Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: 0TzUn8UqVpO64s6VL8VhtElADSKDbCXgUg5RPspqk+I=
Subject key identifier: 35:2D:74:F7:3C:93:C8:CA:16:19:20:2E:40:9D:54:4B:0E:08:BF:3D
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 019CAC47484FD0D26969F129F9A6B946BD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 1336
Signing time: Mon 02 Mar 2026 02:01:18 +0000
Manifest this update: Mon 02 Mar 2026 02:01:18 +0000
Manifest next update: Tue 03 Mar 2026 02:01:18 +0000
Files and hashes: 1: hXAXsmUnJiWV8z-SUw75JeiGESc.roa (hash: VUrv1bazpJi2/YTeV0TBl6sYZknhiXdswe7oWJCYACU=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: rqyguZLoJg+XjE8Y+DLN8uiHJGVivvzrcF74KOGtQew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:48:4f:d0:d2:69:69:f1:29:f9:a6:b9:46:bd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Mar 2 02:01:18 2026 GMT
Not After : Mar 3 02:01:18 2026 GMT
Subject: CN=352d74f73c93c8ca1619202e409d544b0e08bf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:15:54:47:24:52:9f:07:8b:81:84:0c:31:
87:be:fe:4d:9b:3a:1b:75:77:db:1b:74:50:6c:b1:
50:d8:22:77:d3:72:e9:cb:60:46:ba:c5:c2:93:62:
f1:35:2f:13:9c:eb:f5:b9:a3:ef:13:59:8e:a6:f3:
99:5e:29:a5:c4:c0:0a:59:af:21:4c:cf:9d:02:fb:
62:29:25:89:04:a1:57:6b:83:58:6b:62:ae:6a:f6:
4e:28:31:7a:fb:e3:43:0c:34:7d:13:6e:68:43:db:
21:db:a0:4f:16:30:50:2d:e5:05:0b:2d:15:70:62:
39:c7:c8:e4:c1:ab:7a:f9:56:ca:6c:0a:b9:01:8a:
42:19:e6:3b:e5:cf:4a:6c:6b:f0:42:6e:03:e9:df:
8f:15:f3:c0:e3:f1:fe:b8:c8:8d:8b:12:4a:c8:cb:
bc:87:65:e2:34:32:e0:3f:b1:5a:4e:18:93:68:f0:
79:73:34:39:72:e2:4a:d8:5b:89:10:99:ad:8d:36:
9f:9b:55:15:fc:e6:b0:90:e6:54:1f:2b:43:2c:5e:
ba:3f:40:5e:57:18:6c:52:4c:d5:8c:00:d6:77:6e:
f0:5b:c2:7d:99:3b:27:8f:d4:1b:0f:cb:bc:02:64:
84:9f:bd:19:ca:b1:6a:6e:a4:97:d2:17:41:24:a8:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2D:74:F7:3C:93:C8:CA:16:19:20:2E:40:9D:54:4B:0E:08:BF:3D
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b2:64:ac:e2:a7:87:9a:04:bb:e3:d4:bb:c8:03:8c:b7:46:
81:3c:34:a0:c4:c8:40:31:39:e1:46:50:81:02:71:4f:a8:47:
f7:51:0a:03:e4:15:f6:56:79:52:f9:7b:fc:4f:a0:8a:ab:fd:
29:fe:88:16:4d:3e:e6:84:01:42:4a:c0:9a:26:07:9f:52:19:
34:e4:e7:cc:5a:db:f1:6b:51:c0:0e:ee:14:a4:ad:3d:f7:a4:
00:9d:86:cd:4f:ce:1c:07:3b:c0:30:e2:3e:52:89:34:4c:3e:
d8:cb:3c:89:83:83:7b:46:39:1a:1e:fb:c3:6e:2e:d6:c2:e3:
7a:65:75:ee:4e:e7:00:51:fa:39:2f:a2:36:e8:7a:ba:c4:cf:
c7:1a:17:ef:18:1b:60:38:68:b3:b6:97:f1:83:70:c9:d5:6d:
dd:9e:6f:b8:c5:36:80:99:b7:e0:fd:60:ec:20:f0:39:1a:6c:
93:41:1f:b8:b1:a2:fd:2c:52:e5:d5:39:e0:72:86:1e:85:09:
3e:58:4f:00:04:34:ca:c0:ec:51:f4:76:76:65:50:66:1f:5b:
7d:11:25:20:1f:b8:1a:c2:a2:52:f6:52:77:4e:7f:65:f3:b7:
a1:74:bb:05:73:cb:fc:92:46:32:a5:a6:a5:f1:a1:51:64:be:
35:87:8d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:49 2026 by rpki-client