Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: nSnSGPhpaKr7I9mJTguoRDsGiRgWsxsaNCVoxajaJwk=
Subject key identifier: 37:46:8E:69:8C:39:EC:D0:D0:AC:7E:FB:C2:19:F7:E0:1D:07:9D:D4
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 019CAC47621CD60F20926C3804181F6F62BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 03B6
Signing time: Mon 02 Mar 2026 02:01:25 +0000
Manifest this update: Mon 02 Mar 2026 02:01:25 +0000
Manifest next update: Tue 03 Mar 2026 02:01:25 +0000
Files and hashes: 1: JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa (hash: dzTZZeqoyGDa9h33Vh04zNMf/nJhUIIZZndFjeftfJE=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: dX+KUbAxIeINqAo+9hRhJE2+HWz9PIBEmuJHHwCzV0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:62:1c:d6:0f:20:92:6c:38:04:18:1f:6f:62:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Mar 2 02:01:25 2026 GMT
Not After : Mar 3 02:01:25 2026 GMT
Subject: CN=37468e698c39ecd0d0ac7efbc219f7e01d079dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:b2:af:f3:b2:2d:b4:5f:e1:ad:63:e0:1f:
62:6f:46:ad:b3:97:c0:55:3e:12:81:f7:97:05:b9:
5f:3c:7e:1e:44:31:5b:5e:4a:a0:a9:90:48:3d:43:
00:b8:b1:09:d6:e9:8c:a6:4d:50:bd:fa:05:fc:2c:
11:58:fd:e1:32:3b:38:95:62:1e:5a:e2:b1:ad:c2:
fb:2c:58:37:b3:73:ce:fe:a8:fe:67:dc:87:2d:c5:
57:90:d0:39:a9:41:4d:d9:56:0d:89:b9:bb:31:96:
db:45:1a:be:6f:10:b7:51:0a:47:d2:da:eb:fe:58:
bd:e5:b1:15:08:9d:80:ec:81:da:1a:a1:c0:75:7f:
f0:2b:e8:65:21:80:ec:cc:d3:92:47:62:8a:fc:88:
81:64:4d:44:b8:b0:72:d6:33:d5:76:b0:9e:3d:91:
ca:2a:10:3c:5b:7b:9a:c5:24:85:64:14:d4:dc:93:
6d:e9:3f:8f:37:1b:6d:72:ba:e5:ce:6e:16:bd:85:
63:b7:8f:5c:6e:58:28:0f:f4:df:3a:9d:bb:19:9b:
27:ab:e5:32:12:0c:91:8c:19:d9:dc:3e:53:f5:0c:
be:55:46:3f:be:bf:cd:52:7e:99:e9:4f:b1:74:c5:
8a:57:f3:7f:ec:a2:96:98:97:f4:45:63:1c:8c:29:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:46:8E:69:8C:39:EC:D0:D0:AC:7E:FB:C2:19:F7:E0:1D:07:9D:D4
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9e:33:dc:d9:42:cc:4a:ec:20:82:0b:c2:5c:ef:e4:f4:5a:
e1:b3:8c:f5:61:f1:27:b4:9c:cb:7f:d7:7e:70:eb:a0:20:36:
ae:14:22:09:8d:64:90:a8:69:37:ac:f0:d5:2e:f1:c4:10:90:
47:4f:20:a8:05:96:c8:b5:29:15:5e:3f:95:10:43:be:11:b6:
a5:81:a4:46:fc:4f:db:62:39:3b:84:d0:02:9f:4b:71:41:9d:
cf:03:7c:17:ca:50:7c:9c:aa:28:f2:08:f8:5f:d9:4f:57:39:
93:36:6e:c3:a9:44:23:fa:60:74:e5:92:d5:ad:95:c7:1b:62:
b4:7b:8a:5b:30:a6:9f:d0:f7:6f:32:cd:84:9a:94:6a:a1:0b:
a4:5c:b2:e5:03:31:67:96:5d:22:17:ca:dd:16:03:05:ba:ac:
ad:d4:94:d1:ca:a5:c6:16:2b:e0:01:49:b6:23:e9:6a:6c:f4:
e7:17:2b:24:d9:99:0f:05:21:f6:55:5b:71:2c:db:0c:b8:c3:
5f:f1:e6:9d:5f:40:dd:83:9f:66:01:39:2b:42:48:e8:84:12:
cb:ef:0d:cf:3d:19:f3:37:5a:29:f2:fd:5e:3d:25:ef:93:f0:
c8:f8:48:b1:4c:58:75:c3:72:84:fd:d4:b6:48:f6:b7:2d:90:
28:05:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:12 2026 by rpki-client