Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: G3A+XKfyHAWsHJvpRxv92NVTlfKZ+fWuXzzebs45Ri0=
Subject key identifier: 8E:78:25:72:EF:4D:7D:29:22:E0:99:49:E3:DF:A5:FC:D3:73:89:76
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 019D2703FC54DC290E67A5278E1D476A1151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0F28
Signing time: Wed 25 Mar 2026 22:01:05 +0000
Manifest this update: Wed 25 Mar 2026 22:01:05 +0000
Manifest next update: Thu 26 Mar 2026 22:01:05 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: KgdcFkfR5zcjR2Z2N3j8z/tgapmLDFD2IUN1BWUyFRs=)
2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:fc:54:dc:29:0e:67:a5:27:8e:1d:47:6a:11:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Mar 25 22:01:05 2026 GMT
Not After : Mar 26 22:01:05 2026 GMT
Subject: CN=8e782572ef4d7d2922e09949e3dfa5fcd3738976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:c5:b6:5d:81:e7:e0:59:61:2a:9f:01:a9:
f4:76:4b:4b:a8:54:2e:93:c3:a4:84:f8:7b:2f:89:
0a:0e:70:9f:9d:9d:8d:4f:d0:5f:09:f2:b6:9d:2f:
9c:00:ee:a3:c1:ce:88:2a:e5:28:c3:9c:9d:ad:7f:
ce:90:c0:ad:65:b5:bc:bb:f6:7b:60:b5:f7:c4:14:
1c:05:72:c4:c7:8b:cd:22:1a:34:7d:95:c8:e7:ef:
27:f9:8d:61:3a:c0:73:69:f3:0c:a6:c4:33:97:6c:
e2:24:56:41:d6:a8:dc:0d:07:18:6f:c0:63:91:25:
71:35:a5:26:44:f5:4a:94:eb:08:56:7c:8e:f7:cf:
18:bb:d6:cb:5d:94:f8:5d:c0:8b:74:97:5e:e6:76:
22:c7:a4:14:3f:7e:60:18:79:9b:6d:6a:3b:dc:05:
57:24:2c:18:0f:28:0a:03:30:22:95:63:f8:59:79:
9e:82:fd:90:d3:58:01:2e:1f:5f:e5:26:c3:54:27:
33:39:a3:9d:9e:2e:6b:dd:fd:1f:f4:51:98:f8:1a:
72:c1:d9:d5:0d:97:45:84:9c:be:66:b4:34:5e:7f:
f2:f3:5b:18:14:18:cf:e4:37:54:23:51:f6:49:26:
f8:42:64:9b:67:87:26:85:0c:7a:9d:a1:92:5b:2b:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:78:25:72:EF:4D:7D:29:22:E0:99:49:E3:DF:A5:FC:D3:73:89:76
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6a:1b:cd:dd:a2:d4:6a:92:ac:d9:e3:8a:23:a9:8e:e3:4d:
9f:79:14:90:c4:09:cc:8f:b5:70:d8:99:38:3e:80:71:f8:40:
90:24:23:af:bc:68:b2:5b:c5:ec:f0:03:cf:b3:fc:95:66:19:
91:a1:7f:45:b5:2f:93:c4:77:e7:b7:d2:8b:79:90:a1:57:bb:
60:46:f9:36:26:cd:ad:f1:c7:4b:bf:1f:82:24:d2:05:81:84:
3f:be:7d:b9:cb:ce:83:4c:62:03:d1:f6:ab:13:e5:e0:8f:58:
a0:be:74:a7:4c:89:ea:7c:30:b8:00:e3:4e:9a:09:b6:2b:e1:
4c:83:1c:05:94:da:c6:48:01:06:bb:5b:3c:4f:1e:3d:25:9b:
a4:e3:1f:56:a0:0b:25:b5:4a:83:3c:ab:cc:24:97:fc:1c:a2:
7a:0d:eb:92:27:c7:25:17:4f:d5:0b:07:05:70:1b:41:5d:ea:
eb:c1:e4:4c:db:fd:95:c6:9f:6c:14:63:bd:fb:1e:de:0d:93:
72:6d:1f:56:86:4f:3b:51:9d:93:0d:05:60:ef:6e:a9:af:27:
69:bc:79:7b:fe:56:10:4b:5b:b6:b8:e9:85:9d:9f:51:36:d1:
f0:fa:ca:8d:64:2b:d3:16:b6:b9:32:78:c2:6a:8f:b8:83:a2:
47:33:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:57 2026 by rpki-client