Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: PLOlBAKHlmbiTGOB97j5ej7EtXXBzyQUBbb5r+8iUrs=
Subject key identifier: 24:1E:6B:AB:03:4D:29:EA:4E:2C:6C:36:FC:FE:40:D6:1C:6A:D7:5D
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 019D25F19FDA80361F0D17A29D45E21583CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 11F7
Signing time: Wed 25 Mar 2026 17:01:25 +0000
Manifest this update: Wed 25 Mar 2026 17:01:25 +0000
Manifest next update: Thu 26 Mar 2026 17:01:25 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: MF83E1JiYumgUhVlRdlPVPkOyAl+g15tJZG5clUBTKk=)
2: IKgcyvSIA45izSMf7tUqa3g6d94.roa (hash: bRbSeQALCJ6vQauwQMiodJiLk0I/cBj0aUju5c7LVIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:9f:da:80:36:1f:0d:17:a2:9d:45:e2:15:83:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Mar 25 17:01:25 2026 GMT
Not After : Mar 26 17:01:25 2026 GMT
Subject: CN=241e6bab034d29ea4e2c6c36fcfe40d61c6ad75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:ef:81:75:f3:12:95:b1:3d:c3:f1:11:b0:
1e:29:b4:1f:23:bd:73:50:9a:4a:2f:fa:1e:a0:8a:
24:9c:a0:b2:06:e0:38:87:c8:8f:8e:c0:d3:b7:3c:
65:ac:40:f5:87:06:1c:45:b3:1b:81:26:bd:a4:29:
aa:f4:ee:5c:5b:e4:08:2b:68:43:24:9e:20:fd:7d:
48:61:cb:3a:2c:7c:ef:a8:c0:db:0d:6c:6c:51:ef:
65:a7:cb:68:0d:62:75:72:d9:92:9f:e4:99:6f:e9:
bf:3f:1a:bd:98:d5:97:54:a6:94:07:a3:fa:5d:9e:
5a:1f:5c:2d:b1:03:f1:99:b8:27:51:57:d3:73:59:
33:8c:fa:d7:f3:5b:72:ad:62:52:4a:85:fb:25:34:
77:f5:45:52:63:fd:9b:4f:af:b8:17:c3:a8:bc:4d:
e8:cd:61:7f:88:66:65:0e:b8:50:52:9f:65:7d:7f:
cb:c4:42:8a:7c:20:60:9b:63:c8:cf:bd:bc:fa:c6:
e5:e7:b4:e2:39:e7:a2:f7:08:44:c5:59:d2:7a:dd:
28:9d:89:96:7e:87:07:0c:55:86:10:63:25:aa:2e:
08:96:63:5a:e8:e6:90:04:78:ec:5c:ab:c3:22:37:
b1:e8:1d:95:f1:0c:bc:4f:76:4e:3b:12:89:b7:b9:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1E:6B:AB:03:4D:29:EA:4E:2C:6C:36:FC:FE:40:D6:1C:6A:D7:5D
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8d:8a:3c:b4:5e:db:34:89:c3:a1:e2:9c:30:ff:9e:c0:fd:
8d:fc:81:cc:26:81:9c:15:70:f0:6b:e5:2d:54:6a:74:a7:b0:
27:7a:15:e4:6c:d1:8c:c9:e3:82:14:8b:bc:e9:ac:6e:59:69:
b5:5e:a1:c0:08:95:b9:7b:84:3b:24:be:07:e9:b0:0a:5f:40:
ba:df:8b:84:02:a0:04:af:15:fd:6d:24:dc:6c:ba:15:9e:55:
74:23:27:78:cf:2a:27:3c:ed:a2:a0:b8:33:06:d5:6f:fb:a3:
fc:79:c1:18:01:ce:9d:ac:28:db:25:e1:e8:0f:01:b8:07:f4:
74:b5:50:d4:01:73:39:de:55:00:de:99:d6:6f:7e:f1:9f:a0:
5c:24:0f:5e:8b:d3:c4:99:1b:9f:bc:6e:35:d7:43:be:92:24:
d6:1c:b2:68:35:cc:48:8f:53:4b:d5:2b:b4:d6:c4:8a:c8:4d:
9e:f1:68:3e:dd:09:62:62:cc:f5:ff:a8:08:a6:e7:15:86:a9:
99:41:f7:c3:24:c9:17:17:6c:15:ea:8e:9f:64:da:93:df:05:
d8:d6:a0:8f:65:0a:b1:63:a8:f1:4f:e3:f2:f4:9c:77:21:62:
5c:e3:ac:86:49:5d:52:2c:9a:45:c3:79:8c:1f:75:f8:50:40:
cb:8e:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:57 2026 by rpki-client