Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
File: OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json)
Hash identifier: eu+FNjmNsDVBavGWqJDmPi8yVw16ZJ4KlUbSqabaZoc=
Subject key identifier: 21:12:12:69:2F:5F:E8:5D:F8:32:A1:14:17:7A:01:00:0C:9C:31:90
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Certificate issuer: /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial: 019CAD227FA484602224BBAE53550354CC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
Manifest number: 0D11
Signing time: Mon 02 Mar 2026 06:00:45 +0000
Manifest this update: Mon 02 Mar 2026 06:00:45 +0000
Manifest next update: Tue 03 Mar 2026 06:00:45 +0000
Files and hashes: 1: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: gs5UmNuxeYTNSG9es9z+OFuBBCGIrQGLjSL/v9zWhx8=)
2: tj7JglNBYoUgUzK65iM2oKW2CKA.roa (hash: f8QCODS044Wg/Ezuz3x9qHRgp8fLuEd7Np2yDguXhQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:7f:a4:84:60:22:24:bb:ae:53:55:03:54:cc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Validity
Not Before: Mar 2 06:00:45 2026 GMT
Not After : Mar 3 06:00:45 2026 GMT
Subject: CN=211212692f5fe85df832a114177a01000c9c3190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:ef:b0:89:36:a4:09:34:cc:95:b6:18:94:
ca:bd:02:38:9c:46:76:12:57:14:f5:59:cc:e9:61:
11:2b:06:45:14:96:ee:98:a2:f3:56:c0:ee:54:3d:
51:ad:7e:a2:6c:06:c2:77:5f:6a:3e:dd:22:74:ea:
cf:40:42:5e:25:2d:f2:ae:79:d3:a9:65:72:88:6e:
da:1e:24:c6:88:e7:c0:79:da:fc:e7:b1:9c:8f:d7:
a7:9e:2a:5a:cd:fb:ed:31:f6:c9:07:8f:54:68:6c:
37:7d:d8:b7:4d:1b:2f:0e:95:df:6a:69:3f:9e:72:
4c:88:cb:0a:13:5f:a4:17:6f:c6:96:7e:31:a3:7d:
0d:86:3b:2f:84:ac:ea:fb:b7:aa:91:c3:4b:79:97:
e3:55:d2:44:97:5b:a6:e4:a3:7c:1e:20:97:85:ce:
84:d9:3f:4a:bd:3c:ea:2b:3f:31:28:04:0c:4d:b3:
ff:0c:a2:05:25:47:6b:a6:44:d5:f9:4a:04:18:59:
83:09:df:47:99:83:73:4a:c2:3c:1d:28:d3:30:41:
58:3d:1a:5c:40:57:db:d9:a8:ef:5f:4f:ae:6a:17:
99:04:4a:f6:d6:e9:9e:46:38:69:96:15:5c:23:7f:
ae:9f:74:1a:ac:2c:0d:a6:4a:13:4a:1a:02:5f:e4:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:12:12:69:2F:5F:E8:5D:F8:32:A1:14:17:7A:01:00:0C:9C:31:90
X509v3 Authority Key Identifier:
keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ce:68:0d:d5:75:1e:ee:c1:d2:3b:53:aa:77:91:dd:1f:a5:
f6:35:93:ad:bf:00:c5:22:da:b3:e7:6a:96:8c:73:1f:a3:c1:
ac:c2:ab:b6:d6:2d:e1:b4:58:1e:41:90:ac:4e:66:44:03:c6:
df:df:2e:88:fe:80:d6:6c:3d:a4:4f:f9:d0:13:ee:de:b2:8a:
e7:98:29:c0:62:d8:a0:ca:15:9f:48:a4:1f:e8:59:e8:a1:e3:
82:fb:c6:55:c8:fa:c4:a2:27:51:f4:b5:d1:60:08:d3:89:cb:
bc:54:0d:59:49:ea:1a:49:b1:80:21:4e:72:5c:86:8e:9c:db:
57:37:e6:55:8d:f4:cc:94:21:b9:08:1e:a6:3c:d9:07:b8:4b:
88:34:d8:8c:d8:73:39:54:6d:60:42:ec:34:f9:19:ec:cc:32:
0b:ce:8c:01:d2:2b:12:6b:dc:79:b4:5c:00:da:d4:a7:30:f9:
13:ca:90:d4:3f:30:43:80:06:79:34:91:43:e0:77:67:03:76:
62:9d:b5:47:82:b8:dd:67:64:9c:d2:6c:de:dd:aa:4b:d6:e9:
c7:2d:e2:4b:ed:81:b7:db:56:bd:45:bb:3a:80:6e:18:c7:0e:
de:76:f5:2f:09:28:c9:43:12:30:98:5b:59:af:72:bb:4c:d6:
9c:de:2f:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIn+khGAiJLuuU1UDVMyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ODg4MWUwNjM4M2ZkMmMzNmU5ZjI0NWM0YmZhMTMwMWQx
NWE1MzcwHhcNMjYwMzAyMDYwMDQ1WhcNMjYwMzAzMDYwMDQ1WjAzMTEwLwYDVQQD
EygyMTEyMTI2OTJmNWZlODVkZjgzMmExMTQxNzdhMDEwMDBjOWMzMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcrvsIk2pAk0zJW2GJTKvQI4nEZ2
ElcU9VnM6WERKwZFFJbumKLzVsDuVD1RrX6ibAbCd19qPt0idOrPQEJeJS3yrnnT
qWVyiG7aHiTGiOfAedr857Gcj9ennipazfvtMfbJB49UaGw3fdi3TRsvDpXfamk/
nnJMiMsKE1+kF2/Gln4xo30NhjsvhKzq+7eqkcNLeZfjVdJEl1um5KN8HiCXhc6E
2T9KvTzqKz8xKAQMTbP/DKIFJUdrpkTV+UoEGFmDCd9HmYNzSsI8HSjTMEFYPRpc
QFfb2ajvX0+uaheZBEr21umeRjhplhVcI3+un3QarCwNpkoTShoCX+RahQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCESEmkvX+hd+DKhFBd6AQAMnDGQMB8GA1UdIwQY
MBaAFDmIgeBjg/0sNunyRcS/oTAdFaU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jZGEyMTUtNDlhZS00MDdiLWFmM2It
MzU5ZTRlNGQ5MTc1LzEvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9jZGEyMTUtNDlhZS00MDdiLWFmM2ItMzU5ZTRlNGQ5MTc1
LzEvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACc5oDdV1
Hu7B0jtTqneR3R+l9jWTrb8AxSLas+dqloxzH6PBrMKrttYt4bRYHkGQrE5mRAPG
398uiP6A1mw9pE/50BPu3rKK55gpwGLYoMoVn0ikH+hZ6KHjgvvGVcj6xKInUfS1
0WAI04nLvFQNWUnqGkmxgCFOclyGjpzbVzfmVY30zJQhuQgepjzZB7hLiDTYjNhz
OVRtYELsNPkZ7MwyC86MAdIrEmvcebRcANrUpzD5E8qQ1D8wQ4AGeTSRQ+B3ZwN2
Yp21R4K43WdknNJs3t2qS9bpxy3iS+2Bt9tWvUW7OoBuGMcO3nb1LwkoyUMSMJhb
Wa9yu0zWnN4vwQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:11 2026 by rpki-client