Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
File: oet7cZVO3_yjWEyF-gj7EiQv7NU.mft (raw, json)
Hash identifier: lA6/HLO5Btlmv5sx+XIDqOlHmXCeotzHHcpc9FwV19A=
Subject key identifier: F6:0D:66:1A:C1:5C:DD:D8:E6:E6:5A:3A:95:AE:47:BB:C6:A4:C9:4F
Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5
Certificate issuer: /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
Certificate serial: 019CAEDA612AE1ABA05F4B264F8945BF201A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
Manifest number: 0119
Signing time: Mon 02 Mar 2026 14:01:13 +0000
Manifest this update: Mon 02 Mar 2026 14:01:13 +0000
Manifest next update: Tue 03 Mar 2026 14:01:13 +0000
Files and hashes: 1: lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa (hash: jNZxU5D1EKLny/wqaNa70XGzWgiNnFCUNtLqg86RKFE=)
2: oet7cZVO3_yjWEyF-gj7EiQv7NU.crl (hash: tRAwowPdYUzNmPd3bxKBgVEDeNufXAhj1yvoDV/ukng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:61:2a:e1:ab:a0:5f:4b:26:4f:89:45:bf:20:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
Validity
Not Before: Mar 2 14:01:13 2026 GMT
Not After : Mar 3 14:01:13 2026 GMT
Subject: CN=f60d661ac15cddd8e6e65a3a95ae47bbc6a4c94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a3:4f:94:ee:6f:61:77:cf:4e:05:c6:27:9d:
fe:0c:41:78:03:ab:f8:af:2d:03:d9:16:5f:32:d6:
48:35:74:f1:42:86:70:7b:c1:7c:ca:91:7e:a8:55:
e3:f8:78:73:54:cb:09:39:ab:bd:ab:71:4f:28:ab:
1f:bf:a6:f5:69:84:6b:41:a1:ca:28:b9:1e:17:ae:
15:c6:3b:10:f6:30:69:f1:37:c0:b4:8e:75:88:2e:
ef:9d:d4:b4:4b:2d:b7:41:84:42:3a:5d:39:bd:d2:
55:92:26:e3:b4:1f:6d:67:8d:3e:2d:10:0a:03:79:
9d:6d:4a:85:8b:7f:8b:be:88:f1:4a:bf:a4:8e:63:
7c:04:7e:34:86:01:36:13:63:6e:1e:a6:79:63:14:
dd:6d:ac:af:18:2f:9d:da:d8:27:e6:45:98:a1:1b:
ab:19:c9:16:ed:6f:e7:63:51:77:55:8b:fc:58:f8:
fb:68:ac:5b:ae:f4:1e:f2:d4:9f:91:92:59:c3:e8:
d8:13:ed:78:f4:2b:01:cd:46:06:a9:59:ab:bd:5f:
3a:de:c0:2e:2d:08:b0:10:bd:a8:dd:3c:d9:b8:09:
a0:99:d7:42:34:8f:c5:3a:7b:b3:31:57:66:25:32:
02:6b:d6:4e:95:72:a3:86:d9:73:3e:72:0f:2b:8d:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0D:66:1A:C1:5C:DD:D8:E6:E6:5A:3A:95:AE:47:BB:C6:A4:C9:4F
X509v3 Authority Key Identifier:
keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b8:69:7b:e6:27:56:a1:e9:07:6d:85:e3:8f:44:07:f2:e2:
e0:c8:06:2f:4e:b9:58:bb:aa:24:b1:08:6e:f2:8a:4d:5d:9a:
9e:13:17:f6:9f:aa:30:bd:05:a0:9b:1f:50:ea:f2:ea:77:8d:
e5:8f:00:c6:17:ad:d4:d6:7a:a4:d9:ab:8e:e9:11:d4:91:b3:
d3:f5:2c:56:7b:e9:d3:e1:0e:e6:cb:67:5a:04:a8:26:12:cb:
c9:b8:03:bd:da:c6:d2:bd:59:e5:e3:70:bb:d5:09:0f:66:35:
3f:97:a5:46:64:d8:af:94:f4:fa:73:58:e7:6b:f1:28:29:28:
4f:a0:c7:75:09:0d:f9:1b:a2:d5:e8:f2:82:2e:a6:67:19:06:
3f:f6:7c:0b:1a:ab:57:2c:12:53:8b:52:e5:98:45:b4:f8:e4:
a8:a9:e0:48:fc:29:8d:d8:e9:67:fb:85:00:45:d1:9f:84:2c:
d5:c3:8c:c3:bd:66:1e:46:46:2a:4f:e9:f7:c0:dc:50:8a:58:
c9:b9:73:d6:53:70:b1:36:60:4a:e0:46:ee:c7:0f:87:ab:2f:
e3:f3:c0:5c:a3:d9:a5:2d:01:06:9c:fb:68:49:f2:20:9f:b9:
78:74:ac:18:8c:92:36:a9:98:e7:17:c6:d0:e9:39:21:7d:9a:
8e:55:8e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:06 2026 by rpki-client