Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: OGNvXKHsPvDSKVf1EL6D8GSfaEa5d/Pgn8329mNM4cA=
Subject key identifier: 49:5E:0A:2D:E9:E2:70:46:4D:C4:56:B7:A9:35:0B:07:2B:FA:4F:17
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019D265F05C81907C93EC1F8FF4359E1F078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 18A1
Signing time: Wed 25 Mar 2026 19:00:54 +0000
Manifest this update: Wed 25 Mar 2026 19:00:54 +0000
Manifest next update: Thu 26 Mar 2026 19:00:54 +0000
Files and hashes: 1: MLjbVMiRwhEAuiBClDq7yIq_Cco.roa (hash: qjQLREPR53G7Hkk3HqQsejh4IBaZHidcZlNtBnhEo4U=)
2: UIKGm79Lht7FyBF2TD_d2G3aiRY.roa (hash: 7SB2+Ki5n311mjSVoVxfEgYxVlmvoTNXsRptZtFuT3g=)
3: fJDlavYr0-NMC00ttEvY72-2RT4.roa (hash: yNHRWjXk0fcz5wbO2o3VOi+H81xn7Ikg9L039EJvkuA=)
4: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: iD4iNWZwoDTFQVaYWl+sxIDQOREKsCWqvhD2YbwbqIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:05:c8:19:07:c9:3e:c1:f8:ff:43:59:e1:f0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Mar 25 19:00:54 2026 GMT
Not After : Mar 26 19:00:54 2026 GMT
Subject: CN=495e0a2de9e270464dc456b7a9350b072bfa4f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a5:51:9f:9f:7e:92:dc:eb:22:9b:83:1b:3a:
97:8b:62:5f:d9:ae:33:c7:33:44:22:c0:33:7a:5f:
08:6c:71:32:66:22:97:75:7c:0b:17:7e:5e:8c:16:
7c:01:94:2c:a0:f1:1e:23:b8:07:69:96:dd:f7:b4:
66:24:03:19:0f:cc:69:0a:cb:a6:0d:59:b2:37:98:
87:44:d1:d6:e0:c2:32:28:1a:4f:a6:17:37:3b:e2:
b9:b4:3d:a0:60:cf:d9:c2:c3:ea:37:3c:c2:fc:12:
aa:55:82:99:16:b2:96:87:3f:6a:70:3b:36:96:fb:
93:b1:6f:23:37:8b:e5:2c:6c:ac:65:cf:f4:e5:92:
78:7b:cf:0c:05:99:e3:0d:20:1d:83:bc:f3:6f:00:
78:23:6f:b1:62:54:0c:f3:ad:db:04:51:6c:09:d4:
23:a1:2f:bc:63:13:c0:0a:30:28:54:f7:cb:29:0b:
00:b7:02:49:ae:66:7a:b9:20:07:aa:a7:97:ce:e0:
6f:36:ce:12:89:bf:6d:ea:81:00:5c:b8:c7:4e:2b:
28:6f:1e:2a:64:89:b6:35:83:9f:5c:25:28:d3:0c:
48:de:90:83:0c:1b:a1:a4:59:0d:aa:62:a5:7c:93:
ee:ec:9f:36:7a:8f:1f:8f:4f:3a:f6:da:52:39:a3:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5E:0A:2D:E9:E2:70:46:4D:C4:56:B7:A9:35:0B:07:2B:FA:4F:17
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:70:25:97:dd:31:a9:d9:49:1b:34:97:3c:da:22:e2:4c:c7:
2f:88:66:1a:e4:f5:b2:49:2f:cd:51:37:d8:69:91:80:f5:5a:
0f:fb:35:19:53:aa:86:77:c5:e0:34:c3:4d:d6:e3:b8:76:ad:
48:e9:e3:e5:90:8c:1d:ae:87:96:4a:fe:8b:7a:5e:82:a5:87:
94:eb:78:93:ff:5e:d5:df:b2:0e:e1:0e:46:d0:56:8f:ad:a9:
8a:dc:fe:7f:68:54:bc:cf:ff:55:b9:0f:1c:40:0e:01:2c:cc:
6a:81:11:cc:cc:35:b0:7e:3d:d5:43:76:44:27:39:76:31:97:
0a:2f:d7:2f:26:da:fa:a2:f5:48:06:b2:68:47:63:5f:47:77:
e8:e7:23:d9:9c:ef:c4:03:af:91:04:02:e8:5a:1a:d1:23:68:
e6:51:41:20:2b:de:7c:41:41:34:b0:2e:a5:66:ea:74:6f:91:
74:ff:e4:11:f4:18:59:81:f6:3f:ca:61:1c:fa:b6:f4:8e:98:
ba:c2:6d:74:1b:2e:e9:d0:7b:bf:63:fc:7d:41:52:ed:93:fc:
5b:ff:5a:d6:42:27:f0:97:89:60:06:38:af:bf:7b:3a:49:16:
43:f5:eb:72:5b:56:74:6f:03:99:9a:f8:5f:f1:f7:95:71:61:
2f:d2:d1:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXwXIGQfJPsH4/0NZ4fB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz
NTQzNWQwHhcNMjYwMzI1MTkwMDU0WhcNMjYwMzI2MTkwMDU0WjAzMTEwLwYDVQQD
Eyg0OTVlMGEyZGU5ZTI3MDQ2NGRjNDU2YjdhOTM1MGIwNzJiZmE0ZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aVRn59+ktzrIpuDGzqXi2Jf2a4z
xzNEIsAzel8IbHEyZiKXdXwLF35ejBZ8AZQsoPEeI7gHaZbd97RmJAMZD8xpCsum
DVmyN5iHRNHW4MIyKBpPphc3O+K5tD2gYM/ZwsPqNzzC/BKqVYKZFrKWhz9qcDs2
lvuTsW8jN4vlLGysZc/05ZJ4e88MBZnjDSAdg7zzbwB4I2+xYlQM863bBFFsCdQj
oS+8YxPACjAoVPfLKQsAtwJJrmZ6uSAHqqeXzuBvNs4Sib9t6oEAXLjHTisobx4q
ZIm2NYOfXCUo0wxI3pCDDBuhpFkNqmKlfJPu7J82eo8fj0869tpSOaMNBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEleCi3p4nBGTcRWt6k1Cwcr+k8XMB8GA1UdIwQY
MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct
NTA3MDExNTcwZWU2LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2
LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXAll90x
qdlJGzSXPNoi4kzHL4hmGuT1skkvzVE32GmRgPVaD/s1GVOqhnfF4DTDTdbjuHat
SOnj5ZCMHa6Hlkr+i3pegqWHlOt4k/9e1d+yDuEORtBWj62pitz+f2hUvM//VbkP
HEAOASzMaoERzMw1sH491UN2RCc5djGXCi/XLyba+qL1SAayaEdjX0d36Ocj2Zzv
xAOvkQQC6Foa0SNo5lFBICvefEFBNLAupWbqdG+RdP/kEfQYWYH2P8phHPq29I6Y
usJtdBsu6dB7v2P8fUFS7ZP8W/9a1kIn8JeJYAY4r797OkkWQ/XrcltWdG8DmZr4
X/H3lXFhL9LRzQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:09 2026 by rpki-client