Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: N9GW8n7mYz82VDT9SSrP7MPn1CEDXnLTWpxgMLh7Aag=
Subject key identifier: 27:2B:5D:D8:9D:2A:63:D8:29:EF:97:BB:57:FE:7C:69:B7:0E:11:A9
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 019DA4542C7E18C1E3001C491A82E1A19831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0FB4
Signing time: Sun 19 Apr 2026 06:01:12 +0000
Manifest this update: Sun 19 Apr 2026 06:01:12 +0000
Manifest next update: Mon 20 Apr 2026 06:01:12 +0000
Files and hashes: 1: RF94BnXgi0R9Os57s0wl9sVC1E8.roa (hash: 0fOD15YKqjCsf/vXO4OCMgCmPeLPtrJce5ZO8YGHzXE=)
2: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: ZletP4fgdLuV+8UeojbLIsn9rwV8zs3JXs9ivc4XYco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:2c:7e:18:c1:e3:00:1c:49:1a:82:e1:a1:98:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Apr 19 06:01:12 2026 GMT
Not After : Apr 20 06:01:12 2026 GMT
Subject: CN=272b5dd89d2a63d829ef97bb57fe7c69b70e11a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:75:32:97:e9:7a:f3:5d:c2:e4:9a:47:52:
bf:a4:b0:67:c8:ce:a0:7b:02:42:b3:99:0f:60:82:
3b:1d:70:ed:c6:4d:71:ad:73:8c:46:84:a1:59:6e:
ba:f3:38:6e:cf:13:49:5b:a4:09:1f:b5:9d:df:27:
2c:4a:10:1a:71:e0:26:ff:00:f0:3c:69:d5:80:7f:
f9:89:88:17:3c:fd:57:8d:6b:cf:1a:20:5b:8d:24:
17:f7:fc:67:f0:f3:72:3e:18:cd:6e:92:04:47:09:
7b:e9:8f:d7:80:d7:56:2a:33:0b:0e:96:a9:0e:34:
64:dc:e6:9f:19:92:dc:e7:67:99:7b:2f:ca:af:38:
0c:a8:e5:e4:24:f0:02:66:6a:3f:15:89:1a:1a:5d:
dc:6e:23:95:07:d3:f9:16:c5:42:a7:59:06:34:be:
5b:11:96:81:68:49:29:18:7a:93:ef:59:ef:26:be:
c4:cc:a4:5a:ed:a1:2c:0f:19:05:11:fc:6e:92:4f:
df:e8:9d:15:4c:e1:fc:44:5c:0c:37:cf:b4:a3:67:
64:5e:5a:1d:4b:55:88:9b:98:3a:72:fa:53:ee:58:
45:74:d2:01:6f:0a:82:b0:1c:c7:4a:57:b4:17:06:
ba:6b:dc:ef:36:c7:c4:08:b0:49:45:8f:39:4f:66:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2B:5D:D8:9D:2A:63:D8:29:EF:97:BB:57:FE:7C:69:B7:0E:11:A9
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e9:f4:26:1f:b8:f7:7e:4d:eb:76:2c:02:4b:a2:77:14:40:
ad:56:00:86:1c:70:7a:99:e0:3d:9e:8f:8f:e5:80:d0:25:76:
f0:1e:61:ec:cb:a5:50:00:33:2d:17:f2:22:19:5a:78:57:85:
bf:73:bd:dd:fe:02:34:35:df:58:1c:a9:2a:9c:91:3b:36:48:
6a:e0:92:aa:da:40:8f:3a:df:dd:ef:f6:b5:41:cd:44:ea:63:
66:d2:9b:e7:93:c7:ca:f1:60:88:ca:a2:ec:ab:f8:30:42:3a:
88:d8:7a:ae:91:1e:ca:31:f7:40:0e:2f:24:5b:f8:b0:f7:7a:
e8:0a:9c:28:a8:cc:b4:4e:c4:52:68:ef:ca:61:28:45:f7:d0:
52:37:a3:cf:bc:ee:39:7d:66:b7:f3:c5:f0:40:14:0e:07:61:
18:32:9c:67:d0:2f:2c:8e:55:37:d4:25:7b:b8:3a:4a:71:07:
69:18:49:57:ea:77:03:98:2d:20:01:5b:52:88:36:ab:8f:b1:
5f:b1:3d:ab:07:83:d2:91:3b:e7:81:83:df:2a:29:c7:0c:0c:
9e:b6:57:de:ec:1f:c1:a6:da:48:48:c7:fb:35:53:3e:7e:22:
c8:ec:9b:8e:7c:c7:e1:07:f2:92:32:c5:b1:27:b8:91:02:4c:
ae:73:5b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:04:44 2026 by rpki-client