Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: jOIbgCNnuZ4ux4JsehvlynNYysBwtejd3rovmgiWDhI=
Subject key identifier: AC:6D:94:1D:3E:3A:7E:6C:67:57:5F:96:04:FA:71:6B:01:E0:B5:DC
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 019CA8331941A4A70F156FC13F26D03AAD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 07:00:46 +0000
Manifest this update: Sun 01 Mar 2026 07:00:46 +0000
Manifest next update: Mon 02 Mar 2026 07:00:46 +0000
Files and hashes: 1: O8JzFk1PWBgx-tr4EXZtg8jcmlQ.asa (hash: NgGatJmK3hx1VDzLByDMsWijy7WzJx6KU+I3UEmcdSE=)
2: h0m6chw4hn4GtvHmpEWAbKAv404.asa (hash: VSF4u2R2+TQgBabpqWZM+QC/fWsj+qMNZ83t4AFvT7c=)
3: mfvEjWb3rQFbj32_BBadoAv_Y0s.roa (hash: FGRbYmzgAXrFUwzG+mMOatKnvNqH9Ov9gtrQRgDuAmE=)
4: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: odh3p5opNYNcLKnJHUsvE7Zw1P2+vK6skLq8NJhAefE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:33:19:41:a4:a7:0f:15:6f:c1:3f:26:d0:3a:ad:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Mar 1 07:00:46 2026 GMT
Not After : Mar 2 07:00:46 2026 GMT
Subject: CN=ac6d941d3e3a7e6c67575f9604fa716b01e0b5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:53:3a:e4:6a:f7:5c:e6:cf:49:95:8a:92:
25:75:b7:27:dc:af:5a:a9:71:17:04:c7:3b:33:65:
04:31:4a:21:74:da:81:c9:f7:f0:5a:bf:56:99:ba:
db:61:e0:65:45:db:1f:43:56:05:bb:5e:b8:ae:7e:
2b:35:c5:99:fa:b7:69:4d:7c:a0:fa:97:28:5b:5f:
02:63:fb:09:6c:61:fc:87:eb:33:a4:9c:07:ad:19:
4d:72:67:1c:f2:70:b4:e4:71:45:3c:32:d6:4e:64:
54:05:ac:0d:6c:c7:4c:da:4b:0a:92:74:c1:0a:30:
e2:da:39:4d:ed:00:a1:a0:29:bb:57:22:43:7f:d8:
28:2e:96:0e:01:cd:66:86:6a:40:17:f1:de:15:72:
24:a4:b7:fa:5a:d5:e4:fa:d1:e9:98:f4:c8:cf:ec:
7f:10:33:7a:0d:de:c3:4f:12:aa:52:35:4e:eb:dc:
07:96:4d:a2:e9:7a:88:b9:62:fc:71:87:80:2e:8a:
20:88:e0:e7:10:ad:f8:a7:98:0a:a7:49:47:31:42:
6c:a7:0b:d5:eb:d4:dc:ec:14:40:8c:3f:c5:9f:fa:
ae:88:7d:9e:4d:47:2e:fc:a2:b3:a0:1a:35:fa:7e:
41:23:d5:03:f5:c0:0f:6f:ae:28:a5:10:08:8a:48:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6D:94:1D:3E:3A:7E:6C:67:57:5F:96:04:FA:71:6B:01:E0:B5:DC
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:31:79:07:a0:8e:37:02:74:70:58:da:26:e5:72:95:bc:ff:
17:14:0a:0d:00:f1:eb:32:55:7d:67:ac:95:e7:a7:d9:5a:51:
fe:85:13:f7:99:bd:51:2c:9d:8f:33:bb:3b:d3:4c:42:14:6d:
53:38:1d:ff:c3:82:c4:5b:d4:77:50:b2:53:0f:fd:3e:61:5d:
22:40:cc:b5:bf:ea:a2:c8:28:d2:2f:82:b5:c4:48:66:cd:f7:
cd:81:c7:bc:14:6d:c4:96:0b:b1:37:76:99:96:56:15:98:c3:
38:45:d1:c7:8f:e8:8c:c5:77:72:24:64:9e:26:21:05:db:1f:
00:bd:39:59:5a:df:eb:7f:66:59:e7:63:1a:4d:01:0e:3f:7d:
97:d7:81:2f:62:63:cd:aa:d4:f6:e6:65:a6:0a:2d:1a:0e:7e:
b2:ad:b5:ab:da:ca:46:2b:c3:eb:f9:21:5e:43:6c:fb:71:e9:
f5:c9:16:08:6f:44:49:a7:aa:dc:a5:cc:5c:46:c4:7f:a7:91:
0b:e3:f1:7e:ec:82:6b:5b:14:59:74:28:ee:6d:0d:60:01:06:
6d:74:f0:16:b5:8c:23:20:2b:88:5a:ef:45:e0:6c:1f:a1:48:
ec:c8:46:f9:d9:27:ba:70:4c:e8:b3:90:df:bd:d0:55:15:84:
c7:b7:2e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:00 2026 by rpki-client