Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
File: oED5aPpS5ssv5lcQlwD6B0wZC4U.mft (raw, json)
Hash identifier: gZLu20ya3W3K8YCefiUJF0Pfhgk9oso/OvixYGQf4aw=
Subject key identifier: 7F:3C:65:DE:CC:DC:DC:07:29:80:2A:27:E5:0C:D1:AD:E1:D0:7D:71
Authority key identifier: A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
Certificate issuer: /CN=a040f968fa52e6cb2fe657109700fa074c190b85
Certificate serial: 019CAAFCED940F87E9F63260B5005BD18493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
Manifest number: 07F1
Signing time: Sun 01 Mar 2026 20:00:28 +0000
Manifest this update: Sun 01 Mar 2026 20:00:28 +0000
Manifest next update: Mon 02 Mar 2026 20:00:28 +0000
Files and hashes: 1: oED5aPpS5ssv5lcQlwD6B0wZC4U.crl (hash: 5HZxd8HH9xI200Sj6bN2WiuexRwpeYuJU5x7sBiJOqI=)
2: x2674gpeOOkrgbaldgBcetLScA0.roa (hash: slI9OZiOgpY/PPO59egGhNigxJguaSBoswQUZlXaUCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:ed:94:0f:87:e9:f6:32:60:b5:00:5b:d1:84:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a040f968fa52e6cb2fe657109700fa074c190b85
Validity
Not Before: Mar 1 20:00:28 2026 GMT
Not After : Mar 2 20:00:28 2026 GMT
Subject: CN=7f3c65deccdcdc0729802a27e50cd1ade1d07d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:7d:70:c1:ba:a2:76:2b:c8:00:3e:1c:e8:
70:69:4a:e5:4d:a2:aa:89:21:ae:7a:c2:31:26:10:
80:85:fe:5f:34:4e:5f:36:81:38:98:2e:ee:6f:6d:
b4:1e:9d:e8:69:13:f3:55:2c:87:b5:50:40:43:c2:
0b:7f:8e:97:5f:7e:fc:27:bb:97:20:12:b3:e0:80:
43:05:6d:9b:ae:41:be:6c:0c:74:89:be:0d:75:97:
3d:65:37:78:b1:5c:ae:f3:81:69:77:95:51:4d:70:
07:8c:0d:11:94:97:0a:8d:6f:f7:2f:bf:13:d8:e7:
80:bf:e8:a3:f8:8c:c7:93:76:73:60:02:b4:9e:c3:
58:00:10:39:4f:e4:7d:56:2e:40:a4:a2:18:8c:81:
24:75:0c:10:ba:bb:67:65:7e:2b:a3:a8:6c:b9:1d:
9b:e8:91:66:09:34:44:af:39:65:68:06:b2:7a:bf:
2a:fa:9a:54:20:ae:24:6a:a2:f1:0c:8f:7f:7a:5f:
e6:55:05:e9:6c:84:74:0c:e9:07:82:fa:f9:6c:f9:
68:ad:d0:a3:0b:46:8d:9f:57:99:e4:6e:01:0f:1a:
f4:dc:b5:30:e0:f0:44:67:4a:a1:ea:d2:e7:27:f9:
dd:c8:0f:2a:e3:6a:72:d0:bc:d9:55:26:1c:e6:07:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3C:65:DE:CC:DC:DC:07:29:80:2A:27:E5:0C:D1:AD:E1:D0:7D:71
X509v3 Authority Key Identifier:
keyid:A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:95:56:bd:47:a5:62:b5:64:38:66:66:70:ca:d9:e3:f9:c1:
40:56:a8:b6:b5:7e:43:59:7a:e1:b6:37:22:73:2e:5f:67:c2:
02:41:45:72:a7:14:4e:af:ca:fb:d4:42:5a:ca:fa:ae:11:f6:
9e:89:8e:61:72:ce:c8:66:0d:c9:21:66:d5:0d:94:e0:2d:a2:
60:b2:fa:46:92:13:25:62:f1:68:34:58:cd:2f:1a:15:5d:b2:
9d:59:02:92:b0:15:80:1d:cd:63:cb:3f:e3:e2:f2:c4:79:1e:
b3:6a:4a:e0:1b:89:ff:91:d5:97:66:d9:0d:1b:ff:da:f7:1b:
b2:2b:dc:b0:84:52:0e:82:a7:a8:bd:db:81:b5:46:a6:13:04:
81:0b:d9:33:e5:b6:f4:32:06:e5:27:26:7c:5d:38:fa:43:8a:
de:6e:39:55:e6:8d:4a:c2:82:a3:0b:7a:7f:ea:01:5e:c7:98:
b4:9f:ac:cd:4d:db:58:ba:1e:5e:9d:03:06:c4:a4:73:32:16:
ae:fc:83:e1:d6:68:5a:1e:1e:2f:dc:95:0e:90:dc:8b:e7:b3:
b2:35:a9:fd:3e:60:49:4a:f5:ad:90:c9:2c:17:70:0a:a8:a8:
d2:af:fc:b0:24:3f:30:36:91:f5:f2:10:16:63:39:7c:cf:e9:
7b:f5:31:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/O2UD4fp9jJgtQBb0YSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNDBmOTY4ZmE1MmU2Y2IyZmU2NTcxMDk3MDBmYTA3NGMx
OTBiODUwHhcNMjYwMzAxMjAwMDI4WhcNMjYwMzAyMjAwMDI4WjAzMTEwLwYDVQQD
Eyg3ZjNjNjVkZWNjZGNkYzA3Mjk4MDJhMjdlNTBjZDFhZGUxZDA3ZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOp9cMG6onYryAA+HOhwaUrlTaKq
iSGuesIxJhCAhf5fNE5fNoE4mC7ub220Hp3oaRPzVSyHtVBAQ8ILf46XX378J7uX
IBKz4IBDBW2brkG+bAx0ib4NdZc9ZTd4sVyu84Fpd5VRTXAHjA0RlJcKjW/3L78T
2OeAv+ij+IzHk3ZzYAK0nsNYABA5T+R9Vi5ApKIYjIEkdQwQurtnZX4ro6hsuR2b
6JFmCTRErzllaAayer8q+ppUIK4kaqLxDI9/el/mVQXpbIR0DOkHgvr5bPlordCj
C0aNn1eZ5G4BDxr03LUw4PBEZ0qh6tLnJ/ndyA8q42py0LzZVSYc5geH6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH88Zd7M3NwHKYAqJ+UM0a3h0H1xMB8GA1UdIwQY
MBaAFKBA+Wj6UubLL+ZXEJcA+gdMGQuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VENWFQcFM1c3N2NWxjUWx3RDZCMHdaQzRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84OTU1MDItNGUxNC00OTYzLWEzMDUt
M2I2YjBhNTU1NWVmLzEvb0VENWFQcFM1c3N2NWxjUWx3RDZCMHdaQzRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84OTU1MDItNGUxNC00OTYzLWEzMDUtM2I2YjBhNTU1NWVm
LzEvb0VENWFQcFM1c3N2NWxjUWx3RDZCMHdaQzRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5VWvUel
YrVkOGZmcMrZ4/nBQFaotrV+Q1l64bY3InMuX2fCAkFFcqcUTq/K+9RCWsr6rhH2
nomOYXLOyGYNySFm1Q2U4C2iYLL6RpITJWLxaDRYzS8aFV2ynVkCkrAVgB3NY8s/
4+LyxHkes2pK4BuJ/5HVl2bZDRv/2vcbsivcsIRSDoKnqL3bgbVGphMEgQvZM+W2
9DIG5ScmfF04+kOK3m45VeaNSsKCowt6f+oBXseYtJ+szU3bWLoeXp0DBsSkczIW
rvyD4dZoWh4eL9yVDpDci+ezsjWp/T5gSUr1rZDJLBdwCqio0q/8sCQ/MDaR9fIQ
FmM5fM/pe/UxYg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:28 2026 by rpki-client