Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json)
Hash identifier: vlrf2oD1YuxS6vBVjnpUpN2NDAMRt0fr6IK2i37KszE=
Subject key identifier: 68:D7:19:9A:B8:00:91:88:02:86:41:40:28:7B:0B:B5:C7:40:F1:36
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 019CA945E6239A1335A32517D6FA93CE41E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
Manifest number: 134E
Signing time: Sun 01 Mar 2026 12:00:56 +0000
Manifest this update: Sun 01 Mar 2026 12:00:56 +0000
Manifest next update: Mon 02 Mar 2026 12:00:56 +0000
Files and hashes: 1: 6GbxDT6a6WV6sMU4TLzGDdlwYGg.asa (hash: IznoMM07vrX9zSwsytLqGEh6ipn7AIyTyq5l5KBrdbs=)
2: VN57OoPBsGwrpB2MMJuifcY0BKk.roa (hash: DcZvkcVJE9Z9uRMzY1z6mkbvBqMp9YTBuJgd294hlxc=)
3: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: y++qF+uU7IJWfoHSZq+OtlTpj3s4OVsRT9e0ByFQJQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:e6:23:9a:13:35:a3:25:17:d6:fa:93:ce:41:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Mar 1 12:00:56 2026 GMT
Not After : Mar 2 12:00:56 2026 GMT
Subject: CN=68d7199ab800918802864140287b0bb5c740f136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e6:9b:4f:af:f3:8d:b1:85:a7:b5:af:c4:a4:
94:a7:21:7b:22:13:49:4f:c7:6e:01:f0:e4:d6:3c:
be:e9:a9:01:91:9d:39:27:5b:10:a5:4f:df:e9:0a:
6f:c0:4c:9c:e0:fc:a8:9d:0c:80:1f:65:77:cd:0c:
57:9e:f9:c3:ee:a3:b0:b3:1d:e1:cb:8d:82:91:9a:
d8:11:34:7b:60:49:15:69:18:78:ea:04:41:22:0b:
a8:39:1e:1e:dc:57:b6:94:07:f8:5a:f9:35:c9:cf:
27:35:dd:a9:0e:56:6a:f2:76:b8:76:21:a9:03:06:
65:29:9a:1f:ba:14:c6:46:43:5f:3d:18:2f:5b:5f:
81:1f:b1:b7:dd:42:18:12:b0:78:22:e4:9f:c7:a2:
97:c8:95:fa:21:56:d2:59:09:15:c1:bd:b8:eb:99:
c1:b7:c2:e8:cb:90:0b:75:4b:d7:28:74:b1:03:27:
86:7d:d9:12:5b:d3:1b:51:98:b7:b6:20:86:9c:c0:
3e:cc:fb:3e:03:b1:3b:dc:ed:a5:35:25:f8:09:0a:
5e:ed:58:f9:ef:9d:e7:94:0e:64:7b:d0:7f:b0:31:
a1:c0:a8:5d:c3:ce:a8:be:ed:b3:67:41:25:d2:b3:
e4:36:d7:5d:16:f8:db:7b:7a:ea:cb:1a:b3:2e:8c:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D7:19:9A:B8:00:91:88:02:86:41:40:28:7B:0B:B5:C7:40:F1:36
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:81:61:d5:bd:c2:e0:90:ae:ba:27:11:9f:d6:e0:d5:7f:3c:
50:05:56:2a:42:5b:0b:b0:56:bb:25:b5:db:ad:70:f5:61:8a:
76:61:36:8b:de:7f:06:02:c5:15:f1:53:99:b4:cc:6b:9a:b2:
1d:fb:5a:24:ff:47:91:b6:85:34:22:af:be:9d:e6:7b:1b:15:
55:bf:f2:e9:9b:c0:9b:34:0d:38:f7:0b:44:c5:ee:de:97:30:
b7:ef:6b:ef:20:ae:fd:ac:6d:2d:a3:30:d2:01:10:f9:93:43:
38:84:a7:0f:a0:6d:ed:20:3b:75:7b:c5:3a:19:de:d2:bb:fc:
81:b7:61:59:38:df:03:50:dd:3a:93:57:01:48:1d:ec:b2:db:
95:fe:2c:42:d2:2d:5a:82:83:c6:8b:97:a1:92:14:72:30:f1:
0e:dd:9a:a4:8f:4d:f3:12:4f:6a:c7:4c:00:a1:54:2f:71:f0:
53:85:cb:cf:e8:f2:73:97:4b:d7:f9:19:04:58:3c:c7:b0:62:
bf:63:41:ee:60:6d:81:00:09:cd:e1:aa:6d:f4:b7:bf:e5:b1:
da:f8:0f:bc:ae:ab:1e:5a:7b:3d:03:2f:60:ca:fb:01:38:a4:
13:02:e5:57:d1:a2:c8:f5:57:15:da:9e:2f:ee:82:59:c1:b2:
65:55:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:21 2026 by rpki-client