Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
File: OxiO137kpO6Av-8i-pD5LCGJF0k.mft (raw, json)
Hash identifier: jM5MSklpHEBuceOQqCmdW78AXWUW3ZelbIEdxRncKU8=
Subject key identifier: F9:1A:22:75:2E:BD:6C:AC:CE:01:8E:7E:33:D4:C1:3E:25:36:83:86
Authority key identifier: 3B:18:8E:D7:7E:E4:A4:EE:80:BF:EF:22:FA:90:F9:2C:21:89:17:49
Certificate issuer: /CN=3b188ed77ee4a4ee80bfef22fa90f92c21891749
Certificate serial: 01A0DDCE266AF2CD326CE59F0C044989D8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
Manifest number: 0127
Signing time: Sat 26 Sep 2026 13:01:09 +0000
Manifest this update: Sat 26 Sep 2026 13:01:09 +0000
Manifest next update: Sun 27 Sep 2026 13:01:09 +0000
Files and hashes: 1: OxiO137kpO6Av-8i-pD5LCGJF0k.crl (hash: 1DC32vFxcl7GlH+qd922hIb7il/k41bEWY03Vpw4eOQ=)
2: RuW8-PgIfibhBoqNocX_t7ptPOE.roa (hash: zV6LrJuAjMC8MbTSFPKsE8qN0Xu/5M2QJ39L5RQKY/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:26:6a:f2:cd:32:6c:e5:9f:0c:04:49:89:d8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b188ed77ee4a4ee80bfef22fa90f92c21891749
Validity
Not Before: Sep 26 13:01:09 2026 GMT
Not After : Sep 27 13:01:09 2026 GMT
Subject: CN=f91a22752ebd6cacce018e7e33d4c13e25368386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:9b:57:f6:9d:a6:09:ed:d0:c8:81:e0:5f:
8a:87:c4:3e:67:b6:6c:a5:d3:39:d5:62:18:bf:d4:
fb:b8:74:4a:34:43:6a:1c:6c:ab:02:e7:df:aa:3f:
ed:44:04:cf:36:c3:7d:ba:da:98:5c:1b:a2:d2:ba:
10:18:98:88:8e:17:ec:bb:73:9b:95:3a:57:c2:cc:
01:0f:73:08:a9:ab:99:ce:89:6a:0e:4b:e7:ea:eb:
03:3e:06:96:a9:ed:cf:e2:aa:9d:8a:1d:51:82:48:
70:ed:79:7b:c8:df:a6:ec:47:18:2a:29:4b:50:8c:
3a:57:b4:4a:37:e7:11:25:e4:e3:be:0a:b5:68:de:
0a:c3:73:1a:c0:fa:4d:ed:81:ab:84:92:30:22:17:
47:88:9c:03:18:f1:3b:f7:61:26:05:31:b7:28:9b:
ee:30:47:9b:50:98:73:9f:46:45:fc:ac:e1:4e:ed:
81:c3:11:2e:6f:41:88:de:4b:2e:6d:19:ae:d4:9c:
76:e4:09:70:b8:fa:bb:15:f0:44:6e:df:95:f7:e3:
b8:dd:8c:90:69:13:29:25:75:f2:5c:19:f9:87:5b:
80:e8:a1:c9:70:03:5d:82:92:62:59:50:23:7f:56:
5e:9c:4c:96:9b:ad:ea:4b:8a:e6:37:37:85:db:11:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1A:22:75:2E:BD:6C:AC:CE:01:8E:7E:33:D4:C1:3E:25:36:83:86
X509v3 Authority Key Identifier:
keyid:3B:18:8E:D7:7E:E4:A4:EE:80:BF:EF:22:FA:90:F9:2C:21:89:17:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6e:98:0d:b1:17:e2:67:f9:36:15:c9:0b:c3:5e:db:07:29:
72:2b:ae:05:78:f5:e2:85:90:c1:5d:34:e4:f8:52:25:55:0d:
4f:d7:b2:57:e8:ee:cb:90:2c:b1:58:12:1d:ff:89:c2:cb:e6:
84:88:b7:f6:76:5f:35:87:45:8c:0e:a4:41:7f:f9:ff:74:42:
46:f8:c0:05:12:e0:85:99:58:44:8a:74:c1:02:c6:b5:fb:6b:
ff:00:69:53:0c:80:95:81:a8:3c:ca:92:20:b1:99:7f:32:2d:
38:20:78:aa:db:7f:bf:7d:8b:57:20:aa:62:2c:a2:d3:94:82:
47:c5:80:af:52:66:84:8b:43:e6:e5:af:7f:25:72:b9:71:5d:
eb:da:46:90:48:cb:60:77:e7:7f:1d:18:e5:38:49:e0:4a:d0:
f4:45:cf:03:99:70:db:3c:6e:39:00:47:e9:50:83:aa:d4:33:
6c:3a:d9:93:26:c8:2f:e0:73:4d:d0:ae:be:2f:ea:28:29:88:
01:6f:b6:7c:c1:e6:bf:f7:88:f1:a0:dc:6b:39:9c:ac:12:7a:
b8:e7:26:fb:b7:54:5f:76:b9:a1:66:b3:52:71:77:3f:05:a4:
54:8e:01:8e:b0:29:6f:72:61:8a:bc:85:0b:4b:30:ff:7d:1b:
6f:c3:2a:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdziZq8s0ybOWfDARJidjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMTg4ZWQ3N2VlNGE0ZWU4MGJmZWYyMmZhOTBmOTJjMjE4
OTE3NDkwHhcNMjYwOTI2MTMwMTA5WhcNMjYwOTI3MTMwMTA5WjAzMTEwLwYDVQQD
EyhmOTFhMjI3NTJlYmQ2Y2FjY2UwMThlN2UzM2Q0YzEzZTI1MzY4Mzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5CbV/adpgnt0MiB4F+Kh8Q+Z7Zs
pdM51WIYv9T7uHRKNENqHGyrAuffqj/tRATPNsN9utqYXBui0roQGJiIjhfsu3Ob
lTpXwswBD3MIqauZzolqDkvn6usDPgaWqe3P4qqdih1Rgkhw7Xl7yN+m7EcYKilL
UIw6V7RKN+cRJeTjvgq1aN4Kw3MawPpN7YGrhJIwIhdHiJwDGPE792EmBTG3KJvu
MEebUJhzn0ZF/KzhTu2BwxEub0GI3ksubRmu1Jx25AlwuPq7FfBEbt+V9+O43YyQ
aRMpJXXyXBn5h1uA6KHJcANdgpJiWVAjf1ZenEyWm63qS4rmNzeF2xFyHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkaInUuvWyszgGOfjPUwT4lNoOGMB8GA1UdIwQY
MBaAFDsYjtd+5KTugL/vIvqQ+SwhiRdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3hpTzEzN2twTzZBdi04aS1wRDVMQ0dKRjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zY2E5Y2EtMmFmNi00YmRiLWEzYzkt
MGQ1N2UwNzE0YTQ1LzEvT3hpTzEzN2twTzZBdi04aS1wRDVMQ0dKRjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zY2E5Y2EtMmFmNi00YmRiLWEzYzktMGQ1N2UwNzE0YTQ1
LzEvT3hpTzEzN2twTzZBdi04aS1wRDVMQ0dKRjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC26YDbEX
4mf5NhXJC8Ne2wcpciuuBXj14oWQwV005PhSJVUNT9eyV+juy5AssVgSHf+Jwsvm
hIi39nZfNYdFjA6kQX/5/3RCRvjABRLghZlYRIp0wQLGtftr/wBpUwyAlYGoPMqS
ILGZfzItOCB4qtt/v32LVyCqYiyi05SCR8WAr1JmhItD5uWvfyVyuXFd69pGkEjL
YHfnfx0Y5ThJ4ErQ9EXPA5lw2zxuOQBH6VCDqtQzbDrZkybIL+BzTdCuvi/qKCmI
AW+2fMHmv/eI8aDcazmcrBJ6uOcm+7dUX3a5oWazUnF3PwWkVI4BjrApb3JhiryF
C0sw/30bb8MqMQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:38:33 2026 by rpki-client