Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File: oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier: vQm45L4BYE6/347t2oNIf3WbxyQhrBJ2qrpqppEJjAQ=
Subject key identifier: CD:0A:62:23:EA:8F:51:26:18:13:63:6D:2E:7B:75:0B:01:13:27:E4
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 019D270431FE1E331CB92BD00207E9BD5057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number: 1897
Signing time: Wed 25 Mar 2026 22:01:19 +0000
Manifest this update: Wed 25 Mar 2026 22:01:19 +0000
Manifest next update: Thu 26 Mar 2026 22:01:19 +0000
Files and hashes: 1: BWTvXgAXmLi5C-gjg1XGZb6Xx2k.roa (hash: 42jeeBbxleiQhbuMxXur6p7rLIKmwfR/0QUFcIvSOuI=)
2: EqeB8tqHFp5nwKidq-l-rJcDnGA.roa (hash: LkoQtN+QmOCni6JN0Z5FUtSBkw3mqkVOTFE6VSZr0m8=)
3: U13FecX6J3UOL0Ga46JJjAYTBnM.roa (hash: jhsgEsNANGrcwvVO7xJiaTQ5oa51oynlcgVfqCGIYnY=)
4: V2TMTG4WDi8rsRzuUJ35K6X29Mw.roa (hash: M4JvfosFkWwb5FMHFRCzlviyPCyGNqJtznLLB1q9hHc=)
5: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: 9rdkYrUfHJ73XsDJuN62IwtR6y0XnCysUkwoMHwEV+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:31:fe:1e:33:1c:b9:2b:d0:02:07:e9:bd:50:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: Mar 25 22:01:19 2026 GMT
Not After : Mar 26 22:01:19 2026 GMT
Subject: CN=cd0a6223ea8f51261813636d2e7b750b011327e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:2d:c7:00:e6:28:91:52:ca:bd:31:8b:ad:
86:42:fa:ce:e7:4e:25:20:21:27:f3:ff:34:fa:51:
68:da:0f:35:10:c1:5c:83:de:f2:17:57:e3:ec:94:
a2:7c:f8:08:71:f7:cb:71:ca:40:8c:33:11:03:d5:
9d:43:3c:23:7e:2b:55:19:2b:0c:06:50:33:a3:d6:
ae:60:4e:a2:0f:97:cb:97:ea:2b:62:60:fe:be:39:
2d:a7:a9:48:6b:37:5e:f5:a5:ed:2a:0f:f0:5e:7c:
41:43:a3:9c:d0:a6:67:f4:a7:6d:4e:bd:a9:55:73:
14:19:07:8c:8e:34:13:81:f7:27:52:7b:0e:cc:dd:
73:e5:1c:03:6e:42:9c:62:2a:58:58:65:6d:70:31:
cc:06:19:59:a3:66:28:80:44:46:96:ce:58:2f:c1:
f5:fc:1b:4b:ea:28:2a:a4:6a:01:78:31:84:68:a7:
e9:38:b4:a1:b9:86:a9:b8:14:4b:8e:2f:58:31:3b:
e3:6c:4a:02:ab:d7:6a:d3:5f:6d:fd:ee:2b:4f:51:
e6:91:58:19:8c:19:40:e7:50:6a:3d:0a:7e:66:34:
ca:f0:81:be:55:67:25:0c:ea:d8:52:ea:1c:28:fb:
a2:a3:10:15:84:96:cc:f1:d2:f8:bf:19:92:b5:9a:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0A:62:23:EA:8F:51:26:18:13:63:6D:2E:7B:75:0B:01:13:27:E4
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1f:6d:fd:73:49:05:a9:92:ff:aa:e2:26:67:9a:ba:f2:eb:
97:70:80:74:e6:5a:02:fa:cb:df:84:29:58:37:d0:df:c9:04:
29:04:98:e1:04:f4:95:b6:ca:d6:20:6f:80:a6:3e:4b:bf:7b:
5c:7d:3d:b2:6d:2e:5a:4f:c6:f3:17:8e:05:8d:36:dd:10:17:
ad:81:53:69:a8:21:a4:f5:10:2c:79:8b:46:c0:14:7c:db:7c:
aa:c7:0e:f0:1d:b1:5f:44:31:22:ac:fb:32:aa:21:0a:03:36:
18:3c:f6:b3:5a:ee:dc:80:77:1a:76:bd:82:97:21:30:1d:ef:
40:c5:83:4f:e5:dc:e8:0e:33:34:81:e6:e8:d7:c2:9a:19:63:
8b:82:94:8a:4a:d5:10:36:e1:8e:75:a8:e3:5b:d7:88:b0:a2:
68:69:3b:4c:ab:77:55:6c:08:bc:45:da:cf:03:0d:00:88:9b:
a8:bd:88:a6:76:83:e6:67:dd:9e:ef:3d:33:99:bc:46:6c:8c:
5c:a0:e4:91:19:68:e2:99:1e:03:6b:08:e5:1a:3e:ec:37:d8:
cf:be:f5:21:4c:11:85:7a:5f:ac:bc:8d:53:7c:5e:34:33:31:
e6:11:89:58:9b:1d:52:33:39:89:7a:ef:d2:f8:33:ea:ff:b8:
a7:11:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:03 2026 by rpki-client