Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: snLog935LoUHnbo1l0ADRgkLeKCXObhjrzC9+ju6RoQ=
Subject key identifier: B5:07:5D:51:20:B2:DA:25:2F:51:11:1A:54:73:08:FD:81:EC:69:FC
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 019CAD5A431E84D8777E548D455D1E6B7A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0EE9
Signing time: Mon 02 Mar 2026 07:01:39 +0000
Manifest this update: Mon 02 Mar 2026 07:01:39 +0000
Manifest next update: Tue 03 Mar 2026 07:01:39 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: y1CN6fckLsWzOI1gUsmd1erqzfen9XHLYzJ3UGrlBu0=)
2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:43:1e:84:d8:77:7e:54:8d:45:5d:1e:6b:7a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Mar 2 07:01:39 2026 GMT
Not After : Mar 3 07:01:39 2026 GMT
Subject: CN=b5075d5120b2da252f51111a547308fd81ec69fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b5:fb:08:7a:83:6b:54:6d:a8:76:93:b0:8c:
48:37:48:59:7f:6e:33:62:00:15:7a:68:96:47:78:
a0:d4:71:89:0b:1d:7a:3d:e0:c1:9c:2a:56:85:5a:
eb:c0:b7:61:7e:8d:f5:d3:fd:f8:2e:e4:c9:e4:87:
a7:5c:95:fe:fb:fc:8d:07:22:35:1f:26:ac:e2:59:
cf:ac:ff:87:76:91:15:13:fe:48:c8:a8:5d:e7:1c:
28:4c:23:ac:80:f9:b7:c3:57:8b:7d:e7:30:d0:86:
23:4d:35:cd:3f:ed:70:45:64:2f:b4:bf:3e:8e:59:
31:1b:9e:d3:96:aa:49:c6:f5:28:27:ef:f9:12:ff:
09:28:e2:3a:28:41:53:31:92:13:0d:a2:7f:ae:42:
63:15:df:9f:45:b5:01:13:9b:0c:08:61:4f:df:93:
4d:33:40:a6:c1:5d:29:cc:58:1e:99:e9:dc:4d:69:
9d:bb:60:78:6a:d3:5f:04:73:cb:db:4c:2a:2e:cd:
9a:77:43:4d:5d:30:be:11:2b:ba:a4:2e:02:2d:85:
1d:2f:47:d5:f3:fb:b8:b7:e7:63:68:f8:64:34:96:
b2:d3:0c:89:d7:31:bd:14:2e:50:65:7a:53:8d:a4:
b5:5a:68:35:95:94:7b:91:74:12:b2:53:a9:f3:6c:
2a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:07:5D:51:20:B2:DA:25:2F:51:11:1A:54:73:08:FD:81:EC:69:FC
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0a:cd:bc:23:69:00:84:ba:e2:99:67:da:26:42:cd:6e:dc:
04:54:76:19:9b:ae:7d:ca:42:f7:3c:2b:4b:37:65:10:52:56:
ee:89:3e:9f:0c:f0:36:e6:3d:f3:4d:e8:06:69:37:3f:20:a5:
e5:5f:05:9b:16:73:ca:a4:52:60:ef:9a:21:f1:42:32:d8:f5:
0c:6e:4f:44:23:e6:99:a0:22:40:df:13:d5:d7:a7:de:cc:1e:
77:96:31:7f:15:cf:c6:3e:52:59:0d:eb:4d:98:32:e0:8a:65:
2e:59:a6:09:79:36:19:91:65:16:26:e8:a3:ec:8a:db:09:59:
fe:69:af:d3:62:e0:96:21:f0:55:0f:88:64:4b:f0:03:5d:1c:
db:2a:41:d1:d0:fa:75:06:14:b4:ad:0d:dc:b4:55:c0:95:7e:
6b:61:46:31:e7:50:7d:cb:9c:ce:e0:a5:60:c7:f3:06:bb:8e:
c3:ad:b0:2b:7e:96:54:46:68:86:12:49:d6:77:14:1e:e6:c4:
ac:96:c3:3d:7b:7d:f7:73:b4:c4:93:04:8c:f3:11:2e:23:18:
5d:d8:6d:03:1b:89:d4:0a:1b:88:5f:aa:1d:91:2a:fe:79:92:
4b:7d:c9:5e:cd:c5:67:56:53:5d:ec:16:3b:68:21:e7:89:45:
c4:4a:1a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:08 2026 by rpki-client