Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: CoTuzKcN0e5B91aNpDj53WT8KNVa31a/661qK3fs6kA=
Subject key identifier: 5E:41:59:9F:D9:D0:4E:06:3B:92:D8:6F:2C:E1:E7:AB:C2:8A:DA:9B
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019CADC814AC4D26DCA73741F6A8E3C331B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 09:01:36 +0000
Manifest this update: Mon 02 Mar 2026 09:01:36 +0000
Manifest next update: Tue 03 Mar 2026 09:01:36 +0000
Files and hashes: 1: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (hash: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I=)
2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: foc8y9wnrUMp1logsnGPk2k9N2JUZXipwBCQw6+hOG0=)
3: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (hash: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE=)
4: pMY2G7x73wBoXGM586Db9RcFDxY.roa (hash: 9gsZC3WF9scrT9Qn8MwE1JOLyps6ENzUI0Jj7Vf/mzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:14:ac:4d:26:dc:a7:37:41:f6:a8:e3:c3:31:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Mar 2 09:01:36 2026 GMT
Not After : Mar 3 09:01:36 2026 GMT
Subject: CN=5e41599fd9d04e063b92d86f2ce1e7abc28ada9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:b2:7c:4d:b3:f0:67:a4:50:f8:f9:a9:8e:
cf:c4:1c:81:96:49:76:13:09:05:b2:c8:45:6c:bb:
16:31:68:67:f5:fb:ea:0e:cd:68:9b:cd:2d:1e:26:
8e:7a:9c:ef:45:58:3e:62:95:92:8c:d8:02:1a:6e:
ad:a5:ef:52:a7:8b:d0:e1:fc:00:b9:78:0a:9b:b3:
14:28:26:39:4c:0f:d7:84:f8:c0:35:63:29:c4:5e:
b5:a7:45:ff:ed:cb:0f:f1:85:40:01:df:e0:85:ef:
e7:ec:89:b9:fa:a5:bd:79:67:b4:3e:9f:6e:c1:70:
32:24:70:77:c5:b8:e8:fe:57:cc:ae:39:88:55:86:
94:7d:0c:ac:b3:01:c9:95:44:38:9a:f9:fc:fd:5e:
b3:aa:51:02:06:76:c6:e9:41:1b:f9:4a:ac:5c:d6:
85:c8:39:05:88:c0:9b:a0:e4:0d:4d:59:27:ee:05:
9a:eb:8d:65:70:9f:31:6e:d8:f0:a7:dd:6d:67:5a:
1e:54:5d:f3:fc:64:ea:41:41:d2:c0:1b:39:65:2c:
33:3b:f8:41:bb:c8:0b:db:41:ac:1e:9f:01:82:bc:
df:8e:22:21:62:00:56:14:ba:57:95:7f:8a:db:38:
36:70:af:72:8e:97:a2:cb:3e:e0:13:b4:d8:45:a8:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:41:59:9F:D9:D0:4E:06:3B:92:D8:6F:2C:E1:E7:AB:C2:8A:DA:9B
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:99:80:40:49:cb:ee:33:e0:c5:92:39:22:8d:df:d7:c4:7c:
cb:f2:92:5a:a2:ac:06:39:a6:89:85:70:37:08:a2:2b:fa:b8:
23:46:b6:e0:eb:f6:d3:5c:66:10:46:89:20:3b:22:d1:0e:42:
b1:5e:47:44:72:e1:54:b6:c1:8a:9f:86:34:f9:28:99:2b:8e:
2a:79:82:33:7c:fd:70:66:9a:1f:53:01:43:8a:36:c8:2b:01:
e7:e1:e9:ac:3b:d6:ed:89:94:bc:da:6f:07:16:4e:c4:4f:fb:
0f:44:59:0a:ba:5d:dd:81:44:5e:7d:bc:b5:2c:24:5d:78:5c:
1d:69:ee:f3:d6:37:7f:3d:2e:46:92:fd:23:73:b6:8a:67:ad:
6b:79:20:9a:00:55:2a:ba:16:b1:c0:85:f9:53:d5:c5:76:43:
67:ca:24:da:60:31:dd:d8:47:8d:c4:47:32:db:ac:c3:10:06:
77:b9:5c:c7:80:2a:64:d4:14:cf:21:c3:4c:e9:db:6a:0b:b2:
30:5c:59:88:f6:84:b2:17:83:e5:a4:d1:10:3c:cf:aa:b9:21:
76:99:6d:ea:c9:de:c1:18:cf:c7:62:59:e2:fc:3b:0b:4e:dc:
4c:e8:e1:d4:9b:25:61:eb:75:8d:e8:a9:d9:03:79:e4:9b:89:
d2:e8:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:10 2026 by rpki-client