Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: nQW2nXrpfvMeuUaTG+XwzjDRo3I2eRONYzCHFqnZT7s=
Subject key identifier: B3:5E:B6:E5:94:E5:57:E3:B6:53:B0:AC:2E:5F:B7:21:44:B0:C3:14
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 019D9A3DE0F8616438BBDB4D74FCE102E45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 0544
Signing time: Fri 17 Apr 2026 07:00:39 +0000
Manifest this update: Fri 17 Apr 2026 07:00:39 +0000
Manifest next update: Sat 18 Apr 2026 07:00:39 +0000
Files and hashes: 1: 5kdfSFfIXpTRDKj7nU9dTnk_a7Q.roa (hash: Qud0EaTIzAf2oGbBUwUkaVwSjph89PDDdo19BAvVZGk=)
2: IxT2p1USvkgGTKI4jIEAGlYZs-c.roa (hash: RpYym6oxELeUAn+F/Xd8p5iioExynMd0f+38UAxEIvY=)
3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: gOTGSkcay8mxKuYZVIb0+Y+LNpVbrfmndkZJggttKYY=)
4: oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa (hash: myh6PixZ04dXKVpBJ7oXGMj9UcP3arkRwKqy/fuyKlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e0:f8:61:64:38:bb:db:4d:74:fc:e1:02:e4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Apr 17 07:00:39 2026 GMT
Not After : Apr 18 07:00:39 2026 GMT
Subject: CN=b35eb6e594e557e3b653b0ac2e5fb72144b0c314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:23:d2:17:db:39:c5:f2:93:16:4c:e3:aa:6e:
9d:1c:6f:11:a7:70:81:a7:bc:b2:4c:59:a7:30:74:
0c:13:80:d2:3f:96:47:79:5f:27:02:4c:1e:01:83:
65:f3:7f:83:02:b2:b9:b6:f4:c2:53:b2:eb:9d:85:
19:2f:a6:c2:d9:d4:dc:49:4f:ba:aa:65:5e:7e:4d:
d4:b2:7d:70:ac:7a:6b:2c:90:31:f8:95:04:49:f3:
4b:07:8e:2b:d2:3c:fc:c0:6b:84:ce:76:5e:d4:48:
03:00:ba:7f:62:0b:1a:75:b5:d3:19:72:58:2a:05:
cf:89:1e:1d:8e:f0:5f:d8:9b:12:db:09:e3:d0:fc:
8f:51:dd:a9:0d:04:28:e5:a5:fc:10:d3:89:c8:1f:
d9:82:1a:54:08:ef:22:1a:e1:32:ed:20:0c:2a:36:
a6:0e:b9:28:1b:cd:68:46:32:0c:e1:cc:56:55:f5:
4b:65:64:b8:e6:d3:31:ff:f4:13:ca:47:38:1c:11:
76:3b:e0:f9:12:3e:16:6b:17:37:50:a8:b4:55:a4:
6d:7a:fa:fb:18:89:56:2c:ee:31:8c:d4:f8:74:43:
91:d6:b9:fa:a5:67:16:85:57:01:14:58:51:2e:f5:
b4:40:ca:db:19:10:19:17:42:99:f4:2a:67:d2:33:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5E:B6:E5:94:E5:57:E3:B6:53:B0:AC:2E:5F:B7:21:44:B0:C3:14
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:64:51:b1:a6:91:1f:80:9a:fe:ad:a0:33:8f:f2:87:fc:a2:
59:d2:8a:af:c8:e2:f1:d1:8f:43:f2:aa:ca:1e:f8:3e:47:c3:
9a:dd:59:97:79:8d:ee:f3:18:c0:93:87:22:ae:3b:bc:f7:a1:
57:1e:c3:de:49:93:74:13:b9:87:c3:32:b9:ee:4f:88:b2:3f:
36:55:d5:f4:71:d2:7d:36:45:b7:cf:5d:ff:e9:da:0b:c9:04:
05:f5:c0:31:40:79:64:5c:0a:c8:a7:8e:b1:f9:75:e7:82:a8:
9d:3c:a5:8d:86:4a:13:ce:8d:c3:66:3d:35:4a:63:96:4b:45:
60:61:1a:9f:dc:59:68:ec:27:0d:9d:93:f6:09:b2:2f:f4:3d:
d3:01:81:94:ce:b6:80:f4:56:bd:61:a1:90:c7:76:9f:b5:87:
85:90:db:6c:57:75:e3:1b:4d:ce:ef:60:57:a7:70:a8:bf:55:
5d:b0:20:a4:4b:dc:70:83:af:04:43:21:9a:75:5a:b1:94:84:
6a:14:70:a5:a1:4f:6e:b4:13:e9:2e:51:ee:b8:1d:36:f9:e2:
f8:7d:34:17:f3:bb:0d:81:c5:7c:e6:47:97:25:4d:8e:29:1f:
f3:55:6a:f4:ce:98:28:86:56:12:6e:37:1a:34:46:fa:8a:f1:
70:fa:0c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:09 2026 by rpki-client