Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: 0JrYIdHy1S0y3K0cdql6d3daS5buGxkTfzh+gKHsX3I=
Subject key identifier: 27:DE:F8:4E:4C:CA:5F:1C:2E:D8:95:26:40:24:C1:8A:78:0E:63:D9
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 019CAC46B7B04221FDA4858739CE9B6F4BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: 0435
Signing time: Mon 02 Mar 2026 02:00:41 +0000
Manifest this update: Mon 02 Mar 2026 02:00:41 +0000
Manifest next update: Tue 03 Mar 2026 02:00:41 +0000
Files and hashes: 1: 7lgvftt3YplOqtGKAXFKXfxxBQE.roa (hash: UMQdS0dx3gIMuyKJd19IDX0DWYOOtAEHJUPWP0Uspm8=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: rZOTH2dk5u14cB6MlrOyqkegxtT3iuJaRDEgmJgOr/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b7:b0:42:21:fd:a4:85:87:39:ce:9b:6f:4b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Mar 2 02:00:41 2026 GMT
Not After : Mar 3 02:00:41 2026 GMT
Subject: CN=27def84e4cca5f1c2ed895264024c18a780e63d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fb:d8:e5:08:4f:af:43:c0:b5:bd:cd:8d:83:
08:77:d9:a1:99:f5:77:e5:e3:ad:b2:f3:60:06:dd:
d0:8a:fc:29:2a:ae:4b:46:f3:07:c4:bc:a7:0a:85:
50:31:1d:c7:e3:5e:e3:02:84:ed:5e:13:77:89:bd:
a0:ad:22:bd:6e:9a:89:c2:5d:02:22:e4:d8:b1:5a:
f0:62:63:db:73:6e:96:6f:82:91:17:5f:96:f8:b8:
e9:7a:44:18:1e:88:fc:7a:86:47:47:92:56:24:29:
74:a5:4c:60:e5:98:13:89:5f:c9:6d:2f:2f:a2:64:
a5:fe:22:78:e2:c0:89:38:f2:15:b2:a4:92:22:35:
71:17:2f:04:75:19:66:a4:e2:c0:b1:dc:1d:9e:f6:
78:e9:ff:84:64:79:08:ba:94:d0:fd:51:c1:2c:94:
ac:85:6f:3f:f7:c8:49:51:fb:33:30:f4:68:23:ab:
a0:4d:a8:f8:be:97:ef:24:5e:10:61:ef:a5:c4:9b:
30:94:3b:21:96:18:23:b8:0a:4c:1c:c9:6b:f7:52:
c0:2a:72:f5:ae:6c:a6:3c:ed:d3:02:3c:aa:a3:c7:
77:17:1b:82:c0:49:bf:b2:c5:57:71:83:68:fe:c0:
08:af:41:52:a0:7a:ae:a4:cf:04:a1:c6:6a:27:ed:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DE:F8:4E:4C:CA:5F:1C:2E:D8:95:26:40:24:C1:8A:78:0E:63:D9
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ef:76:db:6e:f7:83:7a:c4:15:4f:c1:ea:63:64:c8:a7:50:
bb:d0:1e:fa:f1:bf:f0:88:35:45:ed:7b:66:f1:20:cf:5f:82:
a1:df:48:3b:71:5c:b0:69:6f:a0:31:46:57:7b:73:d4:c8:49:
4b:f2:63:be:c0:0a:87:04:ba:c4:32:6c:95:b8:48:b4:65:3d:
4b:a8:93:36:68:2e:1b:d2:07:a6:56:93:24:57:ba:80:81:c2:
dc:02:89:d8:f2:87:28:0d:72:d9:e7:df:d0:74:1f:ff:c8:dc:
51:21:6a:e3:80:ea:1f:99:2a:03:69:14:0d:5f:d0:13:73:a4:
44:71:ef:e1:46:35:5f:ce:fa:ea:7d:5a:f7:6e:e5:dd:5d:aa:
53:87:66:5e:6d:12:b0:fe:58:29:28:1f:aa:2d:29:37:9d:70:
b8:7e:5d:ff:2c:1f:c9:4c:21:56:29:75:42:8b:39:bb:db:60:
cc:d4:ff:42:0c:eb:65:65:1b:56:ee:8d:13:2a:58:ed:a3:c6:
fa:15:4c:44:4c:86:09:d9:e6:b7:81:e6:46:d7:45:a4:e2:f2:
a9:da:4c:81:35:1c:85:f8:ff:e6:ee:3a:f8:e8:fc:4f:8a:29:
ff:89:94:a8:dd:d6:32:01:f0:dd:66:86:95:54:c8:50:00:7a:
e2:f6:c2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:57:18 2026 by rpki-client