Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: FxpFgb1PFb5KS6XjV6zmX2CGLT60mai/AzTrVwsaR7Q=
Subject key identifier: F3:FD:EC:FB:62:9E:91:76:B8:AC:FE:B7:0C:11:4F:BF:21:B3:5A:30
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 019CAB33E4046A74C3CBBD41AF92A77CA481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0F33
Signing time: Sun 01 Mar 2026 21:00:30 +0000
Manifest this update: Sun 01 Mar 2026 21:00:30 +0000
Manifest next update: Mon 02 Mar 2026 21:00:30 +0000
Files and hashes: 1: RF94BnXgi0R9Os57s0wl9sVC1E8.roa (hash: 0fOD15YKqjCsf/vXO4OCMgCmPeLPtrJce5ZO8YGHzXE=)
2: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: jEPd1dvvOg9BKd7eAhIm5T7IQjxGMMu0RlvWctOe9pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:e4:04:6a:74:c3:cb:bd:41:af:92:a7:7c:a4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Mar 1 21:00:30 2026 GMT
Not After : Mar 2 21:00:30 2026 GMT
Subject: CN=f3fdecfb629e9176b8acfeb70c114fbf21b35a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:c2:54:73:50:7f:74:e0:52:f7:11:9f:9b:
71:13:29:0d:33:78:9c:9f:2c:83:99:53:30:c5:c3:
a4:51:f8:42:1e:76:8e:86:65:27:7a:de:75:59:36:
7c:7a:14:a3:2c:d5:3b:dc:eb:ef:9c:4e:3e:85:6d:
c1:10:9e:d3:d4:12:a5:c7:f3:d6:39:2c:8c:59:5c:
f3:a1:5e:07:11:66:7a:d7:97:13:78:f5:02:33:6a:
f4:1e:f3:d3:fb:c9:ed:f3:f5:9d:3f:7b:cc:45:77:
f3:8b:41:25:57:82:2d:57:7f:53:6f:cd:ed:30:09:
7c:3f:7c:47:c6:79:77:87:c9:ef:1b:1b:14:10:c0:
8c:30:ea:84:64:f6:63:50:c3:19:b4:31:c8:18:f6:
78:de:a3:8c:e8:83:a3:18:44:d7:22:cc:10:f1:32:
77:8c:cd:13:c7:65:a6:eb:7b:af:7d:69:af:dd:86:
5e:66:f3:f0:81:38:91:48:ff:c5:2f:43:6e:18:71:
f4:51:0c:c7:6d:d7:6d:ef:48:73:80:f6:eb:2e:72:
3a:e5:68:28:51:05:cb:aa:aa:18:70:b6:7c:8d:98:
35:51:e2:5f:3a:49:24:f5:f7:18:6c:a4:8c:20:87:
4d:c0:99:86:e1:a4:32:18:17:f7:87:4c:d7:44:18:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FD:EC:FB:62:9E:91:76:B8:AC:FE:B7:0C:11:4F:BF:21:B3:5A:30
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:18:89:78:c3:93:87:38:fc:0e:bd:24:9b:aa:ab:be:60:25:
b9:a4:8f:ef:68:4a:ba:56:df:8e:8c:53:a2:3a:ef:09:c0:ab:
11:9d:b7:1e:dc:97:ee:b0:7a:8a:10:c9:e0:55:91:4e:67:be:
07:f6:39:44:50:2e:9c:72:55:5a:e3:1a:e1:31:b6:72:01:9d:
d2:30:0f:10:3c:ee:ac:1d:7a:11:7a:7d:9b:ab:7a:18:cd:04:
75:ed:ab:15:72:7b:22:ef:1d:32:60:cc:e1:58:9b:ee:39:b4:
3f:a7:1d:bc:cc:ac:a4:2b:eb:a4:d3:8d:5e:bc:53:45:34:ad:
34:e7:ef:f2:63:b9:0e:cc:cd:75:1b:de:31:cd:0f:9f:dd:77:
b4:08:bf:08:6d:5d:88:51:bc:ab:c0:58:a5:ab:bb:fc:a1:0c:
19:f0:21:97:44:57:a9:ac:c9:c2:71:aa:e7:f6:9f:60:77:ca:
8d:b1:8f:31:ea:04:62:fe:a9:ae:20:f1:33:94:0a:6c:ec:45:
4d:26:f9:f3:83:af:6f:87:56:65:41:1e:a2:6a:16:cb:43:65:
d8:42:30:4e:b9:e0:cd:86:f6:5d:97:0b:1a:f9:0c:18:80:ba:
b9:87:bf:33:77:21:7a:56:97:74:c6:95:cb:de:a1:0d:8c:7b:
fa:18:39:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:56 2026 by rpki-client