Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json)
Hash identifier: sV8zk2/9A8hddy8jEqzJ2DQ/BrCjX3Av3+dGIvSJFO0=
Subject key identifier: 0E:AB:FD:2F:25:A9:83:2E:DE:D5:AE:93:18:C0:FA:01:E7:AB:4C:69
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial: 019CABD94BF724CE0AC62AFD12C7E390F985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
Manifest number: 060F
Signing time: Mon 02 Mar 2026 00:01:10 +0000
Manifest this update: Mon 02 Mar 2026 00:01:10 +0000
Manifest next update: Tue 03 Mar 2026 00:01:10 +0000
Files and hashes: 1: DsjnP70xJrDmj0g_UlKJTaTYlrE.roa (hash: dQTLlCPrfnfLcZWl7wxf8pl/h6tKSJhaHDIpDeYdmfQ=)
2: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: 4cxJyLdrbmSggE9O4+LJlwZK73gduhrWxkcmRnkcV/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:4b:f7:24:ce:0a:c6:2a:fd:12:c7:e3:90:f9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Validity
Not Before: Mar 2 00:01:10 2026 GMT
Not After : Mar 3 00:01:10 2026 GMT
Subject: CN=0eabfd2f25a9832eded5ae9318c0fa01e7ab4c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:d7:64:12:b3:1e:58:81:f6:a1:f7:a7:62:
78:c0:f1:a5:ec:88:e3:7a:ce:ab:8c:e3:47:89:3f:
9b:57:c0:ff:ca:6e:12:86:63:71:60:ee:b4:d0:50:
f3:f7:fb:b3:a8:f6:e7:8a:95:16:c1:e6:6a:47:ca:
6a:3a:40:ad:40:8e:75:30:32:7c:d4:97:c6:3d:04:
e5:32:be:f9:1f:62:2a:6b:6e:40:d3:df:03:b6:77:
90:15:d3:3a:9c:6d:89:1f:b0:37:90:8f:8a:31:b5:
ad:34:25:05:fd:8a:1e:a0:2b:47:eb:3f:07:ee:47:
f4:91:75:a8:fc:2a:b9:70:ef:3c:57:4d:4e:ad:77:
d0:26:dd:2a:58:58:2a:c2:c2:1f:95:55:48:3c:64:
67:6a:e3:27:9f:94:bc:8f:75:3f:f1:3e:d9:f1:03:
d6:67:1e:6a:5c:31:94:cb:32:b4:07:05:4e:27:4d:
d8:44:56:6b:be:1f:8b:63:bc:8a:4b:a9:4b:f6:bb:
dd:03:54:62:4e:96:9e:ef:6d:77:49:f1:83:22:c5:
f4:34:09:0c:82:ee:08:c9:9d:9b:07:e1:41:80:e1:
9d:9d:54:87:ef:63:ff:cb:b2:04:77:91:09:23:f4:
9b:4f:4f:1b:75:4a:3c:87:2c:c1:dc:4a:a0:92:61:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AB:FD:2F:25:A9:83:2E:DE:D5:AE:93:18:C0:FA:01:E7:AB:4C:69
X509v3 Authority Key Identifier:
keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:37:d5:35:4f:c2:43:e8:38:a0:8c:4c:5f:64:42:ca:15:a3:
e0:bc:d4:2a:3b:54:91:08:d9:77:d8:fd:a4:a2:24:14:0e:77:
9b:ae:9b:ec:04:bd:c8:67:b1:6c:51:40:47:a0:c0:f7:0d:8e:
17:a8:74:1e:00:44:36:68:70:e2:59:08:4b:53:5f:a3:fc:f7:
ee:8f:6b:60:81:77:d1:69:ef:46:e5:72:4f:3c:b2:92:6d:e0:
91:9f:cd:b0:b0:bb:0d:49:9d:90:a1:27:e9:a4:3a:5c:55:16:
c0:2c:3c:eb:ff:f6:3c:8d:42:8c:58:ec:fb:07:c1:f4:af:a4:
10:8a:ee:31:b3:8c:ea:08:e5:83:56:41:df:f7:a6:8a:e6:e5:
ab:70:d0:66:8b:b4:17:18:cd:e5:25:7b:c5:6b:95:ed:2a:ed:
69:07:2e:63:57:6e:77:7a:cc:bf:73:c4:ee:cc:0b:7c:17:0a:
43:d7:22:95:17:33:75:37:ab:6b:51:ad:76:9b:36:33:0d:52:
06:6a:47:f3:41:04:de:76:a6:34:63:10:ee:0d:d1:33:1c:56:
9e:4e:5f:8d:52:60:ad:5a:d4:4f:4b:f6:66:1c:9c:f3:bc:f5:
72:53:f3:4c:de:42:af:e1:71:53:fa:94:7f:ba:37:33:82:37:
6e:9d:7a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:44 2026 by rpki-client