Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
File: oGXmV0nKpfu0kekGl32xjTVZv0M.mft (raw, json)
Hash identifier: KGlWiDDzXldtuaFHIk/+e0j2essqg9Hmk1mUv30S/q4=
Subject key identifier: 23:22:B5:AC:48:97:72:B7:A7:6C:FA:33:0A:66:01:B5:65:21:90:14
Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43
Certificate serial: 019CAC46C85065155FF25CF868091FC93BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
Manifest number: 1587
Signing time: Mon 02 Mar 2026 02:00:45 +0000
Manifest this update: Mon 02 Mar 2026 02:00:45 +0000
Manifest next update: Tue 03 Mar 2026 02:00:45 +0000
Files and hashes: 1: OPZKD3Vt0sTBmYCk7cCKUWbrGKI.roa (hash: YresaaNN//tsTeKLfmj6Notknbb5CDEFkmcoLMPi/SQ=)
2: oGXmV0nKpfu0kekGl32xjTVZv0M.crl (hash: ZKHi/59fCPuBoyWuH6//NFGUZ1HmxbEmezs6sQXAvvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:c8:50:65:15:5f:f2:5c:f8:68:09:1f:c9:3b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43
Validity
Not Before: Mar 2 02:00:45 2026 GMT
Not After : Mar 3 02:00:45 2026 GMT
Subject: CN=2322b5ac489772b7a76cfa330a6601b565219014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:8d:f0:21:6a:aa:85:b0:39:7f:c2:47:7a:
82:70:66:5d:50:4c:33:c1:e9:e4:0c:7a:6c:de:9d:
be:28:49:30:e0:14:55:bb:50:e3:17:ea:3d:77:2c:
72:13:67:3e:75:73:6d:d2:5c:d2:2e:b5:56:c7:ce:
8a:bd:b8:02:df:4c:6a:3c:ee:d4:f3:70:e9:84:16:
67:55:69:dd:15:82:1a:6c:08:3a:28:05:4a:34:9f:
68:3a:1f:be:f1:95:5c:3c:f0:14:89:70:ba:1e:fe:
3a:17:5b:52:f6:4c:ec:fb:f8:85:19:fa:0b:9d:c3:
5c:2b:17:5c:71:eb:73:4c:86:42:f3:9c:cf:e4:77:
70:43:b5:cf:47:62:90:c3:bc:f7:fe:5a:57:8a:c0:
24:36:98:b4:b3:8c:85:1a:12:1c:56:fc:dd:c9:0e:
f3:a7:69:6b:cd:b0:21:a2:d6:1b:e4:52:dc:43:ef:
72:bd:93:58:42:d6:3e:66:2f:91:bf:6a:84:00:26:
fe:f4:2d:eb:5d:09:d2:89:16:f2:d0:81:fe:8c:57:
ce:49:cf:b4:62:0b:d4:33:20:1d:10:e9:31:94:4e:
e8:4e:71:33:df:b9:2e:ec:1f:d4:ef:b9:23:86:5a:
a3:d7:ea:c8:98:2c:d2:b8:64:b8:0f:ff:c3:45:83:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:22:B5:AC:48:97:72:B7:A7:6C:FA:33:0A:66:01:B5:65:21:90:14
X509v3 Authority Key Identifier:
keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:aa:ac:8b:dc:23:a2:a0:66:65:92:1c:76:cb:d2:ad:e0:cb:
0f:d9:b7:31:9e:95:8b:98:17:21:11:42:bc:ed:84:29:87:f6:
3e:a8:fd:12:27:4b:0c:ab:b8:0f:ff:46:46:7d:89:96:7b:13:
33:40:73:f1:e3:d0:a9:77:36:a2:4d:ef:b4:09:2b:36:de:3e:
47:c0:0a:82:19:d9:e5:da:37:52:7a:81:de:ac:c8:b0:27:01:
1b:6e:29:bc:ff:82:84:56:30:3f:03:9a:51:3f:3f:5e:cd:a3:
13:cb:04:54:0d:f6:f6:d9:ee:3a:af:a3:5e:4e:33:6e:64:3b:
0a:d6:74:bd:50:97:0a:c8:55:df:0b:cf:53:d3:8f:85:d8:2d:
b4:00:2a:dd:d5:04:b2:8d:dc:c6:f9:1e:57:13:6f:1e:0b:27:
50:6e:14:fb:cc:fd:4c:12:66:66:68:d1:48:ed:af:91:da:f2:
b0:19:bc:4c:45:12:37:70:bb:72:aa:bb:50:39:3c:ee:41:a7:
21:be:23:ab:43:68:10:3f:8a:eb:58:e0:50:3a:7a:09:f1:24:
d8:c3:21:3e:37:09:f8:6d:94:12:82:03:ef:e3:e3:89:b8:36:
bd:f3:8a:7b:be:7d:64:54:61:e3:bd:f9:bf:3a:af:22:bb:0c:
3a:e7:84:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:03:00 2026 by rpki-client