Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
File: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft (raw, json)
Hash identifier: CLTo3nLKO034UAMm84NWL0W1lJr7YzOiJmgObqibGw0=
Subject key identifier: 90:DD:3E:A6:7C:7B:D8:C2:11:08:21:5E:1B:6A:91:25:99:1D:38:36
Authority key identifier: D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1
Certificate issuer: /CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
Certificate serial: 019D26288BBEEB351D49B77623C933BC1A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
Manifest number: 036B
Signing time: Wed 25 Mar 2026 18:01:24 +0000
Manifest this update: Wed 25 Mar 2026 18:01:24 +0000
Manifest next update: Thu 26 Mar 2026 18:01:24 +0000
Files and hashes: 1: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl (hash: /z76vbYivYJ0oj89N9zRhECnBx2D7KlUQa4DlUQuD2A=)
2: qMQrhVdpokolQWUOh4o5Ri8JueU.roa (hash: kVKK0WjFieFltJV66QufbgDou6/7+zDDk1pZJHeL88k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:8b:be:eb:35:1d:49:b7:76:23:c9:33:bc:1a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
Validity
Not Before: Mar 25 18:01:24 2026 GMT
Not After : Mar 26 18:01:24 2026 GMT
Subject: CN=90dd3ea67c7bd8c21108215e1b6a9125991d3836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:60:74:8f:f6:f3:f1:e7:15:5f:46:65:33:
fd:93:b0:69:a9:78:34:16:f3:c1:21:bf:8a:7b:70:
16:2c:b2:f0:8e:ed:3c:24:62:26:7c:93:11:97:c9:
c6:e6:be:c8:7a:ba:31:df:bc:27:f0:88:04:72:db:
5e:79:97:e8:a1:49:85:1e:49:cf:27:9c:6b:4a:fc:
30:0d:18:e0:00:79:de:01:75:9a:c8:2f:91:a2:e2:
6e:32:f4:2f:37:b1:8f:da:ec:6f:f7:1b:df:92:6d:
55:98:cb:51:93:fc:00:38:bc:01:a8:d2:b9:9d:06:
73:3f:b3:ac:e0:da:c1:85:7b:86:b9:64:40:42:5a:
2a:60:8c:ca:0d:56:8e:37:3b:d1:07:69:78:19:fe:
ff:f2:b8:44:09:00:b6:97:06:0f:68:4b:cd:27:1a:
d7:e3:c2:ab:9b:79:23:f6:7a:e9:8d:d8:38:b1:33:
78:0e:b3:10:4f:4e:3a:88:34:c1:1f:2b:fe:18:c0:
5e:91:ff:a3:63:40:dd:55:3c:85:49:c9:ba:7a:c2:
ef:aa:b4:37:1c:89:73:ab:fd:83:18:cb:c8:dc:9c:
04:ed:47:0d:61:e9:a0:ce:1d:9e:6f:04:9b:78:93:
02:2f:f9:b0:43:14:65:b2:b4:aa:92:8f:3b:b6:5f:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DD:3E:A6:7C:7B:D8:C2:11:08:21:5E:1B:6A:91:25:99:1D:38:36
X509v3 Authority Key Identifier:
keyid:D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7a:ce:53:53:51:81:0e:70:56:05:ef:5a:2d:8a:42:04:30:
c5:bd:c3:17:bd:7e:ec:7d:66:b6:1e:af:62:28:ee:eb:b9:de:
49:06:db:b0:85:a2:42:63:b8:8d:df:a4:d8:93:da:43:c4:1e:
11:6d:30:af:d6:5a:13:bd:bc:6a:89:9a:75:a4:6f:26:c4:e3:
2b:35:e2:62:57:85:6c:16:58:63:ce:ca:67:25:fd:bc:5e:e0:
3d:86:df:13:f0:d3:1b:e8:bc:31:3b:a0:56:6e:bd:9f:7f:7b:
82:6e:d9:57:ce:ef:92:50:23:e2:46:86:48:2d:5e:e2:28:00:
ea:cb:1d:ae:63:ee:77:7c:31:7c:1a:dd:b4:f2:c9:50:98:65:
45:09:1c:57:75:3d:4d:16:1c:9b:c1:0e:d1:57:50:9d:5d:0e:
f8:79:c5:f7:07:07:61:6c:ca:70:29:3e:76:ff:8f:e9:05:4f:
6a:78:25:76:50:6a:e0:83:72:47:e8:45:38:76:88:87:0b:03:
6e:b1:cd:db:bd:36:00:62:db:63:3c:ec:c1:f0:58:14:e7:b9:
f1:4e:11:e9:b0:5d:28:a7:e8:11:ce:16:30:67:82:f8:ba:c7:
2a:52:05:d1:f5:f3:6f:c9:66:40:81:e0:f6:8c:4b:94:3f:28:
9e:b3:a4:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKIu+6zUdSbd2I8kzvBouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ODFmYTY2YmUyY2VhMzRiNTg4M2MyMWM2ZjgzZjM0NjRl
MmVlZTEwHhcNMjYwMzI1MTgwMTI0WhcNMjYwMzI2MTgwMTI0WjAzMTEwLwYDVQQD
Eyg5MGRkM2VhNjdjN2JkOGMyMTEwODIxNWUxYjZhOTEyNTk5MWQzODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDRgdI/28/HnFV9GZTP9k7BpqXg0
FvPBIb+Ke3AWLLLwju08JGImfJMRl8nG5r7Ierox37wn8IgEctteeZfooUmFHknP
J5xrSvwwDRjgAHneAXWayC+RouJuMvQvN7GP2uxv9xvfkm1VmMtRk/wAOLwBqNK5
nQZzP7Os4NrBhXuGuWRAQloqYIzKDVaONzvRB2l4Gf7/8rhECQC2lwYPaEvNJxrX
48Krm3kj9nrpjdg4sTN4DrMQT046iDTBHyv+GMBekf+jY0DdVTyFScm6esLvqrQ3
HIlzq/2DGMvI3JwE7UcNYemgzh2ebwSbeJMCL/mwQxRlsrSqko87tl8TRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDdPqZ8e9jCEQghXhtqkSWZHTg2MB8GA1UdIwQY
MBaAFNaB+ma+LOo0tYg8Icb4PzRk4u7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNDAxNjUtZDk3NC00MjliLWExYzEt
YTNlZjBhNGEzMTE5LzEvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yNDAxNjUtZDk3NC00MjliLWExYzEtYTNlZjBhNGEzMTE5
LzEvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHrOU1NR
gQ5wVgXvWi2KQgQwxb3DF71+7H1mth6vYiju67neSQbbsIWiQmO4jd+k2JPaQ8Qe
EW0wr9ZaE728aomadaRvJsTjKzXiYleFbBZYY87KZyX9vF7gPYbfE/DTG+i8MTug
Vm69n397gm7ZV87vklAj4kaGSC1e4igA6ssdrmPud3wxfBrdtPLJUJhlRQkcV3U9
TRYcm8EO0VdQnV0O+HnF9wcHYWzKcCk+dv+P6QVPangldlBq4INyR+hFOHaIhwsD
brHN2702AGLbYzzswfBYFOe58U4R6bBdKKfoEc4WMGeC+LrHKlIF0fXzb8lmQIHg
9oxLlD8onrOkpw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:58 2026 by rpki-client