Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: zf5/FgmdsZ1/I826HS3DSCE96MJwiFwq5sIj0+eEZY8=
Subject key identifier: 17:A2:BB:A4:F8:D8:1E:38:64:EE:C1:94:F2:5D:C8:F3:1A:47:47:D3
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 019CABA262EBE04BF274019992DC160B8637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 087D
Signing time: Sun 01 Mar 2026 23:01:11 +0000
Manifest this update: Sun 01 Mar 2026 23:01:11 +0000
Manifest next update: Mon 02 Mar 2026 23:01:11 +0000
Files and hashes: 1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: xhYPPIYVOyjk8JUqHYN6gM5udFBsJHK5755hwS+Fj74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:62:eb:e0:4b:f2:74:01:99:92:dc:16:0b:86:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Mar 1 23:01:11 2026 GMT
Not After : Mar 2 23:01:11 2026 GMT
Subject: CN=17a2bba4f8d81e3864eec194f25dc8f31a4747d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:cd:d1:49:18:56:eb:50:19:4e:de:da:a5:
eb:e2:05:dd:15:07:86:2f:f2:24:0e:0f:38:34:67:
be:51:e1:00:d0:76:1c:8a:58:b3:e7:74:0e:db:e0:
2d:cc:60:cf:04:fd:0f:bd:58:1d:49:20:e6:94:92:
8a:25:83:2d:75:eb:4d:51:8f:61:e4:56:7b:fd:c1:
e9:79:63:3f:9d:fd:5b:32:4e:c4:e6:75:c5:76:80:
e6:ee:d8:e4:14:7f:cd:df:51:f2:b7:a9:30:4f:31:
fe:2d:51:67:31:32:91:85:0c:ad:e0:56:1d:32:e9:
58:3e:63:a3:4e:96:60:ca:5e:18:0b:46:20:92:f3:
29:b2:e9:5c:eb:a5:78:cd:0e:ff:27:7f:fd:58:af:
57:33:6b:81:4d:7a:1e:bf:e7:ce:68:96:96:93:43:
68:cc:ce:24:d4:b1:c6:a0:cf:f1:35:04:da:7a:7e:
80:98:b4:66:ff:e4:83:fc:d5:69:da:f0:28:5a:46:
76:a1:ae:88:fa:df:a8:b0:d8:c8:89:46:bd:66:8e:
db:d0:10:bc:17:b4:e7:fb:05:55:5d:3c:a2:6a:5a:
23:7e:4c:11:fe:cf:4f:47:ad:f7:26:33:07:13:db:
ab:cf:b3:7f:71:ad:4e:83:62:9b:50:5a:b2:c8:da:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A2:BB:A4:F8:D8:1E:38:64:EE:C1:94:F2:5D:C8:F3:1A:47:47:D3
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:cc:e0:cd:08:b1:05:e3:65:d6:db:a4:45:fe:f1:15:d7:12:
55:ae:a4:3e:70:05:9f:54:fa:4a:66:bb:e0:e6:86:ba:c0:2f:
7b:c3:a7:06:7b:ac:0c:31:d8:80:e3:6d:07:52:63:35:ba:39:
07:2f:f7:11:d9:66:f2:27:01:b9:f1:41:47:8a:d4:f3:62:14:
05:c5:91:ab:55:e1:50:f0:ac:0c:a9:06:b3:93:6b:ec:f2:87:
15:9e:d3:17:73:09:db:15:9f:2a:de:af:f5:ff:d4:63:b9:3a:
f5:d1:57:fe:f7:cc:2d:bc:5a:85:2b:58:b3:e3:cd:81:b5:0c:
e5:b5:18:3d:c7:1d:95:db:21:ce:a6:81:68:d6:a5:b2:2f:6f:
62:6f:db:2f:fd:3c:6c:d2:06:a6:a0:4f:2b:01:14:20:66:4c:
d3:1c:03:4b:e8:ad:db:48:29:e6:d5:f8:77:37:fa:37:09:93:
27:cd:7f:85:38:2a:30:f6:92:4a:49:52:e3:0c:67:8d:bf:aa:
5a:ef:45:16:f4:ae:3e:a7:f4:5a:37:89:0e:fa:ba:40:7a:d2:
07:b2:c2:7c:07:4e:39:9c:d3:bd:92:bf:6f:37:7f:fc:e1:6c:
46:69:dc:ba:93:29:6c:1e:fc:5b:65:0e:44:05:54:38:97:c5:
45:9f:66:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:55 2026 by rpki-client