Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: cas6XNnlyh3K27M3PRn0pB6JNFYMR4RaJdw3Hjcv43U=
Subject key identifier: 72:C5:11:01:8C:AB:C1:22:63:6C:F8:49:CD:51:3E:F8:7E:23:30:62
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 019CAB34994D319CEFE64F905E218F4A2340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0D69
Signing time: Sun 01 Mar 2026 21:01:16 +0000
Manifest this update: Sun 01 Mar 2026 21:01:16 +0000
Manifest next update: Mon 02 Mar 2026 21:01:16 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: CH6q60hV3GDYsh93Q5hQGvhgxc+ztDDEB4GgqLF5IdA=)
2: UFBgy25q3CguK3nxfqwvatepW1g.roa (hash: m6Q6Vl1NfvutDppfODeVLNYdAatkJRM43X4ANyU2Y1Q=)
3: opow8uP9IKSNWNqVgii4cTwADfA.roa (hash: +b/EweslPo3iR9ssvZX7aiO4HVHajEP37IxcMi09yZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:99:4d:31:9c:ef:e6:4f:90:5e:21:8f:4a:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Mar 1 21:01:16 2026 GMT
Not After : Mar 2 21:01:16 2026 GMT
Subject: CN=72c511018cabc122636cf849cd513ef87e233062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:cf:1c:ea:7f:d3:1d:2c:fe:e4:51:cb:f0:
2f:df:eb:f3:1d:9e:47:fc:e4:bd:d3:b7:0e:90:df:
7b:c5:fc:0c:86:8a:95:5c:2a:cc:03:f6:7d:c4:1c:
71:2f:a7:a3:89:21:b6:59:2b:70:bc:0f:54:da:d4:
d8:8b:b3:2c:64:1f:a3:52:05:25:c5:f1:52:1b:43:
1e:a0:39:3f:b5:58:45:a8:5d:9e:40:6d:bc:5f:a4:
0f:72:d2:b1:84:90:5f:52:3a:4d:ed:56:33:a7:00:
f1:48:7e:bd:18:61:24:13:19:75:2b:91:69:43:32:
df:b7:79:28:71:f7:e0:1f:c6:c0:97:e8:86:be:2e:
49:63:88:7a:50:d3:9c:57:4d:fd:d2:85:30:63:7e:
5d:93:6f:05:b3:6a:c3:35:bb:77:ee:ff:79:e6:24:
ec:4c:a6:7d:08:36:62:43:5f:47:39:f2:92:da:42:
3e:ef:3e:58:40:40:7e:45:c4:4f:26:79:d8:ab:e1:
2f:cc:24:f5:e8:f9:78:72:db:68:d3:85:e7:cc:61:
d1:30:02:1b:36:3a:0f:98:30:c2:60:75:9b:60:1b:
10:cc:cd:14:ac:f1:71:71:ca:76:c6:6a:17:8c:04:
55:e1:ca:c3:ce:f1:04:cc:d7:38:34:c0:87:d7:b2:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C5:11:01:8C:AB:C1:22:63:6C:F8:49:CD:51:3E:F8:7E:23:30:62
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:92:ca:ff:f6:71:75:68:9f:57:f7:f8:d1:6c:07:84:e3:0f:
26:bf:a1:d2:f9:9f:67:d9:e0:91:0f:58:6c:3a:15:37:10:65:
ee:09:cc:56:a9:27:35:c7:5d:2c:87:84:e3:8a:c5:f8:50:dd:
cb:d1:c7:db:98:1d:b0:00:9b:58:e4:da:31:91:90:3d:85:a6:
7a:0e:46:9a:4e:73:10:00:00:58:2f:b1:63:4d:95:87:f3:ec:
cb:1c:a3:31:a5:42:b1:31:f1:cb:c7:87:cf:70:f2:3f:48:aa:
21:ad:3d:07:9a:b7:72:6b:e6:69:de:6b:3a:8b:51:80:01:6f:
3e:bb:3a:e5:4d:90:48:f3:7d:0d:c1:af:03:4b:ff:de:0f:5c:
32:e9:5f:5c:60:1d:49:4d:54:50:78:f3:12:70:42:86:5c:0f:
ad:ab:1b:c9:f5:78:28:86:f4:22:82:63:75:30:da:c4:e7:24:
c0:d7:eb:e0:c0:a4:59:f4:f7:33:74:de:d1:f7:2a:6b:1c:b6:
ee:7a:62:65:cb:a5:40:13:b9:7e:8a:26:dc:0f:80:fa:d8:70:
f2:92:3d:34:50:f9:4f:f5:f4:3a:7a:8f:03:24:90:08:df:d5:
da:8a:9a:74:db:6c:d4:89:dc:03:85:e7:77:17:4f:28:49:d9:
ce:39:09:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:45 2026 by rpki-client