Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
File: OuFF_jt5sr9oqtvgB9721yrvKsM.mft (raw, json)
Hash identifier: eXP4AQWrOmy6Lzt/YjoO3ylnFJXdYYSIcsRh+sXqXCI=
Subject key identifier: DA:86:98:8E:CE:71:EA:FD:88:51:2A:50:21:C0:8C:5C:86:63:1F:FA
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial: 019CAD22A076DA7457D084F5627A6DFB5373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
Manifest number: 1158
Signing time: Mon 02 Mar 2026 06:00:53 +0000
Manifest this update: Mon 02 Mar 2026 06:00:53 +0000
Manifest next update: Tue 03 Mar 2026 06:00:53 +0000
Files and hashes: 1: 9dlwjsoeaynXvLD6hU--GhYSrqM.roa (hash: mUWy20UuJGJ5BznEAMczwLkiJHHJsFmSVmANdbalu+k=)
2: OuFF_jt5sr9oqtvgB9721yrvKsM.crl (hash: VStJ1Tzd5zwV0DoIlWfFrGFYf2RORqLrDdZS17MWJQQ=)
3: rM_jdXy84vXGo0-WUXb97B2X5Vc.roa (hash: GjuFk6jemR6ii4hI/oxG1vqpEf4r+3pyDc+nTJsViK0=)
4: sEmorA-ZRll0p0UMYOTfT8auHu8.roa (hash: NXJluQHm5Ujqo8vGjkexvbDRO7wfW2RmWXBToETA0t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a0:76:da:74:57:d0:84:f5:62:7a:6d:fb:53:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Validity
Not Before: Mar 2 06:00:53 2026 GMT
Not After : Mar 3 06:00:53 2026 GMT
Subject: CN=da86988ece71eafd88512a5021c08c5c86631ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:e2:14:20:81:4a:f7:1d:f9:33:0e:49:8c:
68:64:3c:67:75:9f:29:71:1c:45:22:34:c7:cc:c3:
52:38:29:e7:87:ab:a9:f7:17:1a:de:bf:ad:0d:33:
52:35:71:65:a8:7c:8c:91:1a:47:84:0b:cd:b6:25:
01:03:ba:99:ed:08:82:17:17:ef:80:ca:7c:c5:3a:
fd:dd:9f:e0:e2:a1:91:ef:56:1a:d3:4b:b6:26:0d:
6b:85:e0:80:d2:05:02:eb:ed:59:75:9d:d9:b7:2a:
d9:56:2c:7c:62:41:c7:d3:d9:92:9b:d7:34:ee:ef:
7e:b6:ab:bb:67:f8:da:49:f4:6d:b5:14:f7:95:16:
c1:32:ff:ab:6e:9a:05:a8:71:62:67:50:55:26:6c:
f0:32:ad:8c:aa:4a:4a:e9:60:fd:31:13:37:99:45:
57:28:b2:c0:d2:d0:f2:d2:2f:1a:64:1c:d8:50:98:
a9:c2:18:df:69:76:c8:81:e8:ca:67:10:56:f4:cf:
bf:3f:f0:e5:a2:6d:ae:1a:09:73:07:e9:3f:4d:24:
3b:29:9e:9c:f4:da:dc:7a:79:53:62:11:2c:20:7a:
a7:ee:57:74:a8:96:b0:68:88:41:7b:3f:9c:1f:15:
2f:d6:d2:3b:ba:04:04:87:b0:f6:80:8a:0d:7c:41:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:98:8E:CE:71:EA:FD:88:51:2A:50:21:C0:8C:5C:86:63:1F:FA
X509v3 Authority Key Identifier:
keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:00:88:6b:19:2b:3f:5a:25:cf:7a:11:8c:0a:1c:2b:80:a5:
54:71:78:ed:3c:c1:1d:5c:33:eb:be:3e:d0:1a:40:36:74:d2:
92:2b:52:e7:61:d0:16:69:31:56:8d:c6:0d:49:5e:98:7c:8c:
98:72:44:11:b5:fd:9b:28:66:ec:4f:a5:90:83:f7:f9:6b:5b:
cc:7d:b8:2b:bc:c0:06:c5:d9:02:33:95:1e:c5:40:6e:e5:60:
5f:f1:83:91:f6:9a:63:e1:bd:50:5a:c3:48:29:25:81:7f:10:
cd:be:74:f7:9b:1b:33:aa:09:b6:1c:4d:c0:98:ca:ff:62:70:
24:60:fb:cd:64:be:60:58:63:0f:75:0a:a7:81:38:e3:05:de:
72:66:7f:1c:85:e3:f6:0e:b7:82:80:20:da:56:2b:ca:5e:c3:
bd:78:8d:c8:4b:e2:c9:42:fe:a6:8d:3b:92:66:b0:9a:39:54:
58:56:36:ca:f2:0a:f0:60:2b:bc:19:32:53:6f:08:6d:10:fd:
62:1f:d4:12:89:d6:c0:70:e2:0b:38:10:25:02:ca:84:68:ac:
d1:98:1f:6f:5c:c2:de:a7:67:f9:0c:cf:7b:ed:ec:35:d3:9e:
0a:fc:64:08:06:ca:ce:0d:b5:82:f6:00:08:23:0c:4d:e8:1c:
ea:f3:c1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:58 2026 by rpki-client