Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
File: o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft (raw, json)
Hash identifier: wCaH9FLBgs+w1Wek4Xekq2ftf7kR5ODvtj1La3jmoPM=
Subject key identifier: 6C:76:58:B4:59:D9:FF:64:48:43:2E:F3:9B:44:A5:66:2F:CE:44:EC
Authority key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Certificate issuer: /CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Certificate serial: 019D2A72407A8E84009D920D0DFBCADAAC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
Manifest number: 187A
Signing time: Thu 26 Mar 2026 14:00:23 +0000
Manifest this update: Thu 26 Mar 2026 14:00:23 +0000
Manifest next update: Fri 27 Mar 2026 14:00:23 +0000
Files and hashes: 1: IXapM66e7MdcAVdK5ZgSYj804cY.roa (hash: Zge2mwt6CQnb9dk3bDCs3Oo7c63bsf/jL0cP3knXpFI=)
2: o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl (hash: RSqMBm22PPdQECeQL8h+Tj4Bxp9lT3LyQ/n8R5atPm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:40:7a:8e:84:00:9d:92:0d:0d:fb:ca:da:ac:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Validity
Not Before: Mar 26 14:00:23 2026 GMT
Not After : Mar 27 14:00:23 2026 GMT
Subject: CN=6c7658b459d9ff6448432ef39b44a5662fce44ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:90:36:a5:ee:8b:02:2b:b1:a6:02:31:5f:
e3:57:16:20:8b:80:ba:88:a1:fc:c4:b0:cb:87:c2:
7f:5c:33:91:a6:4c:f6:f6:29:03:7e:50:42:a7:28:
50:76:63:d9:e7:5e:18:a8:3c:01:7c:0e:f3:3a:de:
b4:15:f0:a2:fd:7f:3f:93:ad:b2:b6:c6:87:83:a6:
5e:76:4b:38:86:5f:44:0f:91:31:ef:a1:24:76:f2:
e5:87:7d:1f:67:da:f2:8d:44:2a:cf:5a:f4:5a:47:
e4:0b:90:05:33:c9:a0:46:35:e8:0a:11:1c:dd:37:
67:6e:ac:da:99:cb:73:de:69:fa:33:b2:60:8c:aa:
06:99:4f:28:b4:05:73:ea:8b:96:5c:56:49:58:9b:
f2:fe:4e:f4:4a:38:e6:ca:74:5a:51:b6:32:de:58:
4b:b9:e6:eb:67:80:cc:54:35:e6:b0:37:1a:af:11:
34:6d:16:bc:39:bc:b3:75:9a:4a:48:84:9c:56:98:
82:f3:9b:38:b4:ea:23:97:f2:1f:5f:41:7a:18:ec:
48:b6:b0:96:ad:89:03:8e:27:f9:d2:3a:f8:11:e3:
0e:c8:63:7e:b1:9d:67:26:0f:4e:e0:af:d4:f3:1a:
0a:18:55:0f:43:40:46:d1:c9:a4:a9:c7:ca:89:84:
36:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:76:58:B4:59:D9:FF:64:48:43:2E:F3:9B:44:A5:66:2F:CE:44:EC
X509v3 Authority Key Identifier:
keyid:A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:98:5f:ca:85:aa:87:3d:81:26:d1:af:0d:d0:90:6e:2c:eb:
0c:97:e6:2e:e3:d2:b6:06:f9:fd:64:22:f8:9e:12:98:85:a9:
f1:6e:8c:c5:ce:0a:8e:18:72:de:1f:ca:e9:ca:a4:65:b8:e1:
44:a4:0e:00:57:04:fb:98:77:36:cf:02:06:c3:bb:e2:df:d7:
c3:dc:3a:0b:64:b4:66:2c:3e:e4:77:ad:b9:44:05:e8:e5:a6:
0b:f7:92:23:1f:fb:d4:22:34:62:6a:53:1b:f5:73:05:12:78:
8f:3c:35:c5:29:d4:65:b5:e7:1c:42:9d:c7:a8:13:d4:33:d4:
2f:54:81:1b:cf:38:b0:c4:e3:75:e9:fd:e7:37:65:11:5e:a3:
a7:c3:a6:96:29:6b:0e:4e:e5:33:a8:39:f4:a3:64:c0:47:ca:
0a:ac:05:b8:12:b0:b3:12:2f:16:5e:be:f2:44:e7:46:df:c0:
e3:ec:a4:3d:e7:2e:39:ea:d9:fa:aa:86:a3:9d:48:a6:11:0f:
c7:1d:3a:1e:8f:a3:90:47:c1:28:0b:23:ce:85:a4:45:94:48:
24:b9:9e:d1:e3:b9:c6:d7:ae:35:a1:8d:e4:cd:36:3a:85:8d:
81:7b:1a:1a:2d:31:35:0c:e7:f9:34:67:97:c1:17:55:d0:07:
00:6e:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:31 2026 by rpki-client