Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
File: OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft (raw, json)
Hash identifier: O/a+0aW1cQ/z2mOgeJP1qTs3J64kiQBzUdm/gVRAzWk=
Subject key identifier: F8:23:A9:38:9D:A0:69:E3:D6:BF:43:48:BD:95:14:BB:62:77:12:40
Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98
Certificate serial: 019CAC7DC4FF2D43711BEDCE8026339B8098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
Manifest number: 14DB
Signing time: Mon 02 Mar 2026 03:00:49 +0000
Manifest this update: Mon 02 Mar 2026 03:00:49 +0000
Manifest next update: Tue 03 Mar 2026 03:00:49 +0000
Files and hashes: 1: 4l0Qm7hiBf49LBhzNTcelNcpnnQ.roa (hash: fwyySipc+KRVGtJdEtG/OeuQDdMJxdBVXvf+3AzPh0w=)
2: OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl (hash: SnOVhUHyVpb7RmlooMD22QrMwKvPipilArAEG9TQ2eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c4:ff:2d:43:71:1b:ed:ce:80:26:33:9b:80:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39abeb591716e908345d329fffd3700352315b98
Validity
Not Before: Mar 2 03:00:49 2026 GMT
Not After : Mar 3 03:00:49 2026 GMT
Subject: CN=f823a9389da069e3d6bf4348bd9514bb62771240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:30:4d:6b:02:dc:ff:6f:35:db:b8:d0:a5:
23:ba:f7:c7:a5:fd:b9:9b:cd:55:2e:ff:87:f9:1a:
09:03:01:0a:c8:06:ce:cf:fb:02:36:aa:20:85:8b:
02:ab:7b:05:6a:49:a8:ba:39:7e:2e:1e:69:62:bb:
ab:27:3c:f3:28:9a:4e:98:77:00:78:41:9e:21:6d:
c6:30:9e:40:04:b0:c2:ce:63:6e:5f:7d:31:58:db:
95:04:ea:c7:26:c3:92:15:e9:cc:9b:b7:84:02:d1:
0c:d8:6a:47:54:1c:b1:db:8c:cb:b5:c0:12:8b:a8:
3c:9f:6b:b5:ce:76:a5:4d:56:34:2e:71:22:d3:7f:
98:e1:cd:7d:b3:10:81:19:1f:65:89:d8:05:89:a7:
47:74:a4:d4:4f:8b:bd:6c:0a:c6:7c:9f:9d:08:ac:
c6:b2:42:c8:7d:ef:b5:b0:10:c3:81:9e:26:a6:8c:
99:69:49:7f:46:ca:30:8c:85:b1:2e:0a:94:c0:1f:
25:68:54:dc:1b:0e:57:c1:0c:5a:38:15:20:b4:3f:
12:03:ac:9a:74:94:24:dd:0f:09:3a:65:7f:1f:9c:
25:65:1e:1b:af:71:e7:e5:45:03:01:dd:13:c0:bd:
2b:b6:d3:f6:c8:f5:77:db:7b:bb:49:d9:19:64:d5:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:23:A9:38:9D:A0:69:E3:D6:BF:43:48:BD:95:14:BB:62:77:12:40
X509v3 Authority Key Identifier:
keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b6:3a:f4:f3:af:be:61:2a:17:26:4c:3c:59:4a:83:80:73:
11:a4:4f:77:f7:76:65:56:d6:3c:b6:39:e3:e6:fe:f0:4e:fd:
c3:42:2c:bc:dd:bf:86:4b:a2:7f:aa:89:16:47:2b:92:e0:11:
3a:ea:d0:b7:c9:4d:40:20:a5:37:2d:7e:7d:01:b8:13:5b:dd:
c2:9b:c1:f0:8b:64:53:cb:96:7c:9a:b1:ee:66:d9:79:fb:9a:
59:5f:3a:c1:f1:57:fd:4a:69:7b:bb:20:64:dc:8e:60:b6:a5:
98:77:6a:6a:f7:9b:3e:fc:be:95:c1:0c:8b:87:3c:32:45:f8:
b3:e7:db:43:36:b0:23:92:ed:88:cf:fc:96:c0:66:03:2f:3d:
d9:0a:4f:c3:f3:4f:79:61:c8:75:b6:37:7f:7c:b0:89:a6:0d:
17:ba:bb:55:3e:80:3d:1a:60:2a:7f:52:aa:e9:29:a4:ac:c0:
07:8c:ee:ef:70:4d:13:c4:73:36:ed:54:88:cd:5d:ea:42:15:
f6:78:9c:6a:02:61:04:3c:0c:0c:72:44:0a:6a:8b:db:fd:57:
25:01:42:22:ac:7d:3b:41:83:b6:2c:12:2a:17:3e:08:5a:60:
55:c2:26:19:94:1b:19:7d:75:b0:41:2e:b7:57:3c:c8:f4:36:
14:9d:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:25 2026 by rpki-client