Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: yLOHynFe1iwhYfg2o8SsjajCeb49euRfHO6K/Z3o7Go=
Subject key identifier: E6:71:35:68:3E:4B:A6:59:E2:45:37:B7:B8:FD:98:4A:0C:69:EA:A3
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 019CAC1048AE30EB299CEB197AB844964116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 146F
Signing time: Mon 02 Mar 2026 01:01:14 +0000
Manifest this update: Mon 02 Mar 2026 01:01:14 +0000
Manifest next update: Tue 03 Mar 2026 01:01:14 +0000
Files and hashes: 1: 1-hcdN0H8sYbxU2FJ2TIpbt1wrcs.roa (hash: +oHH/wDqJPdzoao+MeKrBaUm4lv6BOEi7Q0L1v4HB8k=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: j3YuVvN56ioImWC2t8iM52PkeEA1B6k4V+4pPWeh3bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:48:ae:30:eb:29:9c:eb:19:7a:b8:44:96:41:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: Mar 2 01:01:14 2026 GMT
Not After : Mar 3 01:01:14 2026 GMT
Subject: CN=e67135683e4ba659e24537b7b8fd984a0c69eaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:b3:1c:ff:9e:70:d4:e2:b7:4c:f8:52:1d:
bf:a3:8e:c9:64:37:1d:77:ce:5b:75:1d:a0:6d:c2:
90:dc:8a:3b:42:b5:86:18:5c:48:5c:38:4b:71:39:
c0:07:09:73:4c:fc:ce:e6:32:0e:42:c2:72:5d:53:
d0:8e:e9:88:c1:97:d5:cc:10:ea:5d:d5:01:17:79:
c9:0e:fc:59:4b:fd:24:e6:9c:de:5f:2b:da:c2:a1:
5a:0b:a6:63:2c:fc:f6:cb:eb:bc:56:2e:3d:a4:cf:
e9:4e:67:7e:ef:27:2e:b4:5d:0b:d8:dd:07:af:f4:
b0:0d:cb:44:32:46:d3:9a:ef:c5:07:52:27:95:20:
b4:be:95:17:45:8b:03:2d:39:1b:67:e1:c6:b2:2d:
83:d3:63:7a:09:ba:5f:5b:72:95:7d:6f:c7:c1:83:
d1:b8:51:03:55:60:ad:92:2f:fa:54:e7:58:6a:8f:
35:0c:9d:0a:7f:1b:d8:3a:d5:9a:96:56:7e:16:32:
1c:2a:58:aa:ce:cc:17:15:3b:f7:fd:54:44:51:d5:
fb:67:0f:03:29:73:6a:13:25:c3:02:2f:0f:e1:7c:
51:af:7f:ea:3b:6c:52:1f:2a:9b:e9:0f:e3:29:30:
4d:30:13:0c:98:6b:cc:aa:d8:6b:d1:ca:57:46:a4:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:71:35:68:3E:4B:A6:59:E2:45:37:B7:B8:FD:98:4A:0C:69:EA:A3
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f4:74:77:e6:4e:88:4b:2c:85:81:75:d7:0f:bb:15:21:e2:
b1:cd:fd:b2:4e:e8:b3:a7:c5:b5:e8:33:42:35:cd:09:2c:6f:
94:a4:d9:cc:07:1a:c3:75:b3:38:20:4a:8c:c5:b2:9c:16:1c:
14:27:5b:65:60:ca:46:5f:47:65:00:3f:3b:73:d0:4c:8c:47:
30:2c:56:f9:27:96:b9:4e:85:cc:ac:cf:db:ef:5c:a1:0d:4a:
10:34:c0:64:3d:75:52:bd:a0:b9:56:b1:21:3c:1a:0a:bd:2a:
a6:af:c9:e0:8d:36:9f:f6:e9:66:5e:f8:28:27:f3:33:07:7c:
b3:1a:d0:b3:84:66:8f:11:e6:a6:4d:15:a9:31:9f:54:7d:33:
fd:21:8f:db:8b:cb:e9:da:3e:37:44:72:b7:9d:84:33:a8:fe:
3e:1b:09:03:21:fc:b4:d2:de:13:08:14:b0:9f:56:9a:7e:10:
5c:9d:47:96:e5:b0:bb:f5:d0:62:a3:57:2b:bc:14:0b:bd:80:
d7:98:85:fd:4f:cc:0d:3b:27:49:11:d0:e7:b2:b1:57:c1:1c:
aa:79:20:92:34:84:f9:01:f7:ea:27:c7:51:be:58:74:db:5d:
26:c0:97:99:8d:a1:c9:70:52:1e:64:e1:3a:e2:75:0c:55:a1:
90:20:2e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:36 2026 by rpki-client