Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier: 8mDJtK9Lne5h0Yu1mp/DX0X9fmRe2MRtpNEkqUeLmVo=
Subject key identifier: 86:15:46:AB:CF:F7:5A:A7:A7:A9:7A:90:15:4C:89:01:27:0A:F9:95
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 019CABD9766D4263AF48F2585DD646B36939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number: 1224
Signing time: Mon 02 Mar 2026 00:01:21 +0000
Manifest this update: Mon 02 Mar 2026 00:01:21 +0000
Manifest next update: Tue 03 Mar 2026 00:01:21 +0000
Files and hashes: 1: 0Zesq0AbB4PradrYOoKeAmLgmoo.roa (hash: uyAIf7m1jJ9F7/DZjhCImbWm0xh75pqBE+0Iul58rXo=)
2: 1-Xka6nhHlTAY0IkAtp7cisl4Q0o.roa (hash: cYSQflXuM4PG35Mh50PGE2nbDxv/tnzYwdWGgGNp7kU=)
3: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
4: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
5: B7UyS94iVj1DJiAES7AGdZBkhvU.roa (hash: LvNOB6rKBIqz8zy85DW3nACAYVwrAZC+twiA7P7L6S8=)
6: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
7: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: rbfZsRRuHPw/pSoHIHBExCJdmU2Lp8qmQCH8nKz4Kig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:76:6d:42:63:af:48:f2:58:5d:d6:46:b3:69:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Mar 2 00:01:21 2026 GMT
Not After : Mar 3 00:01:21 2026 GMT
Subject: CN=861546abcff75aa7a7a97a90154c8901270af995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:c8:ab:7f:d5:af:bc:38:89:27:97:ae:d8:
09:ba:95:7b:b0:2c:f9:7e:d7:68:6e:92:76:3c:f6:
6a:81:a8:15:d2:ff:21:13:1e:0a:3f:8d:63:c5:6e:
f1:c4:b5:d1:98:49:0a:ce:84:cf:33:b0:53:5f:d4:
0a:6c:36:68:9d:3b:56:e7:26:55:f3:34:07:24:e6:
9b:91:9f:1e:e4:81:41:4a:cc:81:16:18:2d:27:63:
70:c6:99:2c:67:fb:01:28:95:10:c9:0e:8a:8c:58:
78:7c:3e:ff:44:50:c6:57:dc:54:e3:6a:ff:c3:a8:
21:12:3c:85:bd:66:99:27:a6:b7:f6:40:18:77:54:
8d:d2:9e:0c:1c:93:91:91:f8:31:76:a4:95:42:35:
39:53:73:ba:13:5b:6d:80:e4:90:c0:c8:ed:be:41:
08:75:76:73:3c:9c:99:f1:3b:a7:65:c1:92:a9:51:
31:23:97:1d:de:2b:ee:6c:1a:43:a8:ab:49:ff:0c:
93:fc:0e:ef:b1:23:a5:3e:e4:e2:6b:c3:91:c1:7a:
04:bf:2b:b5:6d:de:7a:3d:6c:c5:70:3d:83:4f:44:
ab:18:0a:9b:0e:12:66:c7:40:b2:5d:7a:ec:9b:6b:
98:18:44:ab:ad:e8:5f:7c:04:0e:11:ef:ae:d1:cf:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:15:46:AB:CF:F7:5A:A7:A7:A9:7A:90:15:4C:89:01:27:0A:F9:95
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:92:f4:6b:0e:de:6f:56:e7:96:69:0f:c1:f2:76:ad:53:28:
8a:41:72:0e:8c:ef:8b:d9:29:fe:26:6a:7c:b1:11:fe:8e:40:
24:d4:06:49:13:2f:ef:1b:27:2b:47:d6:8d:f8:27:bf:06:ae:
f7:46:bf:5a:6a:c9:9c:67:41:8b:16:51:58:ca:a5:ea:46:82:
80:bd:ca:27:16:ba:d6:5d:08:39:0f:16:17:8a:5c:51:97:12:
e6:6b:d4:06:16:40:f7:c4:77:03:d2:ab:d4:d0:6a:41:72:28:
02:d7:6a:6a:f2:24:25:e8:a3:24:23:72:16:30:ea:f2:11:01:
d0:bf:9f:3e:a0:64:f9:3d:43:1c:c7:cd:ab:3a:5f:11:e6:bd:
24:30:f1:c9:5a:f5:1b:ef:fb:4e:c5:29:39:3c:7c:71:9d:18:
81:80:32:88:eb:22:e5:1a:8c:bf:5c:84:70:4c:83:d4:01:5f:
d2:c4:0e:a1:21:3a:61:cf:ad:cd:7c:75:26:0a:ef:e3:49:ec:
71:e6:de:ad:db:cd:59:37:dc:43:b8:a6:e3:ae:8f:85:3d:36:
8c:3c:76:6c:3f:96:1a:a9:76:9b:a5:23:dd:cc:5f:24:3d:bd:
79:ce:2a:fe:ba:86:b0:6f:a3:71:78:e8:f1:99:19:bd:47:7e:
b1:12:7e:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2XZtQmOvSPJYXdZGs2k5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1
ZWRjN2YwHhcNMjYwMzAyMDAwMTIxWhcNMjYwMzAzMDAwMTIxWjAzMTEwLwYDVQQD
Eyg4NjE1NDZhYmNmZjc1YWE3YTdhOTdhOTAxNTRjODkwMTI3MGFmOTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgbIq3/Vr7w4iSeXrtgJupV7sCz5
ftdobpJ2PPZqgagV0v8hEx4KP41jxW7xxLXRmEkKzoTPM7BTX9QKbDZonTtW5yZV
8zQHJOabkZ8e5IFBSsyBFhgtJ2NwxpksZ/sBKJUQyQ6KjFh4fD7/RFDGV9xU42r/
w6ghEjyFvWaZJ6a39kAYd1SN0p4MHJORkfgxdqSVQjU5U3O6E1ttgOSQwMjtvkEI
dXZzPJyZ8TunZcGSqVExI5cd3ivubBpDqKtJ/wyT/A7vsSOlPuTia8ORwXoEvyu1
bd56PWzFcD2DT0SrGAqbDhJmx0CyXXrsm2uYGESrrehffAQOEe+u0c+gawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYVRqvP91qnp6l6kBVMiQEnCvmVMB8GA1UdIwQY
MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt
MzY4N2M4MThlZGU1LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1
LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJL0aw7e
b1bnlmkPwfJ2rVMoikFyDozvi9kp/iZqfLER/o5AJNQGSRMv7xsnK0fWjfgnvwau
90a/WmrJnGdBixZRWMql6kaCgL3KJxa61l0IOQ8WF4pcUZcS5mvUBhZA98R3A9Kr
1NBqQXIoAtdqavIkJeijJCNyFjDq8hEB0L+fPqBk+T1DHMfNqzpfEea9JDDxyVr1
G+/7TsUpOTx8cZ0YgYAyiOsi5RqMv1yEcEyD1AFf0sQOoSE6Yc+tzXx1Jgrv40ns
ceberdvNWTfcQ7im466PhT02jDx2bD+WGql2m6Uj3cxfJD29ec4q/rqGsG+jcXjo
8ZkZvUd+sRJ+yw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:10:56 2026 by rpki-client