Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
File: oGXmV0nKpfu0kekGl32xjTVZv0M.mft (raw, json)
Hash identifier: jSuHF835FJxiOUfPlGuQOE4Fb9wU/Nj3wE+IFaeeO/I=
Subject key identifier: 8A:A6:C3:12:CB:9F:C4:B4:C8:2F:DB:50:E2:5D:FB:18:01:93:63:A8
Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43
Certificate serial: 019D27E02E5F78049FD04B9E2395A62F8654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
Manifest number: 15C7
Signing time: Thu 26 Mar 2026 02:01:36 +0000
Manifest this update: Thu 26 Mar 2026 02:01:36 +0000
Manifest next update: Fri 27 Mar 2026 02:01:36 +0000
Files and hashes: 1: OPZKD3Vt0sTBmYCk7cCKUWbrGKI.roa (hash: YresaaNN//tsTeKLfmj6Notknbb5CDEFkmcoLMPi/SQ=)
2: oGXmV0nKpfu0kekGl32xjTVZv0M.crl (hash: YxQ6T19dhAh2yJyZxNFUqYx/kRcM0QpAE/650iymu2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:2e:5f:78:04:9f:d0:4b:9e:23:95:a6:2f:86:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43
Validity
Not Before: Mar 26 02:01:36 2026 GMT
Not After : Mar 27 02:01:36 2026 GMT
Subject: CN=8aa6c312cb9fc4b4c82fdb50e25dfb18019363a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:63:cc:32:75:df:32:18:bd:e2:50:e5:05:
18:61:e2:ff:8f:1d:7d:0f:7e:c2:3d:be:af:c0:1a:
1f:14:92:f6:c7:e4:f8:88:9c:30:90:d4:28:0c:a6:
b8:5e:dc:a4:08:1c:f0:4b:b3:d5:47:34:f9:a3:53:
21:03:ff:89:3c:de:38:3e:f8:37:94:43:ec:58:ee:
db:34:6a:8a:e9:fb:ec:b6:bd:da:6d:3e:e0:6c:50:
51:e7:5e:56:7b:70:c7:51:13:0b:2d:87:5e:52:4a:
3b:cb:fb:8f:cc:b4:c0:ae:51:f3:f9:73:ad:31:7f:
f8:b3:00:e1:2a:14:ce:f3:c5:c3:27:af:ec:3d:71:
11:74:92:e3:7d:16:8e:47:61:56:f6:9e:9c:ba:7c:
fc:86:d3:b0:26:94:6b:f9:dc:bc:3b:85:07:7d:ef:
a7:7c:57:d4:ad:87:df:cb:1b:2d:e2:52:7a:f8:c5:
45:91:f6:19:51:1f:75:6d:8c:d6:60:da:96:67:59:
8a:1d:d5:7b:73:ea:92:e8:99:83:a8:be:01:e5:30:
28:f9:f9:24:01:96:aa:7a:8f:2f:4d:ab:b9:98:e7:
ed:d8:5e:6d:85:dc:e4:47:3e:8e:69:b9:40:ca:4d:
be:43:b8:06:1d:35:ce:2b:10:13:c5:3a:ca:17:67:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A6:C3:12:CB:9F:C4:B4:C8:2F:DB:50:E2:5D:FB:18:01:93:63:A8
X509v3 Authority Key Identifier:
keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0d:fb:ad:4b:45:bf:40:3d:71:a9:dc:da:58:32:6d:1c:0a:
03:76:ab:35:b6:63:22:7a:4f:ea:07:22:2e:99:72:5e:06:c6:
c6:d4:3c:cb:dd:8c:aa:fa:6a:ad:5d:73:78:98:64:eb:0b:df:
97:01:6d:3a:79:21:2b:89:c4:b5:fb:24:50:98:50:44:7c:12:
cf:a7:bf:77:f1:ee:c1:23:bf:dc:9b:4c:fc:0b:cb:85:c3:da:
83:a9:c2:55:16:bf:b9:48:17:60:33:a8:d7:b3:9f:22:3f:0d:
09:39:f6:15:ef:90:65:be:ad:cd:cb:d1:2e:fd:79:ce:02:45:
9a:dd:5b:99:c3:7f:6c:f3:04:36:53:3b:4a:5e:ff:0f:ae:da:
fd:b8:af:e0:2f:d5:3b:35:06:57:ff:ea:1b:ab:a1:9e:0f:a6:
37:e7:f3:2f:cf:6c:6c:19:cc:6a:0d:97:25:bd:7f:1c:44:dd:
e0:ee:9f:61:97:94:10:47:c3:ec:3f:b2:03:13:1e:6c:78:1f:
91:9d:71:88:8d:40:53:cf:43:d8:25:78:2e:db:ce:27:a7:5d:
08:71:d2:bd:fc:59:13:f0:9e:09:45:41:10:14:48:5f:74:64:
d2:9a:d7:12:47:9b:92:64:fb:f5:c2:f5:ec:fe:b0:78:29:a2:
fa:b4:d9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:35 2026 by rpki-client