Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: 2nxG2PHCT1XBmRZfcqJUgn+nCoY/2As3h4DhsK9cuVo=
Subject key identifier: 12:6F:C4:AD:30:30:49:69:16:0C:7C:4C:B5:CA:A2:BA:DC:EB:8C:30
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 019D2CCFD5DFF192C0A0948CF072FA54D61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 14D8
Signing time: Fri 27 Mar 2026 01:01:51 +0000
Manifest this update: Fri 27 Mar 2026 01:01:51 +0000
Manifest next update: Sat 28 Mar 2026 01:01:51 +0000
Files and hashes: 1: OFa8deirJ8mX7gRn79xlLJ8oDFY.roa (hash: N+xsE/A93Q5FiilxuvU4PImtKOjqeD0giFP8OnmhGl0=)
2: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: GTz6jHB12V+KUrawMOqu/j723jxODGiiXwtmXXhHCZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:cf:d5:df:f1:92:c0:a0:94:8c:f0:72:fa:54:d6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Mar 27 01:01:51 2026 GMT
Not After : Mar 28 01:01:51 2026 GMT
Subject: CN=126fc4ad30304969160c7c4cb5caa2badceb8c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:87:a2:5a:5d:0e:15:9f:64:63:e9:88:f8:
34:3a:6d:8e:e2:99:0a:37:00:52:e2:3a:2f:6e:8f:
96:9d:e4:c4:5c:80:24:50:93:76:04:8a:bf:42:49:
0e:7e:fa:96:b8:70:f5:f7:1a:09:b9:f3:89:13:e3:
50:90:ab:78:83:92:91:9b:ab:3b:de:bd:cf:a4:70:
93:e0:e9:50:67:86:f5:c9:73:b4:69:44:99:d1:78:
a2:d7:6e:cb:ae:27:29:f8:62:21:be:68:ab:e9:65:
26:72:9e:bd:74:a8:80:05:3b:f9:64:24:b4:a8:d9:
ac:06:c6:bf:43:52:a8:2d:23:95:cc:66:e3:53:9b:
1f:68:78:bd:a3:d5:10:67:99:48:61:d0:b1:9d:7c:
95:2a:5e:40:48:22:0e:f1:30:a2:d3:03:c8:38:d0:
ce:b2:7d:b6:89:58:d3:11:6e:a1:e8:b1:61:d7:2a:
7e:27:af:5d:c5:3b:1c:14:69:f3:1c:26:df:ee:6b:
2e:f3:e9:6b:b8:9d:c8:c5:93:b0:87:0d:0b:aa:be:
c9:f6:fe:40:ac:36:73:eb:0b:64:1d:c4:2d:2d:54:
61:33:a7:b2:60:08:06:87:ab:93:f5:63:cb:ab:6c:
ab:69:96:c7:1f:56:53:6f:f3:c4:f0:23:73:11:bc:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6F:C4:AD:30:30:49:69:16:0C:7C:4C:B5:CA:A2:BA:DC:EB:8C:30
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:36:b9:b0:a9:17:8b:f4:e4:6a:aa:32:31:b7:c5:9e:4b:77:
41:b0:38:3b:f4:be:b8:66:db:d4:67:88:1f:db:c7:f8:7c:8b:
e3:b2:09:3e:73:e8:40:94:6f:f0:16:02:fc:bb:fb:67:45:3c:
71:8b:7a:1e:60:b4:4f:12:a5:ba:af:e5:52:21:40:f8:8d:cf:
9a:1a:d4:4b:58:c1:b8:7c:77:84:64:34:61:13:cd:df:10:3f:
4b:02:db:4f:1f:43:1e:72:ab:b3:64:30:cc:fd:13:1e:c6:17:
47:58:4b:a3:68:99:2c:8b:f2:89:7e:32:e6:25:91:32:55:eb:
0d:c1:67:a9:f2:98:7c:06:6f:82:e4:db:4f:08:c0:5d:ea:f9:
f6:76:32:05:98:a4:17:08:e9:a7:f7:03:2c:72:30:d8:e6:eb:
e7:c7:42:5c:a3:53:03:78:9d:7f:e2:dd:12:46:44:eb:3c:c0:
a1:0b:4c:e7:e9:85:cd:36:52:58:d0:32:25:05:69:c6:be:3a:
c0:f8:b4:08:4b:f4:12:f3:63:76:a2:19:cc:ab:5b:bf:ce:ef:
b5:c9:ac:aa:85:08:cf:7f:d8:64:b6:f1:10:12:c7:8a:b2:4b:
b3:7c:56:ec:ee:f9:73:bd:6c:c2:d6:ac:90:b1:7f:a1:41:02:
68:92:3c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 10:04:07 2026 by rpki-client