Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
File: oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json)
Hash identifier: Jr8k5slW86WQwnLTQsgrDi654GcA4S3+EOrJERZmhJU=
Subject key identifier: 71:EC:84:9E:67:18:CE:AE:70:10:2D:21:3F:44:AB:22:0E:93:E0:11
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial: 019CAD906947F5061F47DD4F1467CD8C09B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
Manifest number: 1299
Signing time: Mon 02 Mar 2026 08:00:48 +0000
Manifest this update: Mon 02 Mar 2026 08:00:48 +0000
Manifest next update: Tue 03 Mar 2026 08:00:48 +0000
Files and hashes: 1: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: jiJPRaJRxRZcq+d6XqqraZUYUT2FFi2W2mvZhJfgKWQ=)
2: zLO5NhttWnGtKqBNs-55QF4xyAI.roa (hash: Y+DHFPwDb32W512hSzIFIuvnQ5dNais6OF6h18YAYzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:69:47:f5:06:1f:47:dd:4f:14:67:cd:8c:09:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Validity
Not Before: Mar 2 08:00:48 2026 GMT
Not After : Mar 3 08:00:48 2026 GMT
Subject: CN=71ec849e6718ceae70102d213f44ab220e93e011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:71:0e:6c:ab:65:1b:63:50:9f:00:b2:84:
26:32:de:2a:f6:8f:96:af:61:79:29:39:7b:ff:5d:
00:81:5e:42:84:ee:c3:55:c9:2e:ae:4c:8d:39:38:
74:8f:8d:c4:de:46:20:a7:d6:3d:61:33:47:c4:c7:
81:a6:f9:6f:4c:e3:40:de:8d:e0:d7:3b:79:86:96:
0d:27:13:81:2b:33:53:54:83:29:71:21:c3:15:93:
20:ea:ac:85:67:65:40:dd:a1:c7:dc:d1:85:a9:b1:
47:e1:bd:61:98:f0:32:e2:d1:bd:15:49:96:f7:21:
41:59:41:6f:71:ce:e5:ef:f9:33:5e:fa:0d:79:50:
12:3b:70:1e:98:4a:aa:c4:50:72:b1:18:95:76:dc:
c8:cf:0d:10:61:90:2c:48:ba:05:dd:97:11:0d:e4:
73:c7:35:ec:bc:e5:1a:a0:01:d3:97:46:e1:8f:d5:
bb:15:1b:9b:52:93:d3:9e:a5:88:23:14:59:fa:f9:
c7:13:e0:4a:06:77:7f:6d:7b:64:87:43:a9:9f:10:
78:96:a9:29:b5:13:4d:ce:cb:ef:9e:54:3e:0a:f2:
7a:2e:78:cb:6f:3a:ec:9c:fb:00:fe:14:a4:f4:e1:
83:a1:a0:6a:b2:f1:8d:73:7f:ef:64:ad:00:e1:a6:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EC:84:9E:67:18:CE:AE:70:10:2D:21:3F:44:AB:22:0E:93:E0:11
X509v3 Authority Key Identifier:
keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f1:2c:14:66:ff:b1:ac:71:68:a9:3f:38:49:3a:43:4a:77:
55:13:51:49:aa:1e:6c:f1:f3:83:74:48:f3:8e:3d:47:27:09:
ef:e6:92:b3:99:09:6a:7d:58:8e:01:4a:cf:4a:33:eb:a3:2e:
a0:52:f9:f2:04:9d:01:b3:7b:f6:d2:ba:cc:be:7e:14:2a:98:
1a:11:6a:85:8d:9f:7e:07:3c:72:47:dc:5d:3e:19:d1:d2:1b:
8f:b5:26:55:dc:9a:83:32:92:57:cc:8e:7d:6b:37:93:b1:9d:
41:08:12:5c:48:83:dd:f9:d6:7f:39:2e:ea:db:0b:79:bd:f1:
cc:68:2d:5a:03:b9:7d:1f:6c:8c:2b:35:fc:a3:41:c5:3b:03:
42:1d:b6:78:47:f7:bf:51:b2:42:fe:ee:6c:58:f6:4f:0d:8e:
19:9e:35:ed:b6:6f:ef:c0:fe:90:06:b9:0b:bf:23:33:78:11:
74:87:e2:b2:fd:ce:34:5d:5c:d4:68:da:11:b4:c3:33:f5:59:
f3:64:e9:3f:9a:e1:aa:d4:e3:ca:97:6b:d9:94:81:04:00:bc:
88:79:b1:14:42:23:6f:50:02:70:b3:d2:6d:0f:94:b2:21:d8:
e6:17:3d:3b:76:d7:da:d9:48:09:e5:e1:28:28:c9:c3:1e:ea:
cc:bb:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:55 2026 by rpki-client