Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: DMX0BzerhdAeHXLyWYgE3DzyEZcdBIjBN4iRSeA0wiY=
Subject key identifier: B8:BB:68:47:1E:AB:09:2A:C5:34:4F:0C:39:0C:46:22:74:65:66:14
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 019CAAC6A008AA0454AFF90AEFBABD8FF6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 19:01:09 +0000
Manifest this update: Sun 01 Mar 2026 19:01:09 +0000
Manifest next update: Mon 02 Mar 2026 19:01:09 +0000
Files and hashes: 1: 1Ci6CgQlWtwRj4abWotGCgJ_WbE.roa (hash: 21FDHL6tsfpOVwV9wPtKykM8GJxDD9usWaIS/proET0=)
2: IOO3IGbg3gm00rI1vRsCU8sKWe8.roa (hash: 0AcGRGmbErLkr9vaJN/WU2nLbROdp3GeVVZZ5PGFvPU=)
3: OiGaIEub5jL1aTa5izfRirvLl84.roa (hash: 5MTw6kZy61jYtllFdul+j1TTHjK6hYnhm2x4TtMTz2Q=)
4: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: VoqXuW2cbwGyZzeQuXd/Ts/7RMo+XR5wZA2S8ACa79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a0:08:aa:04:54:af:f9:0a:ef:ba:bd:8f:f6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Mar 1 19:01:09 2026 GMT
Not After : Mar 2 19:01:09 2026 GMT
Subject: CN=b8bb68471eab092ac5344f0c390c462274656614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:55:26:fa:b6:76:29:e1:e4:ed:5b:84:54:1d:
ed:55:60:6c:fc:8b:03:d6:9e:45:f7:d7:ee:eb:02:
86:07:f3:49:3d:32:69:10:1c:f6:40:08:56:66:3c:
dc:b0:40:dc:c1:3f:87:cb:84:43:60:63:2f:ba:84:
7b:9b:0a:4f:a1:8d:eb:d3:8a:f7:c7:49:ad:79:34:
11:dd:2e:92:f9:1e:ca:5c:11:1c:0f:07:fa:e6:4e:
e2:61:c0:47:5c:03:26:69:91:32:c3:d1:77:c9:48:
28:f8:75:9b:97:d8:0f:91:54:73:d1:51:5f:95:4d:
99:f7:5d:c0:44:65:01:ed:10:79:94:7e:0b:aa:bc:
7f:f6:be:7b:e1:4f:a3:4d:54:97:cf:83:9b:ff:f9:
bb:a9:a9:3c:f4:ee:a8:d4:3d:28:6c:0b:4c:fa:d9:
f2:79:86:0c:1c:3c:43:8e:84:2f:ce:9f:50:42:1c:
fa:d9:7d:e5:c2:fe:f3:b0:04:21:5d:6e:f4:9a:d2:
39:1d:47:27:59:5e:46:df:66:74:07:ce:9d:22:28:
2f:14:32:91:02:83:0f:fd:d2:5f:ec:95:0f:aa:4b:
4c:3f:90:e5:c1:12:e2:a9:e5:5f:32:13:48:4d:f4:
0d:05:6c:03:cc:f4:76:25:cc:ff:90:81:b0:c1:75:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BB:68:47:1E:AB:09:2A:C5:34:4F:0C:39:0C:46:22:74:65:66:14
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:52:c2:d2:de:38:4b:aa:3c:c1:1b:18:b8:e9:2c:33:35:51:
d2:5d:01:9e:cf:c8:5e:0b:32:ef:39:31:8b:78:64:2a:67:61:
fb:78:c0:3c:d7:73:2f:3d:02:69:49:bf:a6:9f:83:d2:a7:32:
9d:2c:e8:db:20:33:55:25:71:62:4b:17:80:ab:6c:d3:f0:2a:
c4:50:70:ad:a4:31:58:f7:7c:1b:25:48:f3:c1:c2:20:05:a5:
38:9c:77:08:ec:35:23:a8:45:2e:53:ce:4b:18:86:fd:b8:ef:
60:fa:25:b5:02:68:74:dc:3f:36:8b:b5:95:17:9c:3d:35:19:
09:05:d0:d3:3c:f2:b8:88:13:20:94:7e:04:1f:72:39:95:44:
6f:d1:6a:34:8c:af:9d:45:22:bc:cc:53:d1:15:93:5d:21:e7:
c6:51:2a:83:a8:de:26:5d:ca:63:2b:05:55:91:7b:c2:b4:9a:
22:c2:c2:46:de:70:b5:30:88:6b:f4:17:cb:48:e5:a5:c6:a9:
20:e6:49:ed:4a:b4:44:b4:bd:97:32:60:cc:6d:11:58:04:bc:
fc:30:cc:e3:d0:82:0f:7d:ce:a3:2e:de:a2:a9:2a:96:b3:1b:
06:4c:44:35:eb:af:40:eb:53:78:4b:51:a8:4f:1a:af:a7:5d:
28:10:0b:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxqAIqgRUr/kK77q9j/b6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTE1NDQ0MWRmOTYyM2VlYjVhMTk2MTM4ZDIxYmVmNTgy
NGI0NDEwHhcNMjYwMzAxMTkwMTA5WhcNMjYwMzAyMTkwMTA5WjAzMTEwLwYDVQQD
EyhiOGJiNjg0NzFlYWIwOTJhYzUzNDRmMGMzOTBjNDYyMjc0NjU2NjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VUm+rZ2KeHk7VuEVB3tVWBs/IsD
1p5F99fu6wKGB/NJPTJpEBz2QAhWZjzcsEDcwT+Hy4RDYGMvuoR7mwpPoY3r04r3
x0mteTQR3S6S+R7KXBEcDwf65k7iYcBHXAMmaZEyw9F3yUgo+HWbl9gPkVRz0VFf
lU2Z913ARGUB7RB5lH4Lqrx/9r574U+jTVSXz4Ob//m7qak89O6o1D0obAtM+tny
eYYMHDxDjoQvzp9QQhz62X3lwv7zsAQhXW70mtI5HUcnWV5G32Z0B86dIigvFDKR
AoMP/dJf7JUPqktMP5DlwRLiqeVfMhNITfQNBWwDzPR2Jcz/kIGwwXXEJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLi7aEceqwkqxTRPDDkMRiJ0ZWYUMB8GA1UdIwQY
MBaAFKChVEQd+WI+61oZYTjSG+9YJLRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmIt
OWQ5NDM2NzFhOGEzLzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmItOWQ5NDM2NzFhOGEz
LzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1LC0t44
S6o8wRsYuOksMzVR0l0Bns/IXgsy7zkxi3hkKmdh+3jAPNdzLz0CaUm/pp+D0qcy
nSzo2yAzVSVxYksXgKts0/AqxFBwraQxWPd8GyVI88HCIAWlOJx3COw1I6hFLlPO
SxiG/bjvYPoltQJodNw/Nou1lRecPTUZCQXQ0zzyuIgTIJR+BB9yOZVEb9FqNIyv
nUUivMxT0RWTXSHnxlEqg6jeJl3KYysFVZF7wrSaIsLCRt5wtTCIa/QXy0jlpcap
IOZJ7Uq0RLS9lzJgzG0RWAS8/DDM49CCD33Ooy7eoqkqlrMbBkxENeuvQOtTeEtR
qE8ar6ddKBAL5A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:09 2026 by rpki-client