:ab:df:28:64:8a:fc:
bf:1b:a3:e7:7e:a5:b8:aa:61:da:d8:f7:bf:90:f2:
44:1a:bf:03:87:53:26:49:a1:1b:28:b2:e3:a6:13:
23:cf:75:36:95:72:fd:6b:66:85:05:ea:49:49:ee:
7e:51:65:ae:11:69:5b:0d:dd:0d:17:5f:60:59:13:
ea:13:a4:87:8e:6e:5b:e9:99:bb:2e:3a:e0:89:57:
ec:f1:06:8d:3e:41:4e:eb:69:8c:72:72:a6:0d:4d:
7c:66:44:bc:52:32:f9:42:04:31:d8:58:de:a9:8d:
a7:4a:fa:9a:23:34:41:71:a9:de:4d:1c:e2:3f:9f:
20:55:0e:3a:b6:d5:b3:8d:e2:82:01:d9:79:12:10:
2f:6a:49:0f:47:ff:2f:39:cc:2b:3a:0c:68:3e:dd:
71:a7:26:4d:38:84:f6:f4:bc:6c:b6:77:6e:39:ac:
a1:29:28:56:5e:b9:15:80:54:7f:c3:18:25:92:41:
3f:3e:94:74:74:aa:ee:84:b2:51:5b:b2:4e:84:c0:
66:3b:a6:b6:6a:1d:cd:39:75:49:c6:61:bb:03:f3:
f5:ae:27:68:a9:27:98:a6:36:c7:91:b7:07:d0:d9:
c2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6C:71:B9:8D:54:9A:78:45:19:CB:93:D8:C7:B7:72:6B:01:21:D0
X509v3 Authority Key Identifier:
keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4a:a1:65:4c:ec:e5:0c:96:fa:e4:bb:a5:6f:a7:be:cd:b1:
d5:51:74:82:0d:dc:c8:e7:be:0b:c7:ef:b4:a3:09:fd:12:16:
4f:b2:bd:c0:aa:cf:84:68:fe:f9:cb:90:d6:74:e1:72:d0:85:
a3:d2:5d:a4:7c:a0:26:48:f7:99:39:46:52:69:74:f3:71:fd:
34:26:df:fd:d3:3d:96:f0:28:a3:79:78:71:1d:a8:6b:88:ea:
4f:cd:25:0b:eb:5b:83:e1:5e:36:e8:a8:42:c5:f4:82:40:cf:
cc:3c:80:53:8c:3f:94:33:bc:b1:fe:a3:1f:16:a6:b0:10:bc:
0b:1c:3e:af:6d:31:45:17:6e:b8:2a:0b:9e:c9:3a:6f:7e:a7:
49:5b:80:9c:7f:03:24:ac:21:3a:10:23:8a:4c:64:09:62:7b:
e0:0b:9e:8b:67:be:fe:33:bc:ca:c4:db:f5:a1:c3:d5:43:09:
78:8c:74:a9:29:c7:ae:39:6e:1a:5e:03:fc:37:b7:48:ac:15:
a5:20:d6:88:7e:96:c5:9f:9d:91:14:74:fc:aa:c0:96:49:d3:
66:bd:b9:6a:d2:38:17:10:64:d1:82:e3:32:52:db:42:5e:b1:
08:62:49:ca:46:ab:06:4e:1e:88:e5:2c:92:06:c5:b9:6c:45:
22:e2:53:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:17 2026 by rpki-client