
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier: Fe3JduaYuljfEoJR47yF5wa2ZxDr+SPZRgYyCyU5RwA=
Subject key identifier: 8A:09:8E:E5:03:DE:E7:F2:33:29:A0:59:DE:70:75:30:E2:D2:78:7B
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial: 019D9A3DFD915E7F2CB09C20358D5A817EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number: 0EFF
Signing time: Fri 17 Apr 2026 07:00:47 +0000
Manifest this update: Fri 17 Apr 2026 07:00:47 +0000
Manifest next update: Sat 18 Apr 2026 07:00:47 +0000
Files and hashes: 1: O4mhqRGKIoCKcIMKacGidJQTeig.roa (hash: o44fh95pYU44LJ84noRE8s+3KorVfsnK8XoKEFDXt+c=)
2: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: AoKK17vFGaj2jRRtKZClEorODS8vwV1Y7AU5zeX5PA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:fd:91:5e:7f:2c:b0:9c:20:35:8d:5a:81:7e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Validity
Not Before: Apr 17 07:00:47 2026 GMT
Not After : Apr 18 07:00:47 2026 GMT
Subject: CN=8a098ee503dee7f23329a059de707530e2d2787b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:45:66:2e:cc:d5:5d:b1:3c:3f:85:de:6a:
2d:ab:6a:63:8f:22:31:9b:39:d9:ca:60:8f:53:18:
f7:1d:0d:99:1f:fa:a1:d2:8e:ee:15:82:2c:f9:a7:
46:79:e3:6e:46:bf:c3:fa:77:32:fe:71:7b:d1:1b:
c3:f8:a2:df:d8:15:54:21:29:8e:fb:95:bd:e6:92:
15:41:9d:bd:a2:c0:75:d7:a4:e9:f6:87:dc:83:47:
15:ea:1e:e3:77:82:df:43:7f:69:f3:f4:87:64:b0:
6b:88:e7:79:be:b2:bc:50:a9:93:2a:d9:fb:e1:b8:
e5:76:e3:ec:51:e1:c1:f8:75:c1:b4:82:4b:6b:a2:
69:ef:07:d2:49:13:be:f9:bb:96:77:83:0c:19:9b:
8a:68:90:60:15:82:c5:f3:09:b9:d0:49:53:ff:cb:
f0:96:be:c5:09:1f:69:a8:a7:79:6c:8e:2a:ae:3b:
48:76:54:9b:b3:80:81:1d:99:b3:a8:04:06:a4:ab:
0f:82:06:6e:00:b2:79:f9:a4:11:9e:88:36:b9:49:
27:97:b3:f0:8c:52:c7:d8:89:06:cf:1c:e5:67:7c:
e5:98:8c:b0:8c:eb:c9:07:f8:ae:88:86:4e:2c:28:
5b:83:8d:80:56:02:75:6d:11:ac:e1:90:f6:96:60:
8b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:09:8E:E5:03:DE:E7:F2:33:29:A0:59:DE:70:75:30:E2:D2:78:7B
X509v3 Authority Key Identifier:
keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:be:14:22:28:9c:e7:a5:35:1b:8f:21:1a:f5:26:22:4e:d5:
40:90:c0:c9:09:5d:29:02:ba:a9:6d:b2:84:de:e4:44:c7:0b:
e5:be:23:32:6b:d2:1a:74:9d:12:bb:db:54:08:24:62:13:60:
a6:48:56:1e:92:71:78:a5:d9:f4:73:46:a6:ef:1d:66:17:11:
d9:8a:ec:bf:5d:0b:0e:19:86:4c:62:83:3e:ef:7d:35:7f:71:
47:ee:cd:ed:a9:ad:a6:a3:8c:75:70:6d:68:f8:87:9e:8e:50:
85:2e:1a:76:80:84:29:8b:be:dd:04:79:88:1a:4e:7e:2a:83:
37:b4:cd:e3:9d:de:29:74:dd:10:13:f0:b3:0c:f9:26:4f:0d:
3e:37:24:2c:a5:e0:af:89:6d:ea:25:61:39:20:30:29:58:98:
73:59:b5:cf:f9:b1:fe:72:43:74:93:46:d6:ed:ed:16:bd:ae:
eb:3f:30:83:65:c2:66:ba:c5:84:b4:72:8d:48:56:3e:24:ab:
a3:76:58:af:80:a2:79:7b:ae:30:8a:83:56:9c:69:b7:fc:a8:
c6:64:71:e9:fb:d3:34:6f:a8:28:3b:ba:af:35:df:0b:16:c2:
27:5c:89:25:d3:41:4b:00:73:72:96:6f:54:9a:cf:8f:d8:a4:
b0:05:18:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:46 2026 by rpki-client