Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: /q7ka9Es37DWJ20x92LSKzOYet6Axj8+G9Xm/MTRVTU=
Subject key identifier: C0:3D:C5:B1:C7:55:1D:E4:C1:8F:2F:F1:2F:93:14:05:35:22:5C:52
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 019CAC478F6B3D54569505A6FF11CF1DEC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 176B
Signing time: Mon 02 Mar 2026 02:01:36 +0000
Manifest this update: Mon 02 Mar 2026 02:01:36 +0000
Manifest next update: Tue 03 Mar 2026 02:01:36 +0000
Files and hashes: 1: PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa (hash: ClKyMhw4ls8O+22d3zwyr4Of9HO2Cqaa8e0NaPqWqxo=)
2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: KjFiGBMpwrXA/rNP6CDUPsDRpaChvKRzxbpbDwCNnWE=)
3: pteb03Zrz-92mfGhlVuUAxWiO1c.roa (hash: Tlsfv5MPyjgb+Ws3wZ+t04Extj+nRQ2rvjb3jvw/n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:8f:6b:3d:54:56:95:05:a6:ff:11:cf:1d:ec:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Mar 2 02:01:36 2026 GMT
Not After : Mar 3 02:01:36 2026 GMT
Subject: CN=c03dc5b1c7551de4c18f2ff12f93140535225c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:21:b0:3a:a8:95:b7:93:f9:16:29:81:24:
04:a3:8a:38:af:8a:ec:5b:07:b1:af:9c:90:8f:24:
93:00:d5:33:5f:e4:14:06:8a:b3:e8:04:c0:89:6a:
54:e1:a4:11:61:b1:cd:ad:ef:1e:99:12:08:dd:31:
02:4a:a5:44:27:c9:2d:73:63:8f:6c:6c:d5:e2:76:
c4:8b:37:93:b2:2f:b6:09:45:46:14:20:c7:c2:8a:
2a:10:cd:83:94:ec:50:cb:08:10:79:1a:39:39:11:
27:78:39:f3:67:35:7e:96:55:47:cf:df:67:10:eb:
3c:83:fd:3b:ce:04:c7:47:e7:61:33:af:c9:b5:d4:
a5:3c:4d:33:05:be:71:c2:39:25:d9:3f:f2:63:ce:
3c:0a:6a:16:aa:90:f7:32:33:20:bb:61:90:1b:14:
9f:da:68:0d:07:fe:56:75:f9:1e:b7:ca:fd:54:f6:
b1:a3:44:26:5c:96:e9:f9:6a:a0:fa:f7:10:99:ff:
e2:db:87:64:79:1c:33:e8:6c:87:72:97:63:a3:83:
ea:20:e4:f8:a0:4a:37:2f:a9:da:25:f0:f2:83:c2:
88:b2:3a:12:96:09:eb:ad:f1:39:70:ca:f0:68:46:
53:a6:9d:7e:df:0d:17:8d:1a:a3:1a:e0:cd:06:74:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3D:C5:B1:C7:55:1D:E4:C1:8F:2F:F1:2F:93:14:05:35:22:5C:52
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:76:ea:ea:db:a8:c2:c2:f4:01:d7:06:c6:87:22:e3:0d:6b:
02:87:5e:53:00:6b:98:1b:9d:c6:eb:27:7f:93:c2:59:a2:1f:
ee:03:4e:d0:6d:c4:61:38:c5:de:17:85:66:b3:69:5a:d9:0c:
37:40:e1:71:95:72:a2:d1:e1:6a:5e:7e:02:3d:8a:5a:a1:fa:
e9:72:1e:13:86:ff:fa:65:1a:9b:78:95:9b:73:58:78:d8:f2:
ed:b7:be:8d:c4:b9:27:0a:db:d3:1c:29:48:ec:40:0d:57:47:
1f:a5:8d:97:57:35:b9:f9:53:a0:47:25:77:6d:b6:22:e1:9a:
e0:29:f5:88:f2:bd:54:25:5d:75:b1:b5:87:dc:bf:55:3c:fb:
27:e7:63:ea:c7:4a:f4:9a:bd:38:5f:9f:e3:49:77:19:a3:9a:
e6:93:90:64:0f:e7:b0:9f:f8:3b:ed:46:b5:1c:2b:97:b4:c1:
f3:9f:bb:ed:c6:72:2a:30:57:8e:c1:ca:18:a6:d3:a5:95:54:
d2:6e:c5:06:e6:3f:cf:c5:57:65:1e:c0:5c:b4:c7:74:30:0c:
86:e7:1f:93:24:c3:34:f8:03:07:2e:35:66:a9:db:af:e8:d4:
42:c7:3a:5d:e2:ff:d0:cc:ee:79:58:56:d5:02:7b:36:59:4d:
5f:c4:a9:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR49rPVRWlQWm/xHPHexVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNTZiNDIzODNhZDg2MmNlNmEzNzRhZDJjYTZkMzZjMjU0
ZGM3YjEwHhcNMjYwMzAyMDIwMTM2WhcNMjYwMzAzMDIwMTM2WjAzMTEwLwYDVQQD
EyhjMDNkYzViMWM3NTUxZGU0YzE4ZjJmZjEyZjkzMTQwNTM1MjI1YzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVghsDqolbeT+RYpgSQEo4o4r4rs
Wwexr5yQjySTANUzX+QUBoqz6ATAiWpU4aQRYbHNre8emRII3TECSqVEJ8ktc2OP
bGzV4nbEizeTsi+2CUVGFCDHwooqEM2DlOxQywgQeRo5OREneDnzZzV+llVHz99n
EOs8g/07zgTHR+dhM6/JtdSlPE0zBb5xwjkl2T/yY848CmoWqpD3MjMgu2GQGxSf
2mgNB/5Wdfket8r9VPaxo0QmXJbp+Wqg+vcQmf/i24dkeRwz6GyHcpdjo4PqIOT4
oEo3L6naJfDyg8KIsjoSlgnrrfE5cMrwaEZTpp1+3w0XjRqjGuDNBnTClQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA9xbHHVR3kwY8v8S+TFAU1IlxSMB8GA1UdIwQY
MBaAFKBWtCODrYYs5qN0rSym02wlTcexMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zZThkY2MtYTc2NC00NGJlLWI1MDct
OWIzZGQ0MTdjMzA4LzEvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8zZThkY2MtYTc2NC00NGJlLWI1MDctOWIzZGQ0MTdjMzA4
LzEvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3bq6tuo
wsL0AdcGxoci4w1rAodeUwBrmBudxusnf5PCWaIf7gNO0G3EYTjF3heFZrNpWtkM
N0DhcZVyotHhal5+Aj2KWqH66XIeE4b/+mUam3iVm3NYeNjy7be+jcS5Jwrb0xwp
SOxADVdHH6WNl1c1uflToEcld222IuGa4Cn1iPK9VCVddbG1h9y/VTz7J+dj6sdK
9Jq9OF+f40l3GaOa5pOQZA/nsJ/4O+1GtRwrl7TB85+77cZyKjBXjsHKGKbTpZVU
0m7FBuY/z8VXZR7AXLTHdDAMhucfkyTDNPgDBy41Zqnbr+jUQsc6XeL/0MzueVhW
1QJ7NllNX8SpLA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:10 2026 by rpki-client