Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: zrpNJIdbAYAHwJv8eSKuFyLkGt2KQLQl+OhHwExQNSw=
Subject key identifier: 3B:03:B3:BA:EF:9F:E1:46:45:3C:9E:6A:5E:23:4E:30:E8:55:84:2E
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 019CAA58DEF86E53D048C45A04384957A74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 1335
Signing time: Sun 01 Mar 2026 17:01:16 +0000
Manifest this update: Sun 01 Mar 2026 17:01:16 +0000
Manifest next update: Mon 02 Mar 2026 17:01:16 +0000
Files and hashes: 1: hXAXsmUnJiWV8z-SUw75JeiGESc.roa (hash: VUrv1bazpJi2/YTeV0TBl6sYZknhiXdswe7oWJCYACU=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: aniIanlGPU6HdIX5OXTT3TdXmv/dkWYq5mHtSlodEzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:de:f8:6e:53:d0:48:c4:5a:04:38:49:57:a7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Mar 1 17:01:16 2026 GMT
Not After : Mar 2 17:01:16 2026 GMT
Subject: CN=3b03b3baef9fe146453c9e6a5e234e30e855842e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:d6:eb:94:f6:d1:12:ac:2d:2c:98:5d:72:
f0:aa:77:ea:ba:5d:e5:53:9a:08:b6:a6:90:22:7d:
dc:0b:f5:48:39:7b:3c:57:57:a3:ed:93:59:f0:3c:
75:66:9c:0f:02:83:17:e4:9b:df:c7:6e:14:a3:90:
de:f9:70:02:df:af:b2:79:3c:9a:71:44:eb:61:65:
0e:92:a2:23:59:9d:33:2a:06:f4:0b:68:82:57:1a:
f0:fc:f7:bf:97:b3:34:1f:9e:68:f8:7d:f8:27:cf:
63:3f:be:96:1f:6f:d4:e3:3b:0e:d2:7e:e2:04:80:
1a:b5:03:18:a9:4a:87:a2:c3:7f:07:d3:ff:25:0e:
a3:4b:7e:86:a8:68:a2:a9:74:a2:e5:f8:e7:be:25:
18:3e:e7:c9:ab:1b:ca:70:88:ff:ce:26:e6:bc:e4:
26:4c:ec:a7:ce:2e:9f:60:f0:73:89:20:6c:6a:6e:
08:a5:38:ed:a7:69:78:55:8f:18:52:f0:55:11:34:
05:8b:bd:37:64:e3:13:30:d3:de:1a:ca:7c:69:39:
4d:aa:01:00:87:d9:cc:8a:82:39:94:12:ec:55:cf:
2e:c2:20:8b:4f:54:67:83:64:2e:fd:14:3a:9a:bd:
e6:c5:8a:30:c2:ea:d3:37:73:68:6d:2b:2d:94:af:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:03:B3:BA:EF:9F:E1:46:45:3C:9E:6A:5E:23:4E:30:E8:55:84:2E
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b7:20:53:b3:71:b6:98:80:63:6c:f2:96:2d:24:39:c3:fa:
94:64:4e:3e:4c:24:f1:5b:4a:5e:bd:0a:42:6a:f6:3b:c7:4e:
56:73:65:88:f1:cd:19:11:35:3f:f9:c6:8c:2e:14:e8:ab:71:
66:ad:dc:78:fc:bd:31:00:09:54:f3:45:82:5a:8d:77:6b:ae:
a7:fa:bb:80:63:fc:6d:1b:84:2e:31:a8:8d:72:7f:40:82:37:
86:a3:b4:cb:a7:64:ac:aa:9e:9c:22:c0:de:d8:05:5b:1a:8a:
90:1b:e7:0e:01:30:e5:aa:7d:1b:ee:61:90:f7:fa:ed:dc:4d:
82:79:5b:a5:3e:10:a3:a7:82:ea:63:69:eb:1f:af:72:40:04:
af:fa:fb:2f:02:f7:06:f9:e1:74:14:bc:00:dd:b6:7b:ad:51:
4c:4e:ce:47:62:76:d1:d6:c8:b3:01:c7:44:d7:23:16:c3:e6:
0e:b3:93:d2:7c:24:a8:89:76:14:49:40:e0:f1:90:d0:62:81:
cf:26:46:8c:53:f8:ab:59:36:b6:80:25:f1:6d:17:3e:e9:52:
e2:90:22:13:22:27:45:cd:3a:ad:6a:b4:0a:90:3c:20:44:7a:
b6:f8:f9:cc:38:c9:37:8d:8d:f6:08:cb:1c:83:2f:21:84:5c:
ff:de:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:00 2026 by rpki-client