Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: 06XxgHewdZfwLJQXlf4f0eBr8OkG57A0JvL5xFPVSJ4=
Subject key identifier: E7:BA:6B:98:3A:DD:0A:C6:9D:2A:16:7F:BD:4D:36:39:AA:ED:20:9E
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 019CAD22C731DCECAABFB4F0CE07A1CBB0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0F3C
Signing time: Mon 02 Mar 2026 06:01:03 +0000
Manifest this update: Mon 02 Mar 2026 06:01:03 +0000
Manifest next update: Tue 03 Mar 2026 06:01:03 +0000
Files and hashes: 1: Qtqqzn9yRNvrI3RXEfT5VayjgJI.roa (hash: lOFGAsrm5iHQNlLgX36AU9zrlOWulEYrqP1lI6ectMM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: aAk77pJF6Mw72+wq6j2KxkO23X9QMnmTAV9hVQmxZ7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c7:31:dc:ec:aa:bf:b4:f0:ce:07:a1:cb:b0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Mar 2 06:01:03 2026 GMT
Not After : Mar 3 06:01:03 2026 GMT
Subject: CN=e7ba6b983add0ac69d2a167fbd4d3639aaed209e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:5d:b5:ab:0a:6c:fd:19:64:1f:31:f3:bc:
34:20:98:3b:55:32:73:10:1e:11:a8:a5:f2:08:d5:
48:bf:e4:4c:b1:b0:79:2e:54:f8:e9:6c:89:09:db:
bd:5f:d2:03:4b:c1:cf:b5:55:1b:69:33:26:e1:92:
66:f2:f5:0c:e4:4c:bf:de:2b:e3:09:05:a0:b5:35:
25:20:72:f8:5e:3f:cc:6e:11:8b:f5:7d:30:ba:57:
08:30:d2:ea:5a:ac:42:74:89:43:46:f4:10:ed:f6:
f2:d2:d8:4e:d2:8c:77:f0:c5:50:71:4a:15:bd:7b:
5c:e4:f0:2d:4a:40:40:3e:24:03:d4:80:bd:2e:ec:
e7:80:93:3c:e9:46:fe:20:ae:0b:b9:ac:5f:c3:ec:
50:6b:bc:6c:31:1f:a2:16:1b:2b:c5:1a:2d:31:42:
9e:62:76:fc:58:4f:98:02:8c:86:db:fd:3d:da:62:
36:7e:b0:97:56:46:04:7d:c9:e2:5b:1d:96:91:32:
47:d2:4e:64:db:87:8a:3e:2c:4c:d2:3d:57:9e:e9:
98:b3:32:f3:09:6d:de:af:6d:41:0e:dc:7b:ec:0f:
6b:d6:70:c1:cc:29:49:cb:a3:b6:6a:4e:d5:25:04:
fb:9a:5c:29:f8:32:86:53:fc:b0:5d:03:13:82:0c:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BA:6B:98:3A:DD:0A:C6:9D:2A:16:7F:BD:4D:36:39:AA:ED:20:9E
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:72:d7:35:56:20:d2:a5:91:07:59:fd:33:42:dd:5c:19:c6:
2e:59:10:7a:47:04:6b:8d:fa:a8:53:27:32:ae:1b:f0:1f:b9:
13:4b:8f:dc:d2:37:79:c7:84:f1:dc:30:65:4b:74:9e:5b:46:
e8:40:ba:8a:cf:92:ff:74:3d:33:e3:b7:87:e8:a8:47:a6:ca:
fd:6d:90:a3:78:34:29:4a:9c:05:58:58:11:08:a3:43:ce:1c:
55:0f:a4:ee:a8:a5:03:c6:78:b1:2a:53:a5:97:8d:bc:e5:2a:
67:26:59:41:13:b3:3f:a2:6b:9c:1a:94:89:3f:eb:09:e8:94:
bf:09:76:78:17:ed:53:a2:dd:13:03:e7:1e:91:44:e3:06:f3:
6d:cb:68:1a:73:42:12:dc:1d:62:22:ff:f4:73:a7:7c:84:a3:
25:d6:a7:87:b5:11:07:17:42:8f:ae:f2:d6:62:49:09:fa:54:
46:55:9b:c6:bc:25:34:7d:d7:89:9d:42:a8:41:60:74:54:6f:
f9:8c:3f:cf:d8:d4:da:8f:9f:c5:10:04:2a:37:8d:57:25:14:
07:b4:27:e0:cf:4a:9c:51:20:77:42:4b:12:2a:77:f6:af:53:
07:9c:dd:9b:6a:86:63:2e:46:69:2a:f5:84:70:98:00:f5:2a:
ad:98:38:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIscx3Oyqv7Twzgehy7CsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZWM1ZDNkNGRiMTQ4NGE3N2UyYzg3NjNkNzRhMGJkN2M0
MzRkYTkwHhcNMjYwMzAyMDYwMTAzWhcNMjYwMzAzMDYwMTAzWjAzMTEwLwYDVQQD
EyhlN2JhNmI5ODNhZGQwYWM2OWQyYTE2N2ZiZDRkMzYzOWFhZWQyMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL5dtasKbP0ZZB8x87w0IJg7VTJz
EB4RqKXyCNVIv+RMsbB5LlT46WyJCdu9X9IDS8HPtVUbaTMm4ZJm8vUM5Ey/3ivj
CQWgtTUlIHL4Xj/MbhGL9X0wulcIMNLqWqxCdIlDRvQQ7fby0thO0ox38MVQcUoV
vXtc5PAtSkBAPiQD1IC9LuzngJM86Ub+IK4Luaxfw+xQa7xsMR+iFhsrxRotMUKe
Ynb8WE+YAoyG2/092mI2frCXVkYEfcniWx2WkTJH0k5k24eKPixM0j1XnumYszLz
CW3er21BDtx77A9r1nDBzClJy6O2ak7VJQT7mlwp+DKGU/ywXQMTggwmSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOe6a5g63QrGnSoWf71NNjmq7SCeMB8GA1UdIwQY
MBaAFJTsXT1NsUhKd+LIdj10oL18Q02pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUt
NGYzZWU4MzY1ZDhmLzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUtNGYzZWU4MzY1ZDhm
LzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHLXNVYg
0qWRB1n9M0LdXBnGLlkQekcEa436qFMnMq4b8B+5E0uP3NI3eceE8dwwZUt0nltG
6EC6is+S/3Q9M+O3h+ioR6bK/W2Qo3g0KUqcBVhYEQijQ84cVQ+k7qilA8Z4sSpT
pZeNvOUqZyZZQROzP6JrnBqUiT/rCeiUvwl2eBftU6LdEwPnHpFE4wbzbctoGnNC
EtwdYiL/9HOnfISjJdanh7URBxdCj67y1mJJCfpURlWbxrwlNH3XiZ1CqEFgdFRv
+Yw/z9jU2o+fxRAEKjeNVyUUB7Qn4M9KnFEgd0JLEip39q9TB5zdm2qGYy5GaSr1
hHCYAPUqrZg4rg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:42 2026 by rpki-client