Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
File: O0ExZKE8JMp3hHd0putXEF7ngJ8.mft (raw, json)
Hash identifier: xOZVuXaRIamBu38GhqMdI+zMwmkmgqPE4IOXUy2Gcfo=
Subject key identifier: 00:07:AE:55:48:AA:FF:64:FF:DA:36:07:2D:2B:4E:65:4A:31:51:A5
Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
Certificate issuer: /CN=3b413164a13c24ca77847774a6eb57105ee7809f
Certificate serial: 019CAA58E3AD0D3BE1180DE5D7A40DA8A072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
Manifest number: 154A
Signing time: Sun 01 Mar 2026 17:01:18 +0000
Manifest this update: Sun 01 Mar 2026 17:01:18 +0000
Manifest next update: Mon 02 Mar 2026 17:01:18 +0000
Files and hashes: 1: O0ExZKE8JMp3hHd0putXEF7ngJ8.crl (hash: F9bwya/AGTUKnxRltvT21PWk4JVI6mpDBTktVbKsxJw=)
2: TIBIPgd0Nln-DuzUf3r64T4_MDg.roa (hash: Wc4+19rN5KfObjYjXDD+w/Qt81kPFgbecT9pFJ34v+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e3:ad:0d:3b:e1:18:0d:e5:d7:a4:0d:a8:a0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f
Validity
Not Before: Mar 1 17:01:18 2026 GMT
Not After : Mar 2 17:01:18 2026 GMT
Subject: CN=0007ae5548aaff64ffda36072d2b4e654a3151a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:51:82:31:ee:13:cf:d3:0c:09:65:f9:ef:09:
e3:ab:be:6a:37:a2:f1:3e:3b:11:72:ce:b1:08:94:
7a:50:42:95:be:3e:cf:6a:c6:98:5c:45:d7:70:ae:
e5:69:ce:c1:31:c2:62:3d:f8:25:b0:6a:a0:c0:b5:
8b:6b:4b:5b:c8:cf:ce:59:d0:96:51:e2:13:a7:52:
87:b3:a0:cf:7a:85:ea:2c:17:d9:48:1d:5c:f8:25:
e4:b2:f6:a6:e7:b1:5a:d0:14:91:17:93:65:d4:f1:
83:78:39:98:25:61:9d:32:88:a5:26:9a:75:c9:64:
83:3b:86:1c:e8:04:6e:17:4c:2c:5c:b9:f5:93:8e:
23:2b:5f:c9:85:95:f2:e9:57:31:f6:d1:8f:37:e6:
9e:bd:a0:7c:40:dc:89:48:f0:20:19:6c:03:62:55:
4f:88:44:e2:14:62:ac:18:9d:91:81:55:c3:c8:cf:
62:66:0a:28:a8:74:78:28:6d:b8:7f:7d:b0:f0:76:
de:a2:47:7c:fe:5a:40:0e:4d:41:ca:67:f3:fd:e7:
05:74:9e:02:5d:05:36:5a:28:16:e9:75:fb:cd:e4:
5c:14:a2:9f:38:d8:5f:71:59:6b:c6:43:a3:c3:5e:
ed:76:4f:ab:2a:bf:2d:8b:14:7c:1b:2c:1a:9a:c1:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:07:AE:55:48:AA:FF:64:FF:DA:36:07:2D:2B:4E:65:4A:31:51:A5
X509v3 Authority Key Identifier:
keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8e:d1:95:93:09:74:fe:24:64:55:28:6f:50:05:e2:3a:7a:
98:54:aa:1d:c2:bc:56:72:da:08:3f:27:d2:1e:4b:af:a2:93:
c0:b4:de:c4:8c:18:2a:92:91:75:6a:3c:1f:83:e4:e4:d6:73:
5d:94:c9:c1:82:7a:0e:af:d7:1d:29:d6:01:41:19:23:a2:4f:
b7:67:c2:75:bf:b9:37:64:9f:22:59:8d:f4:49:4c:2b:b3:a7:
84:d8:47:66:72:0e:fc:35:5c:ad:97:07:99:9e:f9:d0:cc:09:
98:43:dd:6f:4f:12:01:b5:45:a9:b3:4e:42:84:f3:5a:42:1c:
7f:a5:81:d7:67:38:93:32:6a:62:94:6d:9b:ed:f9:0f:77:ca:
6f:15:0b:0d:c7:10:92:53:53:0f:0e:9c:56:c9:1c:b2:65:b4:
01:fd:3d:76:0a:ff:52:5e:51:7a:09:14:31:e2:87:b2:e1:b2:
6a:d8:c6:4f:49:ef:08:1f:4d:26:ed:40:88:ff:32:f2:ad:d0:
50:28:30:1c:cf:46:85:40:cc:75:9a:4f:a4:a8:19:7a:88:b8:
c6:cc:01:b8:b1:09:2c:b3:fd:0c:a7:57:8a:81:3a:72:29:3d:
0f:ff:50:1c:13:08:92:c6:d3:8e:48:d5:1b:fc:5a:0b:6e:4d:
ec:21:39:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:07 2026 by rpki-client