Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
File: oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft (raw, json)
Hash identifier: 0g9XHXG3kctvNmtpwAwzj6yzyPfUgx5uXOglhQ0V1Fs=
Subject key identifier: 13:91:B9:C4:F1:BC:1A:6D:6A:D6:DD:E1:8F:0B:E1:6E:9F:12:75:70
Authority key identifier: A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77
Certificate issuer: /CN=a220dda64843a4ee364b089356ca87995830fd77
Certificate serial: 019D2AA94479653CDEB4E88CA62140923A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
Manifest number: 0FAF
Signing time: Thu 26 Mar 2026 15:00:29 +0000
Manifest this update: Thu 26 Mar 2026 15:00:29 +0000
Manifest next update: Fri 27 Mar 2026 15:00:29 +0000
Files and hashes: 1: J576zMYsvhdS1kduYOyMDY6tWBo.roa (hash: HQssjrgmFTJtkMHgZxRNGivJgKKVgxjUhkrUCmJCcew=)
2: oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl (hash: ywwT096ygD8qCTycbDaR+HpgOqBwNYnN1WKJ7c7Xx/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:44:79:65:3c:de:b4:e8:8c:a6:21:40:92:3a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a220dda64843a4ee364b089356ca87995830fd77
Validity
Not Before: Mar 26 15:00:29 2026 GMT
Not After : Mar 27 15:00:29 2026 GMT
Subject: CN=1391b9c4f1bc1a6d6ad6dde18f0be16e9f127570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:7b:10:de:04:8f:7c:78:98:6b:f3:cd:70:
dd:7d:62:68:25:b8:8b:8c:50:3c:40:fc:ab:3e:9c:
8c:2a:b5:67:0e:cc:52:3b:49:87:d6:27:6c:c0:80:
26:d4:1e:38:73:11:ee:6d:47:37:81:13:59:88:ef:
eb:4b:22:1b:20:78:c0:cf:58:86:bc:cc:33:62:d2:
fe:a6:79:5d:62:72:f8:99:42:90:77:bd:91:e5:40:
d8:30:2f:ea:23:c0:95:03:14:da:42:c5:e9:99:eb:
6f:27:5a:f9:06:eb:a3:7a:13:39:30:1c:01:69:3f:
e5:72:06:4f:44:72:12:97:6a:f6:a1:14:65:a7:23:
96:1b:f9:18:69:6d:49:73:10:e3:84:93:1b:e8:0d:
cc:8d:80:13:18:25:f8:94:00:bf:e5:71:dc:a4:f6:
b3:80:dc:d1:ed:d9:79:1a:2a:84:47:78:66:ac:4e:
cb:5d:d8:9b:dd:c1:04:36:d1:7c:01:2e:0f:c1:eb:
cf:c5:ed:bc:8f:40:74:5b:82:d8:bf:4c:3e:3a:6d:
1d:44:93:f0:28:30:c6:bf:1f:0e:10:64:f8:41:97:
0a:34:49:6d:7f:d3:c1:7a:90:0b:7d:f8:a8:cf:50:
18:55:7e:70:e9:c5:32:a1:a8:51:9f:76:a4:67:3d:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:91:B9:C4:F1:BC:1A:6D:6A:D6:DD:E1:8F:0B:E1:6E:9F:12:75:70
X509v3 Authority Key Identifier:
keyid:A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3c:53:65:3d:67:39:0a:7c:e9:57:88:8b:5a:7f:2f:57:cd:
62:7d:36:db:1f:f8:84:c6:07:b1:53:0b:dc:e6:97:2e:15:17:
06:b7:88:a3:7f:49:83:d1:a8:46:6b:2c:16:58:40:22:e3:e3:
9c:ed:db:d0:98:c2:8f:a6:e6:4b:99:b6:68:14:94:75:08:5c:
a0:e3:39:c0:b1:1e:f1:ac:61:21:b1:71:57:41:7d:64:40:df:
80:b8:43:68:b8:95:ca:ec:03:14:b3:dd:0b:9a:a7:76:3a:bf:
8e:a6:d8:b4:d8:55:28:7f:5a:11:a5:bf:0d:bf:23:e8:f9:37:
a0:cc:84:17:a6:ee:1b:cf:cc:27:b6:25:dc:d9:15:b6:7c:41:
1b:f0:46:49:7d:34:0d:95:d7:e6:75:d0:36:ce:f2:73:ce:1f:
d7:90:de:2e:99:3c:49:71:2a:1b:9b:ac:fd:25:53:c5:ed:3b:
77:64:e6:5a:83:af:4a:a2:02:15:93:1b:b8:4b:5b:ae:0f:b5:
53:06:26:6c:3a:70:2a:31:96:f2:f3:ce:76:8a:27:63:90:fd:
f3:3d:20:a8:4a:2d:6a:63:5a:44:96:98:f5:ca:46:22:fe:ef:
40:03:fe:69:78:cd:a0:3f:0e:57:40:f3:10:96:52:77:b0:2d:
2a:b9:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:49 2026 by rpki-client