Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: JO1Z2v1FHhtUFURu68rKiO0pMRIb/IxhVOrgAvYoT/0=
Subject key identifier: B4:96:53:17:C7:60:E4:A8:DD:EE:7C:94:6C:2D:56:FF:57:85:5C:05
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 019CB091427397E026F73CEA101B91995BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 0322
Signing time: Mon 02 Mar 2026 22:00:35 +0000
Manifest this update: Mon 02 Mar 2026 22:00:35 +0000
Manifest next update: Tue 03 Mar 2026 22:00:35 +0000
Files and hashes: 1: 0sunuK8mYCHK4l0By1mDKNLTXQU.roa (hash: Bp/kxKZVCpRcoYpimQ/V45yUfQ2UHcCMtSwdBAO1PEo=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: pja2qs39NrVFZkpWS+rywY4sEVVatYR3Qdu+7UQ1zgs=)
3: qxHzPA9O-8GpBxVTvr_9Ai6EB2w.roa (hash: GWiMwB08/vtuFeBPkac8MF40YEUg4abdNc1TrrvX9Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:91:42:73:97:e0:26:f7:3c:ea:10:1b:91:99:5b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Mar 2 22:00:35 2026 GMT
Not After : Mar 3 22:00:35 2026 GMT
Subject: CN=b4965317c760e4a8ddee7c946c2d56ff57855c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:98:8e:98:d5:b3:a0:11:4e:38:ba:6b:2e:53:
bd:d3:e3:38:96:ea:fc:f7:d0:ca:15:ba:06:d1:6f:
73:8c:a3:e0:d5:88:bb:56:e8:0a:02:c8:ab:9a:b8:
49:d1:40:0f:70:11:1d:68:19:ff:b5:60:84:9e:6f:
d9:b4:26:31:e8:3e:48:44:56:a7:1c:e0:8e:8c:20:
54:fc:35:e8:90:dd:77:d7:c0:c9:7d:aa:13:13:f9:
2c:84:73:aa:e9:9f:a3:9d:18:08:0d:dc:af:cc:bb:
c5:cf:e3:a5:4c:e3:dd:c8:cc:e5:e5:0a:42:a7:68:
c3:4e:23:e3:31:6b:12:86:84:29:e7:eb:c4:44:6c:
14:71:d4:4f:dc:f2:c3:a6:8a:04:77:71:3b:cf:70:
6a:19:1e:35:cd:58:0d:87:45:49:9f:bc:22:8a:d4:
25:bd:a0:e5:3a:04:73:e1:ee:35:cb:10:97:91:4c:
4f:9c:9e:8f:0a:1a:0e:08:ae:e4:d0:b3:ed:23:9b:
68:ff:a5:a2:88:26:75:06:65:e8:40:a2:53:fd:b9:
d9:54:4b:65:55:10:e8:4b:0d:58:b2:10:c9:6d:fd:
11:50:ed:08:d9:f8:11:92:38:82:8f:6d:f9:b9:a6:
8b:df:66:df:67:96:2d:f5:df:7c:91:00:e4:20:14:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:53:17:C7:60:E4:A8:DD:EE:7C:94:6C:2D:56:FF:57:85:5C:05
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f4:fd:65:e3:20:28:0c:da:51:94:58:43:c5:1a:60:3c:7f:
fb:dd:69:d8:10:27:62:9e:44:7a:4d:f6:ed:7d:fd:26:72:3b:
45:20:0b:26:0c:90:e3:4a:78:a9:2a:67:9b:a2:80:bc:48:13:
08:e2:19:7c:82:dc:d4:ff:d0:e8:4e:2b:06:54:c1:34:60:ce:
7f:fe:84:18:75:ad:27:ca:c7:c3:e1:04:d8:28:4a:95:67:c1:
e6:24:33:8c:8d:fc:f1:39:54:d7:d8:47:f5:82:f8:d8:b4:88:
51:ea:ff:dc:c4:ad:30:2e:00:21:f7:2c:65:d8:ad:25:57:83:
88:cb:c8:ca:e0:2d:87:67:b6:31:72:52:35:43:ba:52:a6:cb:
81:50:d3:ed:70:8d:19:ea:d1:e7:54:7e:6b:66:fb:d8:27:3c:
9b:af:3e:75:6d:42:b2:61:23:6d:37:c9:c4:2f:fd:4d:67:cc:
b2:98:4a:58:02:04:56:20:88:86:97:c1:cc:3d:3c:89:39:d8:
d5:22:83:f6:da:d2:29:c3:e2:62:e6:f4:b8:80:70:34:a4:8c:
2f:41:87:e9:bf:3b:a2:60:d6:b5:89:ec:ac:f3:b9:4b:23:4a:
5b:f2:dc:d5:f3:22:fe:db:04:cb:80:67:a1:94:c3:f0:d9:f1:
59:88:97:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:05 2026 by rpki-client