Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
File: oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json)
Hash identifier: 420BMbMbh+xMHOs6xARCpnzZOmcddcr/RBTD6ur3JSA=
Subject key identifier: 63:94:9B:F0:79:83:26:57:BB:71:84:E4:D4:E7:F6:B9:05:DA:4A:02
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial: 019CAC7DE71A45F24675B50DB8C299F67FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
Manifest number: 120F
Signing time: Mon 02 Mar 2026 03:00:58 +0000
Manifest this update: Mon 02 Mar 2026 03:00:58 +0000
Manifest next update: Tue 03 Mar 2026 03:00:58 +0000
Files and hashes: 1: THUvGSRSDdO8NyiSUs_kzMBgKSg.roa (hash: f2duUHB5LK8Of3Fa8X+WHnO6K86lhJ6HdId3wsUMfg8=)
2: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: LMc82MeN0VpiI/R5mHDR5vevEwv+4840mH/gUYIwj/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e7:1a:45:f2:46:75:b5:0d:b8:c2:99:f6:7f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Validity
Not Before: Mar 2 03:00:58 2026 GMT
Not After : Mar 3 03:00:58 2026 GMT
Subject: CN=63949bf079832657bb7184e4d4e7f6b905da4a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:c3:17:a3:ac:76:70:66:e5:e9:1f:2e:f2:
6f:9e:de:cd:77:48:db:7e:bb:09:a9:4d:20:8c:95:
76:59:ce:10:1f:b0:3d:3e:96:0b:6e:b5:a6:41:f6:
61:3c:f5:c0:28:8e:a2:80:20:c5:4b:45:70:ce:97:
02:94:bf:d6:cb:6d:37:c9:69:3c:4c:68:6d:06:46:
17:8a:28:6a:fb:62:b2:11:da:86:17:ae:70:c5:a9:
95:10:61:0a:eb:11:9a:5d:12:2b:cb:ee:10:9f:c0:
48:54:88:8c:69:4b:a9:d2:74:96:92:84:9f:e5:7c:
92:72:12:93:16:f9:e0:a9:0b:2c:89:19:85:a4:e4:
98:a5:a8:9a:41:64:ad:3a:d3:cb:ac:49:c8:5e:6a:
06:b0:b3:21:d3:b4:c8:50:28:d3:26:33:f5:41:40:
44:6a:3a:bd:15:b3:2f:09:86:64:1f:50:48:9c:c5:
ea:d9:c8:f9:9d:6d:9b:13:27:d1:6e:65:a6:41:d0:
97:de:94:36:04:38:26:15:ec:b3:6c:5a:8b:50:14:
53:28:f2:3c:f4:d4:bf:44:ef:00:fa:d2:9c:09:d0:
54:53:c8:a9:4d:06:8e:50:b2:d2:14:fb:f3:cc:ec:
e3:3d:c0:51:02:d0:f6:a8:63:af:fc:6b:c4:dd:64:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:94:9B:F0:79:83:26:57:BB:71:84:E4:D4:E7:F6:B9:05:DA:4A:02
X509v3 Authority Key Identifier:
keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5e:20:d8:18:5e:c0:8c:a6:10:b1:a9:55:50:45:af:8f:b9:
0b:c8:cb:f2:d7:8d:ab:fa:c8:1e:41:9a:c2:2a:79:12:c2:0c:
a5:48:89:da:7d:fd:aa:18:21:12:7b:9c:d6:f0:a5:92:72:33:
95:31:72:8f:ba:77:0e:0a:0f:80:5d:82:2c:56:82:74:5d:eb:
50:e0:bb:0b:e6:17:76:48:34:e8:e2:a1:5c:60:e9:88:e6:09:
08:0c:62:de:13:9d:cb:42:3a:23:a8:f6:64:53:a9:68:5b:6e:
d9:fd:a3:fc:d1:7e:42:cd:45:20:1d:12:0f:48:e9:ad:1f:82:
b6:e1:58:ef:a0:cc:26:62:d2:f5:34:c0:c0:8b:26:0a:32:9c:
9d:f6:47:44:e0:3c:9e:11:ef:c1:5c:29:da:e2:ab:75:96:9f:
b4:04:cc:79:85:5d:ef:d4:d0:e3:87:eb:83:59:b1:cf:e2:69:
e0:ae:e3:f0:bf:b5:61:17:8f:ba:96:4f:9a:83:e5:61:70:69:
cb:94:e2:4d:85:67:26:1f:8e:0d:7a:e6:eb:7b:a8:83:8d:ea:
92:33:ed:7f:d8:da:73:3f:a0:f8:02:0e:07:a7:65:e3:56:fe:
02:f6:42:a1:f0:9d:73:91:22:10:db:73:98:13:8a:56:a4:3b:
3f:74:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:40 2026 by rpki-client