Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier: vqzUsJmkaBo70jis4beoNXy3hIotyH0zy133qriJacI=
Subject key identifier: 2F:1E:D8:38:90:17:8C:7D:AD:36:62:79:9C:5D:37:49:D6:8C:E0:F9
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 019CAAC62FB1F2CAD9880AE9D0BDA0415D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:00:40 +0000
Manifest this update: Sun 01 Mar 2026 19:00:40 +0000
Manifest next update: Mon 02 Mar 2026 19:00:40 +0000
Files and hashes: 1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: FoX16tBGHQNWNOZ/IMzq4C9ng5LNoxnrgKYVLTJj89Q=)
2: qlUMTY8f9xMZJf_wYNKsX0Jnm9o.roa (hash: 6TBYCzPo1M2XR2SlsB1vR5t4Ago4gsLphNAfezL8f1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2f:b1:f2:ca:d9:88:0a:e9:d0:bd:a0:41:5d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Mar 1 19:00:40 2026 GMT
Not After : Mar 2 19:00:40 2026 GMT
Subject: CN=2f1ed83890178c7dad3662799c5d3749d68ce0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:91:b8:41:32:57:6b:41:46:83:cc:4b:1c:
88:d1:66:af:54:0a:cc:f3:50:38:9e:a0:2e:34:ac:
7d:99:02:e7:0e:0e:43:6e:85:ee:c0:44:59:80:fa:
4b:14:7c:de:f3:13:58:08:d9:ec:8f:4a:52:46:b6:
9c:19:ca:0a:81:ca:df:9e:ff:8a:9a:8e:d0:a4:2e:
6b:1f:e9:9a:f5:fb:48:18:d8:97:50:21:b6:64:3b:
6d:66:74:5b:93:c4:7d:86:a4:17:cd:2c:82:a8:f7:
34:76:8e:dd:0d:41:f1:26:e4:5c:97:85:1c:52:c4:
49:fa:59:96:ae:8e:e8:09:55:e7:85:3d:b4:a2:29:
eb:fd:ad:0d:98:06:68:ce:e9:65:0c:fe:8b:df:34:
3b:2a:77:1d:73:35:87:47:06:67:26:81:ac:7e:96:
7b:9a:50:e2:f4:78:75:74:92:5b:b0:20:2e:7e:73:
29:5a:c7:2a:f3:ab:84:f3:3d:ee:18:5d:c4:e6:c2:
b8:d6:78:3d:d9:98:6c:4c:7d:7f:7b:6b:fd:e2:7d:
cc:b0:90:df:8d:5c:a5:40:0c:ed:60:41:96:59:bf:
84:79:e5:a1:a4:11:0f:81:e3:f3:18:eb:2b:02:23:
40:27:19:7b:d3:29:2c:86:25:4f:f5:4b:25:4f:9b:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1E:D8:38:90:17:8C:7D:AD:36:62:79:9C:5D:37:49:D6:8C:E0:F9
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:04:af:cd:79:c4:89:e7:d2:78:19:ce:da:a2:6d:f3:39:d5:
7a:f6:61:15:54:5c:9a:b2:31:37:6e:06:58:26:59:47:28:a5:
4b:6b:ac:a0:92:17:e7:96:3b:b1:7c:03:7d:0d:50:a6:a0:3e:
bb:a2:2e:11:ad:b1:ef:c0:80:70:26:37:50:7a:27:ac:64:ef:
c1:39:18:69:67:19:0d:5b:07:6d:a6:11:fe:55:76:d1:b9:6c:
c0:42:83:dc:65:0e:cc:3f:8a:95:d4:9e:4c:3c:6e:0d:8f:2f:
bf:8e:3c:ae:77:c1:08:53:92:26:80:3a:00:20:79:ba:46:16:
6f:b1:b3:94:38:ff:16:cf:4a:b0:d8:38:16:e3:14:5e:d0:40:
50:10:69:83:d4:0b:c5:15:70:3e:c2:e4:7b:27:59:40:72:fd:
d8:44:08:ff:b7:18:dd:3c:62:1c:c6:0f:d2:58:c9:64:69:8b:
33:78:46:36:df:29:68:c5:12:4d:51:ca:1a:93:32:b5:3f:e1:
44:1b:0a:65:36:13:75:e8:ca:9e:ca:71:5a:2d:70:3b:b7:40:
ef:e3:7a:2f:a0:5c:14:41:0f:dc:b6:ad:ae:26:85:35:b4:09:
3e:d0:44:35:b7:1a:87:12:b1:76:c5:3f:b1:da:e1:d9:83:f7:
b7:52:90:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:21 2026 by rpki-client