Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File: T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier: Pty9tox4OaosIezABvJtWrO6cYkAj9KIjtLA6NNijE0=
Subject key identifier: 75:1D:BB:24:4D:BF:2C:AE:1C:99:B1:27:9A:28:C7:7F:19:9C:D7:79
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer: /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial: 019CAB340BDAA4A705A0C8AFDDB0DD397EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number: 15BF
Signing time: Sun 01 Mar 2026 21:00:40 +0000
Manifest this update: Sun 01 Mar 2026 21:00:40 +0000
Manifest next update: Mon 02 Mar 2026 21:00:40 +0000
Files and hashes: 1: 6NIaTUJDouCrOz0JAuSF_NduOwA.roa (hash: hDytd6duXPNmzRp/8kY+LISu/ZM6ohz2sTIHpo5hKjg=)
2: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: J91ifKABm9epTJIPdlyCGWZI1RI6ErQUC0FzlQosodo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0b:da:a4:a7:05:a0:c8:af:dd:b0:dd:39:7e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Validity
Not Before: Mar 1 21:00:40 2026 GMT
Not After : Mar 2 21:00:40 2026 GMT
Subject: CN=751dbb244dbf2cae1c99b1279a28c77f199cd779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:1e:c5:6b:86:cb:8c:20:75:b8:d1:2f:e1:
b2:60:a8:a5:c2:03:a0:a2:b2:95:40:ad:c1:38:b4:
a1:2c:20:38:e7:3e:51:ff:ed:59:28:a6:55:50:11:
c7:ba:5d:86:e7:9c:a2:20:92:57:bb:f8:4e:23:d2:
0b:9c:7c:80:f6:26:f2:5e:56:e0:e6:16:40:0e:18:
49:7f:83:d4:f3:e6:46:59:d5:e1:b5:ae:d1:93:f9:
fe:c3:65:6a:2d:9e:03:08:fc:52:1c:24:7e:4e:7a:
36:f4:20:9d:6a:ee:d4:d8:ff:1e:ef:ed:4a:b8:ff:
64:64:ec:63:f2:4d:2d:02:b2:7c:94:67:a0:e5:2a:
d1:5b:1c:4d:72:0c:ba:08:99:48:e7:95:ee:14:bd:
90:de:11:d1:20:7c:e8:48:59:2e:11:20:3e:cf:87:
db:84:b7:ad:07:d0:c1:cf:d0:9c:2e:8a:9f:0b:ca:
f8:86:bf:70:9e:ce:17:1e:23:e0:9f:13:c7:b4:6f:
e1:d2:5a:b5:6e:ef:be:73:5b:ec:84:38:7d:ef:d5:
ea:a2:75:0e:7e:f3:e9:c2:19:f8:61:7c:57:c9:21:
5c:c8:bd:e9:6c:91:f5:a5:f9:5f:7d:40:9b:86:0c:
83:a0:79:0c:48:fe:12:25:26:86:b5:77:e8:fc:18:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1D:BB:24:4D:BF:2C:AE:1C:99:B1:27:9A:28:C7:7F:19:9C:D7:79
X509v3 Authority Key Identifier:
keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:37:60:3d:2a:33:be:5a:94:2e:20:40:f9:55:b6:d0:37:f5:
bb:c0:6e:7d:0c:11:f5:ef:78:73:9e:24:78:79:9d:14:15:fb:
4d:de:b6:69:ee:21:65:51:0a:f1:fb:1e:fa:4c:0b:41:ce:91:
ba:a5:76:2f:56:d2:41:28:6b:e6:29:92:62:d2:ff:54:70:7e:
89:bc:e6:a9:bd:e8:44:54:68:47:d6:29:94:09:94:21:9e:60:
fe:a7:a0:cb:0f:9b:66:3f:2e:fa:3f:d7:6e:a2:58:28:d1:f0:
63:9d:f9:9c:d0:95:0f:13:12:16:93:57:23:14:73:d9:c9:c2:
07:54:4d:b4:1a:57:20:d1:85:56:89:6e:c9:c4:3b:aa:eb:ad:
d7:d9:3a:ea:a5:bd:af:19:75:2c:ee:8d:57:a9:b0:72:d0:9e:
29:ed:45:61:b7:93:e1:6a:9e:08:b1:08:ec:8e:14:82:8a:5c:
9f:25:31:6f:a2:c4:03:6f:32:84:3d:59:93:e9:01:7a:c9:05:
fd:cc:0f:84:19:00:fe:71:00:f0:01:ca:a5:a2:16:d8:a9:43:
0c:62:0f:37:1b:8c:8e:37:ad:0c:4d:7d:98:35:41:df:61:ca:
85:dc:8e:d6:b2:c5:51:e2:b1:5d:8e:e1:66:7d:00:47:56:82:
8e:c7:f4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:40 2026 by rpki-client