Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: h1IN2GSjoQQ6AFrFevgu5bfHbroyEatfIhxrVt3joOI=
Subject key identifier: FD:58:B4:7D:2E:2A:12:9E:A2:C0:3B:A2:BC:29:34:1E:F7:45:C8:83
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 019CAEDA1843D3BD976FC288F221D38ECFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1852
Signing time: Mon 02 Mar 2026 14:00:54 +0000
Manifest this update: Mon 02 Mar 2026 14:00:54 +0000
Manifest next update: Tue 03 Mar 2026 14:00:54 +0000
Files and hashes: 1: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: 4CzwyMWlnBTfG4FvNtv/6ZeYiDvAJkxQ5mj+f/ijxXQ=)
2: WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa (hash: ZvSkcDxGhvi+aJsfbms5jhxFpHcmll85L+dtrGm8zwg=)
3: csloCIt3CTSVgebL58dJpxOdtC0.roa (hash: esH7P1ArdXIQnwu6qXLQUiXFhHbcU/4jPuyvpFcE9cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:18:43:d3:bd:97:6f:c2:88:f2:21:d3:8e:cf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Mar 2 14:00:54 2026 GMT
Not After : Mar 3 14:00:54 2026 GMT
Subject: CN=fd58b47d2e2a129ea2c03ba2bc29341ef745c883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:0c:51:2d:92:57:60:e4:43:f0:34:1e:8c:
6a:63:50:7a:0e:f9:19:6b:e9:a6:25:77:99:25:95:
60:1c:98:34:f0:af:ae:4d:09:63:e7:48:48:c5:8f:
c4:e9:ff:12:c3:60:20:65:8c:f1:33:d3:cb:bb:09:
69:a7:0a:a0:0f:b1:a7:bd:19:d3:a4:fe:38:09:24:
8e:24:16:49:8c:60:95:19:5a:22:51:f1:e1:73:a1:
bf:94:c6:a0:bb:2b:27:be:fe:ea:06:1e:33:b6:6a:
a2:1f:85:8a:6f:85:37:83:42:0a:4f:98:07:bd:30:
73:2f:73:af:41:6d:10:f1:5e:e7:2b:c5:46:c8:56:
b3:88:70:7c:61:28:f2:bd:6b:fb:16:eb:3e:dd:21:
be:64:08:31:0f:68:c8:1c:e4:53:0c:93:97:c4:c5:
48:a9:65:49:f1:7e:ad:68:e1:12:e9:e6:d9:80:1f:
d8:03:93:b9:d4:44:ad:c4:b1:1f:ba:60:79:ee:06:
00:1c:e3:7d:04:43:57:be:8b:fa:9c:df:c4:91:df:
46:10:51:d6:56:0d:20:35:d5:3a:8b:c8:c0:92:7b:
59:ff:23:0c:12:80:34:2e:19:13:13:36:2e:6e:3f:
5e:af:85:56:5d:6c:d4:15:e7:ca:10:a2:06:5b:34:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:58:B4:7D:2E:2A:12:9E:A2:C0:3B:A2:BC:29:34:1E:F7:45:C8:83
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4f:a5:a6:a7:a2:24:12:ba:4c:dc:e6:db:b2:2b:a8:b0:b6:
8b:70:f4:f8:90:3e:29:12:5a:c5:6b:54:45:88:7a:71:3b:66:
74:b1:db:df:00:12:28:bd:09:cb:4f:90:c4:9d:40:35:69:49:
e2:f6:ff:3b:d6:dd:58:98:fb:e7:84:6f:ac:76:8a:45:06:ff:
99:b7:48:5f:01:9a:a6:13:84:90:92:f9:2a:3b:66:07:bf:8d:
d3:5f:21:9a:02:1d:8e:60:a7:b2:fe:d6:94:d0:6f:26:0e:cc:
01:bb:63:48:97:87:20:83:a8:19:9a:20:e0:d0:6c:a0:ee:cb:
fb:fd:c6:56:32:69:99:64:97:14:56:79:cd:5e:04:9e:d3:18:
23:90:97:9b:37:f8:74:01:c4:e1:88:81:9b:83:ac:72:24:df:
13:32:d0:55:a6:83:48:db:64:dd:11:3f:ab:54:4d:f1:20:cf:
be:31:99:c8:d6:9a:77:81:e6:0b:3b:e7:27:78:86:9e:c9:90:
1d:20:ad:8c:30:be:9e:a8:0e:ab:5e:8c:b0:b9:08:6e:94:87:
e2:c2:52:75:47:ff:dc:b4:1f:5d:ad:62:b6:a1:2a:d1:ac:45:
c5:f8:97:a9:28:99:11:76:16:31:21:ab:69:f2:3c:d9:1b:0d:
51:4a:7a:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2hhD072Xb8KI8iHTjs/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3
M2UyNjgwHhcNMjYwMzAyMTQwMDU0WhcNMjYwMzAzMTQwMDU0WjAzMTEwLwYDVQQD
EyhmZDU4YjQ3ZDJlMmExMjllYTJjMDNiYTJiYzI5MzQxZWY3NDVjODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzsMUS2SV2DkQ/A0HoxqY1B6DvkZ
a+mmJXeZJZVgHJg08K+uTQlj50hIxY/E6f8Sw2AgZYzxM9PLuwlppwqgD7GnvRnT
pP44CSSOJBZJjGCVGVoiUfHhc6G/lMaguysnvv7qBh4ztmqiH4WKb4U3g0IKT5gH
vTBzL3OvQW0Q8V7nK8VGyFaziHB8YSjyvWv7Fus+3SG+ZAgxD2jIHORTDJOXxMVI
qWVJ8X6taOES6ebZgB/YA5O51EStxLEfumB57gYAHON9BENXvov6nN/Ekd9GEFHW
Vg0gNdU6i8jAkntZ/yMMEoA0LhkTEzYubj9er4VWXWzUFefKEKIGWzTlRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1YtH0uKhKeosA7orwpNB73RciDMB8GA1UdIwQY
MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt
Njg2ZjBhMDYxNmNjLzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj
LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvU+lpqei
JBK6TNzm27IrqLC2i3D0+JA+KRJaxWtURYh6cTtmdLHb3wASKL0Jy0+QxJ1ANWlJ
4vb/O9bdWJj754RvrHaKRQb/mbdIXwGaphOEkJL5KjtmB7+N018hmgIdjmCnsv7W
lNBvJg7MAbtjSJeHIIOoGZog4NBsoO7L+/3GVjJpmWSXFFZ5zV4EntMYI5CXmzf4
dAHE4YiBm4OsciTfEzLQVaaDSNtk3RE/q1RN8SDPvjGZyNaad4HmCzvnJ3iGnsmQ
HSCtjDC+nqgOq16MsLkIbpSH4sJSdUf/3LQfXa1itqEq0axFxfiXqSiZEXYWMSGr
afI82RsNUUp6sg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:26 2026 by rpki-client