Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: 3Me1bjKSFkaeioud/VUR8cz5B6UML7neTLBEsm3YsW0=
Subject key identifier: A3:B3:95:32:F4:FA:40:E9:04:FF:D2:33:AD:C4:B0:C8:1B:9D:E2:F7
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 019D2929710B1C0B8AD94630674897A79FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 08BE
Signing time: Thu 26 Mar 2026 08:01:14 +0000
Manifest this update: Thu 26 Mar 2026 08:01:14 +0000
Manifest next update: Fri 27 Mar 2026 08:01:14 +0000
Files and hashes: 1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: FvVgSgC3zpGlMLeQARPMPHFjA390BfpLwL6QTf9vnGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:71:0b:1c:0b:8a:d9:46:30:67:48:97:a7:9f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Mar 26 08:01:14 2026 GMT
Not After : Mar 27 08:01:14 2026 GMT
Subject: CN=a3b39532f4fa40e904ffd233adc4b0c81b9de2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:f3:2b:d6:ca:46:2a:bc:62:3b:3e:91:6e:
b4:53:88:d7:f9:2d:fb:6c:86:a9:55:32:28:28:7b:
81:7e:ab:19:65:d7:0e:1e:5f:e0:0d:24:20:4f:5e:
41:19:7c:ab:99:fa:68:e3:ef:07:79:74:b3:a5:55:
20:5a:3c:ce:91:94:c1:79:1c:86:da:c8:9a:3d:74:
77:05:ed:16:59:16:5f:b7:7f:02:11:c7:63:5c:8c:
c6:3b:32:1b:85:08:c4:12:d6:cf:0d:ec:fb:a9:77:
4e:c1:cf:5d:c8:8f:8a:a2:0a:8d:07:cd:a3:0a:46:
e1:2d:f1:88:fe:40:1e:6b:f5:25:c1:11:a9:db:20:
05:9c:01:66:01:d4:6d:49:f2:94:95:71:b8:f8:96:
c9:8b:91:8a:39:76:55:19:28:39:cb:37:56:61:d3:
57:b5:65:f7:81:a5:be:de:a2:9c:33:cb:8f:59:cc:
5a:09:18:df:97:ef:b6:5f:1c:c6:f0:15:ad:82:88:
0b:74:be:c9:7f:e5:1c:47:bd:d2:60:80:5e:6d:37:
2a:ba:ba:64:e1:42:c1:ad:eb:cf:e0:5e:ed:f2:38:
9a:e7:e7:0e:75:c0:11:bf:84:f6:f7:25:83:14:86:
f0:35:02:12:dc:3a:bb:5e:a4:79:d9:b5:5a:5e:ac:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B3:95:32:F4:FA:40:E9:04:FF:D2:33:AD:C4:B0:C8:1B:9D:E2:F7
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:07:75:62:49:33:36:6f:cf:26:76:cf:db:a0:a4:1d:d6:3b:
54:b3:40:6f:87:50:94:48:c6:dd:03:45:51:d4:d2:fd:6b:d1:
c2:da:92:4f:e1:36:ff:85:7e:df:81:c5:a5:70:e4:da:56:54:
81:98:1e:b0:94:71:15:13:19:00:13:3b:b1:a5:97:31:05:7e:
cf:dc:fa:40:0c:c3:e5:1a:9b:8a:57:5c:e1:bc:ee:d7:f9:b1:
7b:7c:34:d4:a2:b2:14:8f:0c:81:6e:a1:53:b2:7a:1f:a0:d0:
91:b7:6d:79:b1:b0:5b:1c:43:6b:bc:cd:17:60:d4:bc:e9:3f:
d2:dd:b6:9d:af:ba:82:de:f4:67:30:cd:56:96:07:16:c6:e6:
69:f3:f1:5d:79:61:e5:09:23:c5:07:22:64:d7:c9:f7:85:dc:
2e:0c:2e:43:ab:31:74:1e:fd:64:36:8e:00:5a:95:87:a0:f0:
df:51:91:55:06:bb:16:37:59:86:bf:96:e7:24:b3:de:52:43:
14:b0:b8:03:16:6c:49:bb:8b:0f:e8:12:f7:80:bc:e0:6f:61:
16:78:5e:ac:0f:92:53:d6:e5:af:a4:46:80:dd:c5:8c:2a:80:
3e:bf:62:b3:d5:0b:57:04:c0:16:71:dc:3a:08:4f:c7:da:86:
d7:c1:17:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKXELHAuK2UYwZ0iXp5+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwY2VmMWNhYTM0NTliOGIwMzljMjE3ODEzNjQ4ZGNhYmNl
OGMyZDMwHhcNMjYwMzI2MDgwMTE0WhcNMjYwMzI3MDgwMTE0WjAzMTEwLwYDVQQD
EyhhM2IzOTUzMmY0ZmE0MGU5MDRmZmQyMzNhZGM0YjBjODFiOWRlMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPHzK9bKRiq8Yjs+kW60U4jX+S37
bIapVTIoKHuBfqsZZdcOHl/gDSQgT15BGXyrmfpo4+8HeXSzpVUgWjzOkZTBeRyG
2siaPXR3Be0WWRZft38CEcdjXIzGOzIbhQjEEtbPDez7qXdOwc9dyI+KogqNB82j
CkbhLfGI/kAea/UlwRGp2yAFnAFmAdRtSfKUlXG4+JbJi5GKOXZVGSg5yzdWYdNX
tWX3gaW+3qKcM8uPWcxaCRjfl++2XxzG8BWtgogLdL7Jf+UcR73SYIBebTcqurpk
4ULBrevP4F7t8jia5+cOdcARv4T29yWDFIbwNQIS3Dq7XqR52bVaXqzSFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOzlTL0+kDpBP/SM63EsMgbneL3MB8GA1UdIwQY
MBaAFKDO8cqjRZuLA5wheBNkjcq86MLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAt
NmIwMTc5ZWUxZGQ5LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAtNmIwMTc5ZWUxZGQ5
LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQd1Ykkz
Nm/PJnbP26CkHdY7VLNAb4dQlEjG3QNFUdTS/WvRwtqST+E2/4V+34HFpXDk2lZU
gZgesJRxFRMZABM7saWXMQV+z9z6QAzD5Rqbildc4bzu1/mxe3w01KKyFI8MgW6h
U7J6H6DQkbdtebGwWxxDa7zNF2DUvOk/0t22na+6gt70ZzDNVpYHFsbmafPxXXlh
5QkjxQciZNfJ94XcLgwuQ6sxdB79ZDaOAFqVh6Dw31GRVQa7FjdZhr+W5ySz3lJD
FLC4AxZsSbuLD+gS94C84G9hFnherA+SU9blr6RGgN3FjCqAPr9is9ULVwTAFnHc
OghPx9qG18EXbQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:28 2026 by rpki-client