Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
File: oILdW4b5WNW-c_2-PwzPbf8C9yE.mft (raw, json)
Hash identifier: 1uGoPHZRdqs9hnEU75iPtAgap2AM48ueiPEtoY7RXH0=
Subject key identifier: 02:50:66:1A:E6:77:0D:3D:DE:8E:FB:24:59:B4:A8:4B:52:E6:6E:E4
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Certificate issuer: /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial: 019CADC7FA213FC6704AADACD6CFB6122DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 09:01:29 +0000
Manifest this update: Mon 02 Mar 2026 09:01:29 +0000
Manifest next update: Tue 03 Mar 2026 09:01:29 +0000
Files and hashes: 1: 1k6NwrzFKRo_CN9ahw66ZqaB9T4.roa (hash: Gm5FahEhYqsf3/1qvhcpLeaE1t89Xgh/p3OZKItZTUY=)
2: oILdW4b5WNW-c_2-PwzPbf8C9yE.crl (hash: jPJYdPO/15On0gdZXJy6eY/Ja+Ddr2iOh2IBwZTUBtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:fa:21:3f:c6:70:4a:ad:ac:d6:cf:b6:12:2d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Validity
Not Before: Mar 2 09:01:29 2026 GMT
Not After : Mar 3 09:01:29 2026 GMT
Subject: CN=0250661ae6770d3dde8efb2459b4a84b52e66ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:ad:a7:80:13:30:88:c3:f6:15:45:21:33:
58:85:ae:31:8f:84:2d:dc:6c:ab:41:ea:0f:02:b0:
97:a2:99:b9:a7:85:16:c7:e6:c3:c2:ab:90:14:a3:
df:35:24:db:28:94:f4:34:b2:a3:d1:74:8a:71:ea:
bd:ff:98:a8:de:87:6f:d8:7e:2d:5e:34:f1:8b:48:
b7:d6:73:56:c0:97:e9:71:f7:6c:58:7c:83:49:93:
1f:7b:88:1a:05:b3:ad:6d:98:03:5c:d7:43:1c:4d:
cb:b4:38:c5:78:10:47:83:e9:dc:69:f9:a3:88:14:
57:f9:e3:b8:ee:a0:4d:e6:20:43:c2:3c:39:5e:3a:
66:46:50:f8:27:93:5c:d1:0b:21:0a:89:d3:11:4b:
3a:a0:8a:bd:9c:70:74:a3:ac:4e:20:d8:35:3c:c5:
17:27:9e:72:b5:7d:66:9b:c4:bb:74:9d:52:30:87:
8c:a1:f0:a3:a1:75:ed:67:15:cd:53:de:51:91:56:
74:32:94:da:16:9b:6d:b1:2d:c9:2f:e5:f7:37:6c:
bc:57:8d:fc:a9:b3:7b:4d:40:67:0b:62:72:71:68:
42:4c:91:5b:77:3d:83:e8:fa:4c:db:49:a9:d9:83:
7b:0a:16:13:ee:93:3d:51:89:c2:91:31:08:88:d8:
07:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:50:66:1A:E6:77:0D:3D:DE:8E:FB:24:59:B4:A8:4B:52:E6:6E:E4
X509v3 Authority Key Identifier:
keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d7:c3:eb:c4:87:38:d7:aa:b8:4a:14:db:2c:3c:a8:eb:27:
15:24:c6:04:da:a2:8c:36:db:57:d3:8a:be:c7:3f:17:65:08:
be:f1:97:3d:ed:d3:34:89:77:8d:9e:c3:b7:9a:13:c8:3f:7a:
37:49:35:87:48:d5:cf:47:7e:3f:0c:fd:a0:e4:5a:2f:ae:9e:
98:95:b7:dc:43:11:1b:ec:51:09:6c:97:f4:1b:0f:d8:02:b1:
84:98:26:58:c4:43:d5:54:1c:72:b3:a2:3d:a7:63:c5:ac:e4:
1f:e1:23:15:22:4b:9b:db:ec:f2:b0:36:b0:3c:70:c2:56:40:
5a:7d:df:d9:bd:05:7d:2f:96:aa:53:14:53:0f:9a:a9:01:dd:
5f:e4:0c:5a:50:65:d8:63:fa:28:48:3d:4e:89:a8:13:42:d8:
a6:b8:0e:15:87:f7:03:17:50:e7:e7:a7:09:d7:93:18:ab:aa:
59:3a:c7:71:59:06:b4:3f:13:9b:61:d1:63:51:88:61:e6:c2:
22:88:d3:e7:1c:c7:07:d5:52:04:94:ae:b4:9a:d0:d0:8d:bb:
dd:25:1f:7c:8d:f6:c4:0e:8c:2d:cf:41:27:cf:07:ab:3f:32:
e2:b7:3a:77:42:7f:e7:47:a6:39:c0:ea:d7:ed:39:92:ed:d0:
be:1f:80:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx/ohP8ZwSq2s1s+2Ei2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODJkZDViODZmOTU4ZDViZTczZmRiZTNmMGNjZjZkZmYw
MmY3MjEwHhcNMjYwMzAyMDkwMTI5WhcNMjYwMzAzMDkwMTI5WjAzMTEwLwYDVQQD
EygwMjUwNjYxYWU2NzcwZDNkZGU4ZWZiMjQ1OWI0YTg0YjUyZTY2ZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZqtp4ATMIjD9hVFITNYha4xj4Qt
3GyrQeoPArCXopm5p4UWx+bDwquQFKPfNSTbKJT0NLKj0XSKceq9/5io3odv2H4t
XjTxi0i31nNWwJfpcfdsWHyDSZMfe4gaBbOtbZgDXNdDHE3LtDjFeBBHg+ncafmj
iBRX+eO47qBN5iBDwjw5XjpmRlD4J5Nc0QshConTEUs6oIq9nHB0o6xOINg1PMUX
J55ytX1mm8S7dJ1SMIeMofCjoXXtZxXNU95RkVZ0MpTaFpttsS3JL+X3N2y8V438
qbN7TUBnC2JycWhCTJFbdz2D6PpM20mp2YN7ChYT7pM9UYnCkTEIiNgHHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJQZhrmdw093o77JFm0qEtS5m7kMB8GA1UdIwQY
MBaAFKCC3VuG+VjVvnP9vj8Mz23/AvchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lMZFc0YjVXTlctY18yLVB3elBiZjhDOXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83Mjc5ZDYtZjk1Mi00ZTM1LTk3OTYt
ZjMwM2RlNGEyZDVlLzEvb0lMZFc0YjVXTlctY18yLVB3elBiZjhDOXlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83Mjc5ZDYtZjk1Mi00ZTM1LTk3OTYtZjMwM2RlNGEyZDVl
LzEvb0lMZFc0YjVXTlctY18yLVB3elBiZjhDOXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNfD68SH
ONequEoU2yw8qOsnFSTGBNqijDbbV9OKvsc/F2UIvvGXPe3TNIl3jZ7Dt5oTyD96
N0k1h0jVz0d+Pwz9oORaL66emJW33EMRG+xRCWyX9BsP2AKxhJgmWMRD1VQccrOi
PadjxazkH+EjFSJLm9vs8rA2sDxwwlZAWn3f2b0FfS+WqlMUUw+aqQHdX+QMWlBl
2GP6KEg9TomoE0LYprgOFYf3AxdQ5+enCdeTGKuqWTrHcVkGtD8Tm2HRY1GIYebC
IojT5xzHB9VSBJSutJrQ0I273SUffI32xA6MLc9BJ88Hqz8y4rc6d0J/50emOcDq
1+05ku3Qvh+AWQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:46 2026 by rpki-client