Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json)
Hash identifier: HYeLjuuxucLqIKLWdDJZ1/hztQdB4y2vhBNLwzVJZe4=
Subject key identifier: BF:AA:15:D3:2B:26:78:AB:53:16:C6:EC:14:A0:18:AA:14:BA:29:53
Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Certificate serial: 019EC1ED98725C280F82E0E0BC88DFDC15A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
Manifest number: 0180
Signing time: Sat 13 Jun 2026 17:00:34 +0000
Manifest this update: Sat 13 Jun 2026 17:00:34 +0000
Manifest next update: Sun 14 Jun 2026 17:00:34 +0000
Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: AQPElx6d0sFeoldEzfo6Ufkt5AdXQZfAhRRQuB88Qy8=)
2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:98:72:5c:28:0f:82:e0:e0:bc:88:df:dc:15:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Validity
Not Before: Jun 13 17:00:34 2026 GMT
Not After : Jun 14 17:00:34 2026 GMT
Subject: CN=bfaa15d32b2678ab5316c6ec14a018aa14ba2953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:43:e9:ec:8e:57:61:63:bd:07:a4:f7:68:bd:
a3:f7:db:44:d1:d2:c8:c2:67:d0:70:5b:40:a5:2f:
cf:cd:bc:0c:73:63:0d:56:7f:a4:1c:18:57:ad:08:
e2:9b:42:62:6b:47:a9:3b:46:b7:c9:44:10:67:26:
a4:02:7c:24:77:b7:3e:3b:8a:9a:81:0e:69:b3:d5:
0d:96:6e:08:70:74:fb:1f:cf:77:a3:df:54:a7:c7:
15:0c:84:bc:16:54:63:64:cb:3e:bb:42:89:6c:87:
9c:94:75:61:32:dd:e0:e6:96:d6:28:0f:d6:15:8c:
b6:5d:00:de:16:bc:f5:b0:c1:59:71:55:0b:41:11:
70:bf:fd:af:88:a2:06:dc:2d:c9:f8:85:8f:95:0d:
0c:80:4d:39:0f:b3:d3:ee:41:bb:b0:b8:04:e8:a4:
af:34:f4:f0:72:8b:84:32:2e:4d:8d:9b:04:b0:61:
97:16:cc:f9:7e:68:39:3e:07:24:73:bc:39:1a:65:
8e:5e:b6:a3:e6:e3:27:3b:f4:d3:4f:4d:6d:bf:33:
cd:ef:0c:44:b4:c3:ba:4b:27:f3:ec:8c:7c:95:a5:
25:bb:71:cc:b3:1b:94:c4:63:97:7a:f6:69:a1:2c:
b3:33:b6:ef:89:24:52:e0:2a:cc:88:12:41:c0:14:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AA:15:D3:2B:26:78:AB:53:16:C6:EC:14:A0:18:AA:14:BA:29:53
X509v3 Authority Key Identifier:
keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7e:d2:5e:97:6f:de:af:8c:fa:35:d1:1c:bd:77:6b:23:b7:
61:66:9a:55:a6:91:1d:4c:be:94:a5:af:7a:7d:61:7a:a9:a8:
a0:fe:bd:5f:e0:78:b8:77:53:78:a9:26:24:ba:bd:ec:cc:b5:
80:aa:45:cd:c4:fa:de:a3:8c:38:47:07:02:9e:aa:03:8c:00:
94:51:67:ab:1f:dd:48:4e:1f:b8:0d:94:68:53:b3:d2:08:59:
22:fc:26:4c:9b:4c:64:ef:c9:84:39:dd:28:52:97:97:56:6d:
85:cf:72:11:e3:eb:9a:d7:82:ca:4f:ee:fb:bc:e2:1d:ba:76:
ad:ff:fa:a4:30:92:95:83:e4:c7:68:3d:e8:c1:bf:c5:bd:df:
64:59:f7:d2:31:62:99:ef:37:9a:f0:4b:12:9a:9d:cb:18:bd:
09:10:ee:40:fa:7f:07:d8:2e:cc:b2:68:73:4d:01:37:26:b1:
c2:90:fa:61:1c:6a:07:9e:11:67:eb:df:d0:43:02:02:70:81:
ef:ff:13:7c:c2:96:ac:ea:a3:ea:8b:9e:46:97:13:ce:b6:ff:
e8:91:b1:93:58:b3:8e:b9:8c:46:6b:e2:6c:a7:f6:7e:73:28:
4e:c2:54:f4:c9:11:05:18:ec:b0:f8:cc:c1:be:d4:8a:1c:ee:
ad:3d:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:51:07 2026 by rpki-client