Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
File: oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json)
Hash identifier: n0aEE5bhIysr2TcuxPpt/O5PqW10Heuoo0jyvSkYvMc=
Subject key identifier: B1:B1:ED:04:F0:24:04:63:A3:33:EF:AD:FC:85:BB:59:C5:C8:AC:FA
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial: 019CA869E5809E479C18F03CA75D130929B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
Manifest number: 0537
Signing time: Sun 01 Mar 2026 08:00:38 +0000
Manifest this update: Sun 01 Mar 2026 08:00:38 +0000
Manifest next update: Mon 02 Mar 2026 08:00:38 +0000
Files and hashes: 1: G-ttXU6LFqII2ZJb5Ai_tbTpvbE.roa (hash: yEHVYP+lRpz9AqpdBf+LceTLoHvG7cdnnGGEb99aDSo=)
2: o-XODVf1hZc2qeOEskGvrZ916vI.asa (hash: t+rCBxLchg6lnut9oPzJlegb7IG7iCHZF9SoXwZVIuE=)
3: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: NJVl0wZ8gIyF2O9AFyV9a93hITRFilk41o/dawx4RdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:69:e5:80:9e:47:9c:18:f0:3c:a7:5d:13:09:29:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
Validity
Not Before: Mar 1 08:00:38 2026 GMT
Not After : Mar 2 08:00:38 2026 GMT
Subject: CN=b1b1ed04f0240463a333efadfc85bb59c5c8acfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:a8:75:8b:ba:11:6e:d7:43:67:ee:2c:d3:
f3:cd:24:c2:07:f8:35:4d:7b:06:8c:89:1b:2e:15:
72:7d:e7:55:43:6c:15:58:23:6a:8a:0b:c4:0d:5d:
aa:06:5a:b1:b2:1e:77:49:62:88:fa:e2:cb:ed:e5:
cd:59:bf:65:17:00:1c:c3:76:75:92:71:5b:8e:91:
e8:e5:3d:aa:4c:59:2b:80:91:a3:71:e8:80:4a:32:
3d:41:07:b6:de:80:28:90:34:9d:ec:96:74:af:5f:
ec:ac:d4:29:ea:7f:4c:31:44:73:82:c1:22:87:2d:
14:6a:ad:65:07:e4:8c:b7:56:c3:60:76:0e:67:c6:
b5:d5:f7:2c:71:fe:f3:cf:7f:e5:06:62:de:12:dc:
ae:69:eb:c6:7c:60:cf:9c:88:31:db:89:ab:f3:4c:
be:8c:37:95:a0:38:09:a8:f3:f7:0c:68:ec:5a:b9:
e1:c0:c9:7e:ce:79:80:e3:e3:92:c6:09:28:0d:09:
05:b7:1b:9f:b3:d7:d4:3a:08:10:55:a6:fa:df:3e:
7f:aa:65:80:b0:11:bb:5b:b5:41:aa:88:ee:6f:82:
83:8a:fa:11:03:4a:2c:8e:b0:5b:25:32:e7:0e:c5:
d2:f0:32:ad:a5:3f:33:41:99:9e:19:19:7e:dd:7a:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B1:ED:04:F0:24:04:63:A3:33:EF:AD:FC:85:BB:59:C5:C8:AC:FA
X509v3 Authority Key Identifier:
keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:70:80:f4:99:8b:19:d3:78:f3:20:a1:af:c1:89:8b:cd:82:
fd:3f:ab:aa:74:8b:e7:80:93:7b:bc:71:fd:3a:b6:6d:d0:93:
2c:3f:ae:21:a8:a3:25:11:46:6b:17:1a:18:82:1a:86:05:7d:
b6:6c:ca:3b:23:27:b1:eb:9e:8e:a8:b4:ee:da:2a:37:9b:5b:
37:d3:60:a3:7c:16:43:49:20:51:13:9f:35:c1:c5:80:7e:1f:
6b:ec:98:d9:9f:a0:c6:12:c6:3b:20:76:35:bf:e1:9e:82:2a:
82:d8:aa:46:41:e7:f7:13:9b:42:b1:48:5a:c2:da:0c:4b:31:
76:44:5c:20:c7:9f:ca:34:33:13:49:a3:2e:09:55:35:ff:ce:
9d:d8:48:e9:47:7d:d4:c9:b1:c3:aa:1b:79:d8:77:a0:3d:6f:
50:ee:98:ef:f7:d8:8b:50:b1:79:48:bc:40:df:d5:4b:6e:a7:
ea:d0:be:f0:1e:83:b2:61:3c:6c:1c:de:ad:30:1e:13:68:e2:
eb:60:b9:6b:cc:92:8f:ee:40:11:b1:49:2c:56:9a:66:da:5e:
63:92:4b:d0:cc:3c:a3:e2:fd:d2:3f:4b:a7:57:46:20:be:1e:
0c:0f:bd:79:a5:42:f7:dc:82:f0:94:6b:94:e8:7f:cb:55:56:
9b:02:b3:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyoaeWAnkecGPA8p10TCSm1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjUxMmI4YTI2MmJhZDU5OWEzYjAyMzM1OGM1Y2VjY2Fj
OWUwODUwHhcNMjYwMzAxMDgwMDM4WhcNMjYwMzAyMDgwMDM4WjAzMTEwLwYDVQQD
EyhiMWIxZWQwNGYwMjQwNDYzYTMzM2VmYWRmYzg1YmI1OWM1YzhhY2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq2odYu6EW7XQ2fuLNPzzSTCB/g1
TXsGjIkbLhVyfedVQ2wVWCNqigvEDV2qBlqxsh53SWKI+uLL7eXNWb9lFwAcw3Z1
knFbjpHo5T2qTFkrgJGjceiASjI9QQe23oAokDSd7JZ0r1/srNQp6n9MMURzgsEi
hy0Uaq1lB+SMt1bDYHYOZ8a11fcscf7zz3/lBmLeEtyuaevGfGDPnIgx24mr80y+
jDeVoDgJqPP3DGjsWrnhwMl+znmA4+OSxgkoDQkFtxufs9fUOggQVab63z5/qmWA
sBG7W7VBqojub4KDivoRA0osjrBbJTLnDsXS8DKtpT8zQZmeGRl+3XqxWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGx7QTwJARjozPvrfyFu1nFyKz6MB8GA1UdIwQY
MBaAFKFlEriiYrrVmaOwIzWMXOzKyeCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dVU3VLSml1dFdabzdBak5ZeGM3TXJKNElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84YWEwODUtY2FkYy00NDZlLWJiZTgt
YzllYzNhOThmOWEzLzEvb1dVU3VLSml1dFdabzdBak5ZeGM3TXJKNElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84YWEwODUtY2FkYy00NDZlLWJiZTgtYzllYzNhOThmOWEz
LzEvb1dVU3VLSml1dFdabzdBak5ZeGM3TXJKNElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXCA9JmL
GdN48yChr8GJi82C/T+rqnSL54CTe7xx/Tq2bdCTLD+uIaijJRFGaxcaGIIahgV9
tmzKOyMnseuejqi07toqN5tbN9Ngo3wWQ0kgUROfNcHFgH4fa+yY2Z+gxhLGOyB2
Nb/hnoIqgtiqRkHn9xObQrFIWsLaDEsxdkRcIMefyjQzE0mjLglVNf/OndhI6Ud9
1Mmxw6obedh3oD1vUO6Y7/fYi1CxeUi8QN/VS26n6tC+8B6DsmE8bBzerTAeE2ji
62C5a8ySj+5AEbFJLFaaZtpeY5JL0Mw8o+L90j9Lp1dGIL4eDA+9eaVC99yC8JRr
lOh/y1VWmwKz6w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:19 2026 by rpki-client