Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: c8grSt2Hop/0wbnsrI8grF+YpAKU0j0dahnhAH1CRQw=
Subject key identifier: 26:1D:0D:73:DE:E5:47:F7:86:05:FD:20:24:AA:DC:15:D6:55:A0:3E
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 019CA9EB1370A09BDF01A4BE23F90EA61326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 17D6
Signing time: Sun 01 Mar 2026 15:01:21 +0000
Manifest this update: Sun 01 Mar 2026 15:01:21 +0000
Manifest next update: Mon 02 Mar 2026 15:01:21 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: z1giuWMKAMQd7BbNV+p5UOajCj/wnDsqGWU6zA6EHX0=)
2: TFyydJckZZxmvJ2kyZiqerxMndc.roa (hash: 1M8O0DEiBMTzRovUAkdLb42byd8jCd0k32zelG/wKMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:13:70:a0:9b:df:01:a4:be:23:f9:0e:a6:13:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: Mar 1 15:01:21 2026 GMT
Not After : Mar 2 15:01:21 2026 GMT
Subject: CN=261d0d73dee547f78605fd2024aadc15d655a03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:c8:70:f7:63:21:fd:02:0b:6b:29:85:33:
39:52:59:09:04:35:cf:cf:ae:3a:75:05:a6:d5:d8:
d4:d7:a9:82:f7:41:79:17:f7:7d:b3:ad:01:3a:f2:
dd:ff:71:42:c6:00:1b:98:d2:45:45:01:dc:24:3c:
7b:f8:f7:3b:6d:2c:b5:91:b1:12:fa:e9:88:4b:16:
4d:e9:ed:a8:1a:80:a5:23:50:c2:1a:5c:a1:93:2f:
5e:2b:7a:6f:58:29:e4:7e:16:68:57:dc:1e:3f:94:
67:28:d7:6f:95:38:86:ca:5a:02:d3:c1:b0:79:b1:
3f:0d:97:eb:78:04:f9:64:ae:c9:a2:2a:74:6d:46:
60:ab:83:c3:da:3a:85:d5:24:a4:a5:2b:b0:76:f5:
c8:cc:6c:32:46:7e:8f:6a:67:8f:b3:7c:57:b3:0a:
39:b8:e5:80:30:70:35:1f:3d:df:e6:11:12:33:5b:
74:48:c3:aa:35:fc:4b:fc:62:29:d4:7f:e8:e2:04:
31:36:ba:84:f4:2e:9f:10:9e:0c:dc:6d:ad:ea:0b:
59:83:a2:79:89:99:59:d0:66:f8:b2:36:37:db:b9:
cf:25:42:0d:89:1e:93:c4:bd:c3:24:3a:c0:d4:2b:
60:3a:b6:a6:45:35:0d:a5:82:d9:f9:a1:1f:5a:c2:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1D:0D:73:DE:E5:47:F7:86:05:FD:20:24:AA:DC:15:D6:55:A0:3E
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e9:14:25:9a:59:e8:23:d4:da:1f:62:00:5a:3e:88:ce:35:
55:19:50:4b:9d:f7:5a:0d:bc:86:bb:71:83:40:bb:56:90:d0:
88:26:d3:91:bc:6d:bf:a6:08:fd:c0:0b:45:c7:a4:f5:95:5c:
2a:1a:b7:26:5a:d6:4a:9b:b7:b1:00:5b:52:fa:20:09:dc:6f:
7e:02:a0:67:d9:1a:f3:37:5c:2f:a7:4e:f7:b1:22:f0:2e:cf:
c1:89:91:36:c5:2f:81:5d:ef:f8:f6:03:ce:92:02:77:fb:85:
8b:3a:b7:6d:76:be:52:01:34:71:46:95:6b:41:63:39:1c:cf:
fe:8b:95:92:4d:2e:e3:c7:4f:38:88:d5:9c:bb:2a:76:ef:ac:
c0:c6:0a:ce:2e:e1:3f:74:64:0a:38:2f:fb:f4:2a:e7:4e:62:
d0:7e:17:eb:15:75:fe:47:92:8d:8a:d6:b8:26:93:3c:a8:c9:
ed:e4:68:62:8d:c3:18:1b:54:01:2b:bc:16:c5:88:7c:24:b1:
5a:69:de:d3:fc:94:1f:de:d5:e5:5a:1a:b0:da:9c:8f:19:23:
a8:5f:6e:8e:d1:3a:3c:68:6a:60:da:54:fa:d2:7a:0f:98:a0:
d7:0c:c1:e1:aa:3c:9d:12:07:df:96:8a:7c:d8:5d:cf:b7:3f:
ba:95:91:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:38 2026 by rpki-client