
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
File: of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json)
Hash identifier: ImHwn1g9YUzW1odBca30K8v4QzwsbBS7G/seqmEP9po=
Subject key identifier: 1C:87:56:07:6D:50:6B:E5:C6:E8:AA:FF:4D:D9:7E:86:23:E2:4E:2E
Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
Certificate issuer: /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Certificate serial: 019D284E1BEC7DDEEF891719797C7C4D2C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:40 +0000
Manifest this update: Thu 26 Mar 2026 04:01:40 +0000
Manifest next update: Fri 27 Mar 2026 04:01:40 +0000
Files and hashes: 1: 3X66D8rd_nYfhEI9M4q9SKmLMaM.roa (hash: hH7Y3DCETnMnnmJRKV+CQ8Ci7Hnqb3mZqszadLViFz4=)
2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: 7e1KhkXrvAKuled0G+gL+kGK66AxJRxbIIsGG1BBmVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:1b:ec:7d:de:ef:89:17:19:79:7c:7c:4d:2c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Validity
Not Before: Mar 26 04:01:40 2026 GMT
Not After : Mar 27 04:01:40 2026 GMT
Subject: CN=1c8756076d506be5c6e8aaff4dd97e8623e24e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:29:a6:3b:a3:c4:2c:65:ff:0b:8b:db:37:
b3:7f:51:18:5e:47:01:05:8c:e1:78:3c:9a:b4:1c:
78:f3:79:73:82:ba:fa:4c:e4:89:47:b2:2e:24:22:
00:51:ea:01:e1:94:7a:98:da:c3:18:c7:35:47:18:
58:7d:b0:e4:2b:86:ae:c6:75:c5:6b:ec:12:96:52:
8d:9e:ed:49:23:e4:91:12:0b:1e:f9:6c:72:c9:88:
a1:47:ba:8a:a6:d8:07:1c:cb:22:21:4a:d9:76:d6:
ce:8b:7e:ee:09:d2:ff:fb:ec:a0:e2:48:db:37:1b:
42:d0:22:38:19:ef:97:2b:ce:85:88:cf:28:0c:ff:
e8:78:6b:36:2f:01:39:12:27:79:2f:55:aa:c2:f1:
48:6d:22:b2:48:2c:5d:df:53:b8:d8:08:f6:fd:cf:
e4:49:9c:7d:59:29:a5:bf:72:53:1f:22:29:9e:38:
25:29:45:2e:d7:a5:f4:41:a7:55:b3:ae:9d:2b:fc:
71:20:8f:e8:2a:d6:4a:a5:87:85:f1:ce:37:6e:33:
2e:cc:cb:23:52:01:a6:f0:03:0c:57:79:f8:fd:c2:
fa:df:0a:b9:af:e9:e3:eb:7f:e9:71:71:67:c9:e7:
74:cc:ec:2f:62:ef:5e:9e:33:d0:56:65:38:b0:dd:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:87:56:07:6D:50:6B:E5:C6:E8:AA:FF:4D:D9:7E:86:23:E2:4E:2E
X509v3 Authority Key Identifier:
keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b4:df:1c:9d:d4:42:5e:ed:7e:d9:95:f7:f7:d8:c8:2c:fd:
b0:23:9a:19:52:7a:9f:dd:80:66:0f:6d:bf:f2:27:ed:0c:40:
4b:82:52:88:36:6f:7f:81:27:4b:c1:26:e9:58:80:e0:63:c1:
af:c4:1c:ac:38:0f:23:9c:a2:bd:21:2b:6f:47:86:30:8e:61:
66:53:30:28:1a:a8:3f:37:01:f1:41:d7:03:7d:8f:95:d3:c0:
3e:e9:d1:22:4a:19:70:2b:9d:0d:b6:83:b6:49:e6:b7:ef:e7:
0d:1d:05:55:28:74:14:a6:b1:70:92:35:fa:56:d4:20:01:0f:
5f:ed:8e:02:fa:7e:7e:8f:57:eb:5b:fa:09:24:ae:06:bc:9f:
f5:c4:dc:ff:69:e1:d5:15:07:c4:15:66:66:e5:80:d3:9e:29:
cb:98:59:34:52:ad:35:73:83:67:3f:d2:8b:7b:99:03:0e:20:
b8:f6:fa:2b:4d:03:b2:fb:3e:c3:e7:44:e7:3b:96:ea:b0:cc:
ac:3a:0d:ec:2d:a8:8e:26:bb:25:1c:3b:0f:84:f3:26:cb:f7:
7c:0b:b2:83:ae:65:5f:21:35:d7:47:b5:a4:a8:ed:c6:55:46:
fc:7b:4b:cb:14:ce:22:31:ed:e7:18:51:98:49:b2:8b:8f:b7:
d0:4d:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:28 2026 by rpki-client