Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
File: OxRinHZc4axPaIlW47kPatjEtYI.mft (raw, json)
Hash identifier: M0cnPSeg/PM4sEKu94MLss3UmcYLhVdkSaCPnfLvDpA=
Subject key identifier: 52:3C:48:B0:FD:29:0F:1B:6F:6F:6C:C1:22:C4:DA:F3:AE:E0:2E:3A
Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
Certificate issuer: /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Certificate serial: 019D27DFF040204E301138770B76DF83CF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 02:01:20 +0000
Manifest this update: Thu 26 Mar 2026 02:01:20 +0000
Manifest next update: Fri 27 Mar 2026 02:01:20 +0000
Files and hashes: 1: 0yRcFcA3OBSplazAFaiD6lfC3B0.roa (hash: 2qPLWspuMTgkMxkS4l/YyisgXYynSeGYaJD2ttoyg+o=)
2: OxRinHZc4axPaIlW47kPatjEtYI.crl (hash: lIsrHl72JnjueivpGBj47dmgzfzSmE5xlM5w+w/vDEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f0:40:20:4e:30:11:38:77:0b:76:df:83:cf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Validity
Not Before: Mar 26 02:01:20 2026 GMT
Not After : Mar 27 02:01:20 2026 GMT
Subject: CN=523c48b0fd290f1b6f6f6cc122c4daf3aee02e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:2c:fe:7d:5a:0c:2a:9f:35:a6:21:64:1c:
3a:56:77:ab:64:82:11:e0:a9:a7:25:2c:93:cd:5f:
6e:43:27:18:92:f8:4c:08:68:36:76:6c:93:62:6a:
bf:cb:77:32:1d:65:5f:35:98:ea:b3:82:52:14:a1:
38:a4:29:a4:86:74:f5:1c:5f:9f:df:29:77:3e:3f:
7d:95:a9:0c:7a:89:ab:d1:d5:e2:9d:96:98:51:87:
d0:6e:f6:3f:df:af:e6:e0:1a:c8:fa:c1:77:62:f8:
57:d0:64:c7:ec:b0:50:c4:2d:ab:1f:cc:7c:7b:d9:
ab:e1:2c:ff:1a:a3:30:5e:1b:c8:b0:81:67:c1:16:
44:59:d2:af:e4:ec:51:cc:69:58:86:e0:04:e1:59:
29:a3:87:d8:23:c9:88:13:b1:7b:b2:61:6a:9f:51:
a9:90:7f:58:46:0d:5d:13:e1:2b:92:e5:ff:11:0e:
7e:44:8a:1b:65:cc:4d:c6:b8:ca:6b:d2:1b:95:e7:
e6:8c:30:ed:37:ed:60:cf:3c:8e:20:f8:d1:21:c0:
0b:b3:d8:2e:18:81:22:6f:d2:59:e4:9c:ed:55:39:
96:f7:d6:28:e7:24:89:c6:29:40:14:b6:e0:07:c2:
eb:a6:08:02:e6:9f:d1:9b:58:f1:98:c5:d5:f1:b7:
33:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3C:48:B0:FD:29:0F:1B:6F:6F:6C:C1:22:C4:DA:F3:AE:E0:2E:3A
X509v3 Authority Key Identifier:
keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:01:aa:11:84:1a:a2:39:69:43:75:0b:c8:32:df:47:2a:53:
63:7f:c9:aa:05:4b:b1:eb:47:23:27:43:6d:e0:27:24:1e:9c:
ef:68:a5:ca:6f:11:f4:1c:1f:1f:0d:b9:53:0b:55:2a:0b:94:
9f:90:e7:19:4e:03:b3:92:de:41:74:2e:ed:55:be:ce:0f:b3:
8d:b2:5e:5d:55:08:6f:78:51:a1:01:95:15:f2:41:bb:e5:fe:
06:c8:b5:39:f2:5e:2c:06:11:5a:8b:89:c5:bb:9b:a8:68:d3:
e6:38:c2:08:78:92:6b:f5:9c:8f:a5:18:d8:ca:d4:61:ef:ca:
ef:d8:e9:95:cb:7b:d3:df:52:17:0c:5d:c2:c3:46:3b:bb:6f:
52:7e:81:42:30:12:4a:34:d3:59:eb:cd:ed:17:b6:57:ed:d5:
ba:1a:a3:ee:bb:ad:ed:29:cc:1c:d5:58:83:dc:9b:88:6c:ed:
af:91:fe:fa:fa:55:4d:62:9e:d2:29:23:7f:6c:5d:44:2d:6c:
a1:c3:d9:6e:36:6f:bf:43:71:db:c2:46:82:ef:3a:96:79:f0:
df:9e:98:4b:17:c3:54:51:fe:37:47:78:64:00:91:fe:34:83:
c7:3f:ad:96:27:2f:ed:46:d7:5b:bf:1b:26:13:e7:c1:97:23:
57:4a:61:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:15 2026 by rpki-client