Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: VGaSe80XNOfsWlUUZd7BsSAslNAsOGXsWec/dxZk65c=
Subject key identifier: 09:6D:1D:83:70:17:5A:B2:C6:E8:8A:38:FA:43:7D:02:0E:F0:20:EB
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 019CAAC6E725998499B93339B7D92A38A56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0BA5
Signing time: Sun 01 Mar 2026 19:01:27 +0000
Manifest this update: Sun 01 Mar 2026 19:01:27 +0000
Manifest next update: Mon 02 Mar 2026 19:01:27 +0000
Files and hashes: 1: 16Wly6tf9ZCRlJ1eLRRr8Q4xzIw.roa (hash: Kp7oiL6STzpmE+EAdvQJo2k6GaSB6dYQxfvWJmxfMsM=)
2: JTe6rZdralZYMfrallY8D9l18pI.roa (hash: nAhU2MmHuPgFOMieOuqyCTSQGexpWdZSuDuOtmxyLp0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: 8ie8YP/rbN/+SgM05Nhgv9MUfuRbSLMrjOOhlnXpQUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e7:25:99:84:99:b9:33:39:b7:d9:2a:38:a5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Mar 1 19:01:27 2026 GMT
Not After : Mar 2 19:01:27 2026 GMT
Subject: CN=096d1d8370175ab2c6e88a38fa437d020ef020eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:db:65:6f:e6:fa:fc:9d:af:74:9e:a1:1e:
f4:8c:bb:42:d0:1b:63:73:ac:1e:8f:94:68:d4:90:
a2:11:d9:42:dc:48:0b:d7:ff:9b:34:68:a5:b9:84:
75:a8:12:21:dc:96:e7:f4:15:79:7e:b8:0c:9e:20:
2a:14:86:a3:5a:e6:8d:7e:bc:2f:d3:a8:36:b2:cb:
89:f9:f0:7c:40:75:ff:a5:b8:74:13:5d:05:f5:55:
e4:a7:23:67:0f:dc:9c:6c:c5:af:f8:63:8a:17:be:
81:55:e2:1b:e8:b3:25:1c:39:e4:2c:60:7f:3f:9b:
fd:18:ed:c9:15:f5:77:ab:a1:0d:4f:d7:de:31:3c:
30:d0:b5:07:06:0f:ea:ed:06:77:8a:86:e8:32:a0:
59:3e:30:c3:06:a4:42:4a:5d:1f:41:50:66:d3:52:
11:36:9d:27:db:e5:67:de:a4:f0:36:10:8a:9d:64:
9a:c7:6a:41:ba:c3:75:99:3e:81:9a:07:73:da:35:
fd:e4:34:15:84:9d:b1:ca:9e:60:3b:13:24:7f:51:
88:81:97:e0:ea:e9:b8:f5:93:14:8c:85:2a:80:bb:
ed:93:83:06:bf:5c:f9:09:21:47:4f:cd:cb:4b:c9:
cf:ed:35:16:eb:63:7b:a8:b2:d2:68:5d:fc:89:ca:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6D:1D:83:70:17:5A:B2:C6:E8:8A:38:FA:43:7D:02:0E:F0:20:EB
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c8:aa:7d:c2:65:c9:f9:eb:f2:e1:ab:49:90:8d:7d:9b:1d:
11:f7:a2:64:d2:a5:5d:ac:c4:59:3b:7e:cd:9d:f1:31:0e:fe:
94:4b:04:06:5b:e9:dd:92:26:98:e7:1b:8a:0f:7f:a9:5d:ae:
07:e1:7b:b0:95:f6:12:e3:9f:cd:23:1f:16:ce:0b:c3:35:a7:
56:2d:dd:08:38:59:08:23:2f:0f:ba:50:73:92:ad:d6:52:bb:
60:ec:05:04:04:9c:64:95:18:4e:6d:9b:2d:2e:2e:96:73:47:
8b:ce:e4:f6:a8:4c:22:a0:2a:e1:8e:9a:b2:5a:4b:af:f2:71:
ec:75:15:bb:96:6f:e8:33:b0:17:5c:04:39:d8:b0:b7:6b:6d:
51:d3:f4:5a:05:77:37:c9:ea:19:32:f9:26:04:63:83:6f:36:
8d:79:b6:cd:20:8d:75:99:e7:4b:59:55:99:a9:29:1f:6b:c5:
f3:58:ef:a6:76:3e:9e:a0:05:a2:58:9f:14:1b:21:42:b8:f6:
74:08:9e:f8:6f:33:d4:05:bf:bd:60:d3:70:71:a9:3f:e1:2a:
c7:02:c7:ac:d9:a0:83:86:41:15:58:96:ea:9b:d1:10:a4:d3:
84:fb:92:36:11:47:97:b2:b9:85:49:85:4e:9c:30:bc:f9:c5:
db:39:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:52:02 2026 by rpki-client