Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
File: OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft (raw, json)
Hash identifier: pGo3uC6vl+7oc4XC1aN1LDegDvVfZTkOEql+gOFhDrY=
Subject key identifier: 67:9F:43:FD:1C:5E:A0:DF:98:20:45:14:F2:82:BC:E4:6D:AF:05:DA
Authority key identifier: 3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
Certificate issuer: /CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Certificate serial: 019CAA58BDEB64FC37E6984D02D610614BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
Manifest number: 1260
Signing time: Sun 01 Mar 2026 17:01:08 +0000
Manifest this update: Sun 01 Mar 2026 17:01:08 +0000
Manifest next update: Mon 02 Mar 2026 17:01:08 +0000
Files and hashes: 1: OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl (hash: ikgvP+jwpVAaDADQRtG97Fo+l70UcSGxe2VuNv6DoV8=)
2: YMwIWblxxdgG2PErs0i8hdeLN_I.roa (hash: MLrLMjAo1D27u4EH1t9gBEoOSZR3KZexjLZQqipMzrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bd:eb:64:fc:37:e6:98:4d:02:d6:10:61:4b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Validity
Not Before: Mar 1 17:01:08 2026 GMT
Not After : Mar 2 17:01:08 2026 GMT
Subject: CN=679f43fd1c5ea0df98204514f282bce46daf05da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:5c:e5:e9:80:e7:50:83:5d:ff:93:9e:e2:
72:9d:60:84:84:c3:58:24:81:d2:1b:42:68:fa:73:
2a:cb:a4:38:f1:4b:0e:43:a4:bc:07:4f:cc:56:ca:
4c:26:50:ae:00:4a:89:75:e6:13:c0:28:d4:a2:0a:
ba:2f:0c:db:c3:09:30:85:ea:2a:dc:ad:2a:bb:34:
7b:ca:94:c2:14:c8:db:66:aa:8d:72:1c:d7:68:e0:
af:05:06:bc:22:2b:e0:42:23:28:1d:c7:d0:37:ec:
70:e7:9e:d5:83:76:11:34:c4:65:df:6f:cd:6f:7c:
9f:97:0e:75:2d:07:d8:a2:08:f8:4a:02:c0:ec:44:
21:4a:ee:b9:7e:66:69:45:ca:e4:18:e0:46:90:fb:
7a:e5:63:ab:d4:8c:78:4e:2f:80:91:02:4a:57:38:
35:8e:ae:cb:c6:ed:78:bc:06:f6:23:27:0d:aa:f5:
30:0b:3a:da:5a:ba:e7:98:d2:35:28:e9:2b:6d:f4:
41:b1:20:dc:aa:23:a8:4f:1f:8d:0b:53:66:b4:3d:
d1:31:6e:59:86:02:99:88:24:7c:58:bf:98:a4:87:
ec:31:af:c2:9e:90:e2:18:37:96:fa:dd:eb:6e:a2:
e0:e2:4c:a7:52:2e:bf:55:64:b4:a6:6b:a0:e8:8a:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9F:43:FD:1C:5E:A0:DF:98:20:45:14:F2:82:BC:E4:6D:AF:05:DA
X509v3 Authority Key Identifier:
keyid:3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b5:14:94:0f:d1:fa:f6:9c:8b:ec:94:41:21:73:f7:0c:3f:
d7:54:45:21:62:f0:24:09:66:18:ac:61:e0:d7:e4:67:26:dc:
dc:9c:50:b2:7e:dc:a3:23:3e:d7:38:b2:4e:a1:84:d6:ec:26:
0e:42:1b:99:b6:48:9a:9a:c6:39:85:3b:ec:ac:f3:ee:94:37:
c0:97:36:68:88:08:df:db:1b:f5:65:cd:8a:23:d4:c8:ec:d3:
dc:87:25:be:6e:b6:e8:29:af:27:f7:4d:71:6c:52:df:9c:9c:
b7:90:d4:13:53:89:84:64:ee:de:4b:0f:a0:fa:e6:d0:8d:3c:
fa:d2:c9:49:e1:1f:a1:4b:81:57:f5:dc:6c:d6:8d:b8:64:45:
dd:12:42:3f:6d:e2:8c:55:ec:99:87:cc:0b:e8:ac:3d:c9:8d:
99:c9:11:6f:79:89:0f:a5:0e:68:e2:6f:d4:5c:2a:58:fb:1f:
03:6f:27:1c:72:ab:5c:13:c5:a0:90:8b:fa:bf:21:24:08:0d:
9d:54:ce:3e:54:ec:d2:9c:03:67:f7:ec:3d:e5:a9:fd:ce:99:
ca:56:fd:cd:8b:3f:6f:2a:97:dc:d7:cd:88:c1:17:c5:b7:bf:
fc:ee:86:df:15:a6:91:70:0d:a0:2a:13:19:93:d8:59:f5:24:
2c:c3:2b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:37 2026 by rpki-client