Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
File: Ooz8_rg-iPNror8kRduewegvDVQ.mft (raw, json)
Hash identifier: OpRqp5UKct6fTAFSJLMCgGCetALIZNvY9u2JBJysRoo=
Subject key identifier: D7:47:36:EA:2F:E3:C3:23:BC:0F:84:27:3E:1B:F1:1E:F9:5B:6D:F3
Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Certificate issuer: /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Certificate serial: 019CAAFD324CD2D13946C5A378092F440E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:46 +0000
Manifest this update: Sun 01 Mar 2026 20:00:46 +0000
Manifest next update: Mon 02 Mar 2026 20:00:46 +0000
Files and hashes: 1: Ooz8_rg-iPNror8kRduewegvDVQ.crl (hash: Uw/K/bsLRibRaJIfy94GItKSr4Y1oJq4GiDSY9vZwHA=)
2: z0CueOCsUcgJjTlUBl8xuP0ejIo.roa (hash: OHQraT5vhktcGhKnSXjBbZgLeUySm12jN55KrjwZnfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:32:4c:d2:d1:39:46:c5:a3:78:09:2f:44:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Validity
Not Before: Mar 1 20:00:46 2026 GMT
Not After : Mar 2 20:00:46 2026 GMT
Subject: CN=d74736ea2fe3c323bc0f84273e1bf11ef95b6df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:f3:3f:0e:34:46:c8:81:b7:39:93:b7:e2:
a8:08:0b:5a:7e:25:ce:5a:cb:3b:9d:ea:bf:51:ca:
96:25:01:f5:60:a7:02:5f:b4:4a:ae:b7:b6:14:3d:
59:fa:10:54:99:63:7f:65:43:07:93:59:49:4e:3a:
7e:23:ee:c6:a1:e1:22:b5:73:7b:8d:65:9e:30:ef:
9f:f0:b4:74:0d:61:7f:dc:d1:f9:7c:e7:53:df:02:
b9:d1:4e:5f:24:af:62:ad:db:4d:5c:9f:cf:5b:b6:
35:c7:0e:48:39:aa:19:53:13:ac:e5:be:6d:69:89:
50:6b:de:ab:79:17:31:14:a4:1a:c7:fd:55:96:ef:
a3:95:e7:47:d3:36:97:94:8b:cc:9b:7d:a2:d4:63:
41:46:c9:fb:df:02:54:df:22:b3:85:52:8f:83:9a:
9e:e6:79:a3:75:bc:ab:6f:3a:c1:53:4a:30:68:c9:
67:d1:98:62:99:87:dc:a6:6a:65:6f:cf:b0:46:92:
49:87:cc:10:94:da:ee:94:eb:b6:fa:9a:b7:47:f0:
65:76:b3:55:4c:22:27:0b:4c:d6:42:8a:b1:87:3f:
b2:07:5d:50:90:16:7f:1d:86:f4:2a:07:86:17:61:
73:80:c2:69:60:a0:7d:7c:fe:94:5e:d2:36:32:d5:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:47:36:EA:2F:E3:C3:23:BC:0F:84:27:3E:1B:F1:1E:F9:5B:6D:F3
X509v3 Authority Key Identifier:
keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:87:1c:62:f1:df:d2:a1:35:dc:b8:88:bd:0c:f9:21:03:e4:
4b:a4:88:ad:03:40:54:37:27:6a:9c:5c:00:3e:72:2a:fb:25:
ca:8c:79:e3:b5:2e:07:82:ff:82:f6:86:8c:c7:e3:2c:04:4f:
5a:f3:57:2a:4e:d6:7e:5e:3d:1d:1c:af:aa:37:fe:2e:8e:78:
a5:c8:17:ff:35:8e:b5:d1:c9:9c:ec:5e:d4:77:57:97:70:a5:
bd:29:f8:a7:98:94:56:b9:6f:bf:b8:ec:bc:c1:d2:fd:06:cf:
f0:85:9a:68:cf:41:e7:e2:73:0a:ae:3b:5a:c8:64:40:fb:5e:
b3:c5:aa:7d:12:70:9a:80:87:d7:71:6a:ea:4e:09:2b:0e:4c:
bf:4b:8f:15:a0:2e:3f:5c:1a:ae:01:76:c2:0d:c1:87:d8:e1:
34:94:07:2c:5f:b3:6b:b4:8a:df:5a:9e:a3:ae:19:cc:b1:95:
b3:19:28:30:62:04:7e:18:1d:0f:c4:7e:48:62:dd:e2:db:5d:
1e:a1:31:df:f1:8e:04:43:09:eb:7d:3f:e3:c4:2d:5a:57:31:
62:8c:91:77:fc:36:6e:db:c0:29:06:16:27:19:f5:92:46:6b:
54:0f:0e:33:f2:2d:58:20:28:a5:37:33:6c:32:06:8f:f8:c8:
d2:26:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:42 2026 by rpki-client