Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
File: O618kdgYkaWUfX4UpmhJEgY6Xdk.mft (raw, json)
Hash identifier: rHH8MsdMvO9hdn/u08KjtPxGJYdtefyvWwitWWfKbqs=
Subject key identifier: 14:AC:58:4A:81:D5:92:62:62:FA:DE:DE:82:03:14:90:88:8F:70:0C
Authority key identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
Certificate issuer: /CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Certificate serial: 019CAB34817297204B76EDA96872A1C32C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
Manifest number: A8
Signing time: Sun 01 Mar 2026 21:01:10 +0000
Manifest this update: Sun 01 Mar 2026 21:01:10 +0000
Manifest next update: Mon 02 Mar 2026 21:01:10 +0000
Files and hashes: 1: 1dnKy71ofDf4gYNI2KAkrU9kzh8.roa (hash: MZO4jDWSpb/PyhryjkODVE5dJvKnrUZbR0xYvl98uuA=)
2: O618kdgYkaWUfX4UpmhJEgY6Xdk.crl (hash: XOndacQD4Ser18hCCA5VH1fVxJ1ih9j1Ei992xTCkBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:81:72:97:20:4b:76:ed:a9:68:72:a1:c3:2c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Validity
Not Before: Mar 1 21:01:10 2026 GMT
Not After : Mar 2 21:01:10 2026 GMT
Subject: CN=14ac584a81d5926262fadede82031490888f700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:aa:fb:11:06:35:26:02:bb:d1:8f:5b:14:b7:
d3:86:95:62:1b:e5:a2:7e:17:df:4c:65:11:1c:e4:
c7:6c:de:83:17:59:e0:ad:80:65:07:04:f3:e1:3f:
87:97:e4:eb:3b:7c:b6:0e:8e:4b:6d:d8:4b:d4:37:
46:ae:21:a2:bf:df:2f:66:a3:87:ca:a1:1a:af:5b:
6b:fb:a3:93:5f:52:b3:d3:2f:83:6c:3f:a2:f3:af:
48:bb:04:92:b7:f2:a4:f8:ad:e9:37:a9:6f:b7:4b:
96:fd:f6:c3:7b:09:43:b2:e8:6b:18:82:be:1c:b4:
51:c9:74:f0:b7:1e:16:1d:1f:ff:f2:d9:db:82:e3:
e2:9f:0f:fd:6c:af:9c:e3:2c:19:69:54:0c:69:26:
45:02:5d:83:f5:0b:89:3a:8f:3f:20:03:f5:70:f8:
cb:63:98:66:85:1d:5e:7e:4a:c7:1e:ec:b2:d3:d9:
1c:cc:6e:2c:ed:51:45:77:0e:2b:55:81:53:56:fc:
18:1c:fa:e4:68:03:2a:98:99:f7:a9:55:ef:28:8e:
9f:48:3c:3e:77:12:da:a4:90:72:69:53:62:23:08:
0e:62:4b:d3:74:f1:4c:cf:10:e0:a7:e1:57:df:d9:
94:d1:80:7e:1d:0c:4f:dc:d7:26:d9:1c:1d:cc:54:
3b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AC:58:4A:81:D5:92:62:62:FA:DE:DE:82:03:14:90:88:8F:70:0C
X509v3 Authority Key Identifier:
keyid:3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:97:fa:41:b3:ab:74:27:14:70:ea:22:18:91:af:7d:41:f9:
69:81:de:7b:16:c3:d6:d6:cc:3b:07:71:32:76:71:53:4f:97:
33:07:8a:66:2f:65:fc:1f:5b:4c:1b:65:a9:66:fc:c4:83:f6:
1e:bd:96:61:5b:d1:df:4e:b0:42:bf:a1:e6:83:58:d4:c9:7e:
85:6e:e8:a8:12:a7:27:77:d5:e5:df:d6:13:02:f2:8e:c4:40:
43:5d:13:c8:4e:ab:f5:f1:1c:0e:e7:bc:6f:88:97:bb:06:d9:
da:5e:03:b5:2d:d1:4d:92:4e:7a:2a:fd:d9:b9:33:91:12:d3:
fd:c4:72:f2:af:7d:33:e9:59:38:d0:79:b4:43:4e:8a:3f:32:
e4:56:e5:49:93:64:f6:49:ec:c6:f2:20:ec:a4:96:3f:d1:1a:
86:d4:5c:a1:f5:18:b4:0b:47:01:2f:db:21:3c:79:34:ef:ff:
87:d5:f6:43:41:97:08:61:d2:19:9a:22:36:f5:07:22:10:a1:
1d:b0:95:6f:9e:4e:24:db:6e:7f:c4:10:cf:f3:00:75:c5:a3:
5a:e6:c2:f4:1b:f8:18:be:0c:19:63:5c:a4:2b:92:4d:79:ed:
77:92:9f:12:ed:56:9d:2a:bf:e2:98:95:99:ad:23:e8:44:e0:
a3:02:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:27:34 2026 by rpki-client