Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: TLQYt8PoFH6jRplhyGyTZriNb3b9EgYP1WcLwELa2Qk=
Subject key identifier: 54:50:A2:5A:CC:75:E9:F5:24:07:BE:A6:A0:A5:9B:6B:20:35:53:FE
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 019CACB4621322AA71B11C29EE8B755B7E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 04:00:28 +0000
Manifest this update: Mon 02 Mar 2026 04:00:28 +0000
Manifest next update: Tue 03 Mar 2026 04:00:28 +0000
Files and hashes: 1: D6zgSHbiztj7O2I1DW60de0ptBk.roa (hash: B8D0W1X4lmeoQhtBDBRUB/VyUa2Mld6fBfnDVCoTkMo=)
2: Ed9sbxyb8jvrhvxZjbOv3NsPiaQ.roa (hash: qKAq59OeZGLNvwwrou6DkFU90K39DNnEvwuBkqrbCks=)
3: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: Go6jQbPXsXMgGfq/xYNnKCh/RCuO5/Ux3CSWwY8YtcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:62:13:22:aa:71:b1:1c:29:ee:8b:75:5b:7e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Mar 2 04:00:28 2026 GMT
Not After : Mar 3 04:00:28 2026 GMT
Subject: CN=5450a25acc75e9f52407bea6a0a59b6b203553fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:03:d4:89:d5:f8:03:01:69:33:1e:f4:37:
71:e8:cd:38:82:c4:0a:98:ca:1a:03:2c:21:5e:83:
75:4a:41:4e:45:f2:cc:ff:20:a1:2b:a0:56:9e:57:
f3:9b:e4:fa:ac:7d:3a:73:cb:ae:dd:94:96:e3:a3:
a9:48:98:86:1c:26:a5:98:83:ed:3d:b1:4a:ca:d9:
08:00:fb:ed:3b:a8:8e:bc:14:55:08:d2:e3:57:7b:
03:f4:3a:ef:9c:52:67:de:92:f0:c5:c6:d6:7b:99:
c9:7d:25:fe:13:be:cd:01:73:e6:72:4e:1e:88:10:
9f:92:23:25:ab:af:00:f0:3b:fd:25:7c:c9:47:d0:
16:72:3e:cb:d3:a6:b2:c2:f1:ad:25:b4:7b:89:60:
8f:02:5b:43:b5:cf:ea:dd:1e:a8:e5:ff:ba:7b:a9:
f7:f9:3a:7b:12:68:7a:77:5c:1b:61:43:76:4f:87:
b6:e8:a4:99:90:07:7b:f9:e2:3d:b4:1c:e2:a7:e5:
b3:71:86:1c:72:1b:0f:f5:f1:e2:83:bf:a7:11:ed:
e2:8c:40:0c:7e:5b:73:67:09:a8:af:93:f1:8e:1d:
68:bb:87:23:86:65:02:c7:fc:6b:c5:0b:d4:ad:cf:
f7:de:df:03:06:19:51:30:90:91:0e:58:c5:54:31:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:50:A2:5A:CC:75:E9:F5:24:07:BE:A6:A0:A5:9B:6B:20:35:53:FE
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c0:2c:40:c2:0a:91:22:99:15:60:b2:7d:e9:10:1a:15:f8:
53:6d:ed:1a:84:ab:a8:a4:6d:d1:2e:2b:e3:f3:6b:fe:9c:02:
11:cd:8b:b5:96:cc:98:13:b1:88:6d:d1:8c:c7:7b:7f:a5:9f:
ff:fb:92:9e:3a:d7:6f:0c:c2:e7:64:b3:aa:42:b8:bd:51:86:
db:ee:b7:1d:a7:89:c4:7b:cb:9d:10:50:48:ae:71:1c:3e:ff:
c9:00:84:2d:9d:78:10:66:1e:24:58:32:98:18:5c:69:27:ee:
7a:8f:c0:19:db:59:d9:40:ff:b2:5d:a0:0a:95:c5:43:47:36:
b0:11:38:8f:f3:c0:15:21:e7:ab:68:80:68:70:4c:11:cb:89:
30:cf:53:cf:55:51:8b:fe:e1:0d:76:20:fd:31:77:6b:96:39:
ad:1b:a1:a2:23:cc:63:8a:12:9a:5e:44:34:02:51:a7:1c:f5:
1e:0f:82:2c:80:c1:74:bb:92:19:8d:2f:4d:2a:76:33:b3:5a:
1e:3c:07:a9:5f:e4:01:1c:0a:6c:ea:99:0b:43:eb:c4:67:71:
b7:fb:bc:07:5e:ff:ec:fb:2d:1d:4e:11:02:4f:82:eb:94:f0:
26:1c:e2:f2:47:db:ee:4b:6a:ef:ec:f2:03:6e:3a:b3:0a:37:
c9:8d:8e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:15:44 2026 by rpki-client