
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: W7lLfqOiKIYjHZdb/UxtYAmToQIHfiHmGpMSZcOKpwU=
Subject key identifier: 9D:CA:C7:87:BE:61:95:B3:44:AF:66:E1:10:32:E1:38:5F:DB:22:3D
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 019CAD2265B955955B5D50EC6936AE0735D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 0A44
Signing time: Mon 02 Mar 2026 06:00:38 +0000
Manifest this update: Mon 02 Mar 2026 06:00:38 +0000
Manifest next update: Tue 03 Mar 2026 06:00:38 +0000
Files and hashes: 1: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: GBu+OJHV1+Zadqg64OtVpJ5DzfK1eVmwxEtG16VTSmY=)
2: wVx12s3RofqhZGn1DU5IkoBo6Ek.roa (hash: rtRYGzz5et6AkfKvUX/IWgHJLFa3ZiIV+HrHpHk9/S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:65:b9:55:95:5b:5d:50:ec:69:36:ae:07:35:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Mar 2 06:00:38 2026 GMT
Not After : Mar 3 06:00:38 2026 GMT
Subject: CN=9dcac787be6195b344af66e11032e1385fdb223d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:0d:bc:2b:07:59:ac:5c:a1:60:9a:11:93:
73:b0:e0:51:3f:c8:1c:01:45:fd:72:e3:15:15:6c:
1e:db:e4:14:74:00:36:fc:b8:a2:18:be:dd:4d:64:
3c:26:2c:b5:7f:6a:68:b4:b8:ea:d7:af:94:46:98:
5c:86:d0:47:37:45:32:c9:a8:2a:66:d8:cd:f2:7b:
9f:23:58:fc:f6:1f:8e:9c:2c:29:36:6a:78:50:4e:
81:ba:1c:72:49:a1:7b:dc:03:75:a8:79:06:94:75:
a3:51:63:fd:a8:23:b1:29:bb:b7:bb:8e:c1:89:0f:
b7:90:8a:6d:10:ce:37:16:b8:c1:b9:d3:7b:2b:9a:
75:29:dc:2c:38:1a:46:22:be:9d:94:89:9c:be:bc:
5b:e8:d8:0f:70:90:74:7a:a5:f6:ff:07:64:7a:1f:
55:8b:67:f2:4b:f8:57:f7:f2:2e:99:4f:07:47:00:
87:16:96:96:01:d1:10:9a:35:02:a1:00:8b:15:ed:
0e:96:20:e4:df:94:ec:12:28:8f:e5:4c:71:b9:b4:
b8:32:bc:53:d2:52:99:56:b3:af:5b:69:a5:39:ac:
d4:34:58:23:63:67:db:46:b4:11:13:8a:57:e8:29:
b8:7a:47:92:13:7b:db:3c:34:72:26:18:55:52:d8:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CA:C7:87:BE:61:95:B3:44:AF:66:E1:10:32:E1:38:5F:DB:22:3D
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:11:67:4a:a5:f2:90:fb:47:23:18:d9:75:f6:00:d7:de:68:
cc:04:d4:c8:b7:66:d8:28:86:66:29:b7:d9:3a:e5:60:b2:92:
77:93:76:d1:f7:6b:d4:46:fd:9e:c5:6b:ca:27:f9:df:76:b8:
02:d1:15:ee:d7:c7:d4:1d:6f:db:f6:c3:67:1b:f9:7c:24:d1:
c3:a2:04:d0:94:bb:5c:0b:08:eb:c5:cb:24:82:88:06:98:39:
87:0a:0a:12:4b:8a:9b:48:fc:06:e9:84:80:81:3e:82:c4:75:
f6:8c:1b:94:12:0d:16:73:27:b2:c4:f9:c0:02:66:a9:be:a1:
26:2a:ab:57:3e:d9:71:b2:c8:fc:8e:7d:37:62:b6:7d:95:04:
5c:8f:54:58:ac:ac:85:1c:87:90:fa:7c:42:e4:f8:33:65:b6:
85:a0:ae:e5:a3:a8:74:3d:1d:c7:6f:37:d7:b8:e6:56:cf:15:
a8:72:28:91:6d:e8:f4:f9:6a:07:55:12:07:40:fc:ff:70:27:
b7:f9:98:ab:94:86:9e:fa:e7:b0:53:73:c4:88:f3:a1:90:60:
90:e0:81:d2:5c:9f:91:25:58:32:ed:03:eb:46:c0:03:62:d2:
56:f0:f6:49:a8:a0:2a:b3:80:04:1e:49:d4:6c:9f:9f:8d:f8:
83:a2:76:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:52 2026 by rpki-client