Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
File: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json)
Hash identifier: qyHPbjCXItJptX0tsyokMkzqsxUlZ8VQO5kpjQ13XCs=
Subject key identifier: 8E:AB:60:86:61:7A:56:07:B2:C5:82:25:D8:FE:53:A6:3C:B9:3B:F0
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial: 019CAF7E8FBD205794076FC70F33ADF26FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
Manifest number: 1119
Signing time: Mon 02 Mar 2026 17:00:32 +0000
Manifest this update: Mon 02 Mar 2026 17:00:32 +0000
Manifest next update: Tue 03 Mar 2026 17:00:32 +0000
Files and hashes: 1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: GNNzogR+Yf4+qcnJKKvoiki6YUHwyVgzaPymxncHz1E=)
2: VKdoGfLRpSy-iS0ByTtLZ3OIUZI.roa (hash: GLPIQNk9SF4ckQrOTlAnl4nPM7oMaUINPgb3JIgnuFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:8f:bd:20:57:94:07:6f:c7:0f:33:ad:f2:6f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Validity
Not Before: Mar 2 17:00:32 2026 GMT
Not After : Mar 3 17:00:32 2026 GMT
Subject: CN=8eab6086617a5607b2c58225d8fe53a63cb93bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:49:a4:a0:6e:31:99:17:9b:3c:b2:62:74:
5c:33:42:38:ee:18:24:47:47:66:07:07:65:d2:ca:
34:d8:7e:b8:00:46:31:77:e0:f4:5c:18:58:7e:fa:
8f:2b:31:e4:68:1b:a3:ec:aa:a1:63:e3:fb:a3:ff:
24:82:a4:9d:1a:cf:39:e8:a8:97:92:cd:f8:32:7f:
da:11:bb:40:8d:9b:59:fd:fb:02:a1:f7:3b:79:eb:
c1:86:bb:32:b4:34:15:a8:84:d2:f0:e6:59:ca:bc:
11:73:57:2e:e6:23:7d:ac:7d:41:24:1e:2b:3d:66:
93:af:6f:1f:51:db:43:e8:29:e5:95:80:42:a6:7a:
fc:81:8a:4b:6a:31:a0:e0:c5:43:ea:cb:01:0a:99:
1f:9b:29:a3:11:32:4d:fc:b0:09:1d:d9:70:46:8b:
68:82:21:01:ad:dc:da:a2:4e:ec:44:85:4f:31:75:
b0:0a:a7:a1:e2:6a:cd:0f:de:3d:67:74:fc:a1:b4:
38:1f:ef:4e:57:78:a7:e6:69:e9:75:a0:e5:62:c0:
6a:b5:47:db:49:c2:aa:98:06:df:77:ac:16:01:9f:
b9:90:23:77:8f:86:42:5a:5c:23:94:c9:69:52:66:
c4:4c:54:1d:c1:32:0a:f4:72:54:31:c9:b6:46:69:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AB:60:86:61:7A:56:07:B2:C5:82:25:D8:FE:53:A6:3C:B9:3B:F0
X509v3 Authority Key Identifier:
keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b0:3a:59:91:de:d5:1b:7f:cd:e5:6d:d2:d7:a8:c8:36:2c:
f3:da:fd:25:e4:53:fa:ad:83:c5:56:fe:7e:d9:dd:84:d6:0e:
aa:d3:1a:30:34:50:45:92:6e:db:83:a8:3e:cf:27:bd:b3:73:
57:f4:60:ab:15:4f:66:00:c7:6e:74:28:63:d0:57:4d:6a:94:
28:10:58:a5:8a:17:de:02:d4:77:41:52:da:1d:a1:bc:c3:49:
c9:58:0a:9d:8a:ba:d0:0f:50:15:ab:0c:88:ff:e9:ff:99:91:
0b:e8:e6:c1:5a:9d:43:8a:5a:9a:c6:29:63:40:2f:e3:24:72:
4e:cc:74:b5:36:ac:73:c4:d6:e9:96:b8:48:4a:22:67:d6:7d:
18:fa:9a:9e:0b:7f:de:18:77:4e:c1:c9:26:62:bf:23:ec:f4:
a0:99:62:a3:ae:a4:21:b5:86:cf:30:49:0e:fd:24:1c:99:8e:
3f:f2:e9:11:ae:15:25:78:13:d3:57:fe:14:aa:d8:9e:b7:13:
c5:5f:3e:4d:53:46:51:b1:0e:aa:0f:40:c5:8e:ea:05:b7:8f:
a8:2b:41:ea:1b:96:1d:d2:c7:1b:fa:ec:a1:5f:ba:e0:11:d8:
2f:fa:42:27:69:d8:84:41:62:67:4d:a6:d2:4e:c5:cb:ac:e5:
f0:ca:0d:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvfo+9IFeUB2/HDzOt8m+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYmJiMWY1ZDk4NjY2OGFiM2JkNDdjZDE4YzVmYjFlZmQy
NDliMDQwHhcNMjYwMzAyMTcwMDMyWhcNMjYwMzAzMTcwMDMyWjAzMTEwLwYDVQQD
Eyg4ZWFiNjA4NjYxN2E1NjA3YjJjNTgyMjVkOGZlNTNhNjNjYjkzYmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArutJpKBuMZkXmzyyYnRcM0I47hgk
R0dmBwdl0so02H64AEYxd+D0XBhYfvqPKzHkaBuj7KqhY+P7o/8kgqSdGs856KiX
ks34Mn/aEbtAjZtZ/fsCofc7eevBhrsytDQVqITS8OZZyrwRc1cu5iN9rH1BJB4r
PWaTr28fUdtD6CnllYBCpnr8gYpLajGg4MVD6ssBCpkfmymjETJN/LAJHdlwRoto
giEBrdzaok7sRIVPMXWwCqeh4mrND949Z3T8obQ4H+9OV3in5mnpdaDlYsBqtUfb
ScKqmAbfd6wWAZ+5kCN3j4ZCWlwjlMlpUmbETFQdwTIK9HJUMcm2RmmFLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6rYIZhelYHssWCJdj+U6Y8uTvwMB8GA1UdIwQY
MBaAFDu7sfXZhmaKs71HzRjF+x79JJsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jZWRlMGQtMDI3Zi00NWFkLTg0ODAt
YzExN2YyN2JhOWMwLzEvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jZWRlMGQtMDI3Zi00NWFkLTg0ODAtYzExN2YyN2JhOWMw
LzEvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLA6WZHe
1Rt/zeVt0teoyDYs89r9JeRT+q2DxVb+ftndhNYOqtMaMDRQRZJu24OoPs8nvbNz
V/RgqxVPZgDHbnQoY9BXTWqUKBBYpYoX3gLUd0FS2h2hvMNJyVgKnYq60A9QFasM
iP/p/5mRC+jmwVqdQ4pamsYpY0Av4yRyTsx0tTasc8TW6Za4SEoiZ9Z9GPqangt/
3hh3TsHJJmK/I+z0oJlio66kIbWGzzBJDv0kHJmOP/LpEa4VJXgT01f+FKrYnrcT
xV8+TVNGUbEOqg9AxY7qBbePqCtB6huWHdLHG/rsoV+64BHYL/pCJ2nYhEFiZ02m
0k7Fy6zl8MoNQQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:39:39 2026 by rpki-client