Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: H6EMOX1UGIWIYHSd+40FD0ZOzYJCPHH1ActwbEBhF3Q=
Subject key identifier: 61:C5:94:4F:64:A0:06:C1:23:31:30:73:29:2A:C2:DC:51:DC:AF:24
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 019D2929152A6281290101961CF8F32DE009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:00:51 +0000
Manifest this update: Thu 26 Mar 2026 08:00:51 +0000
Manifest next update: Fri 27 Mar 2026 08:00:51 +0000
Files and hashes: 1: 1-DKuT0Y95446hJar0aywH5NXXto.roa (hash: 4mgppEdu742P8IDESBHDFQTYQI/R8xwD+SJ+IXCYWM8=)
2: 6M-8u5qByP1ggl6JEnWWtX94ybY.roa (hash: l+WD+P0RUvIhdtRWjkkKIzP6RPO3rfOXr22R2FZ6eyo=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: H5z3bTFrjmL7zadzuvGZ5+rsKEhDnJ8ScI9xJZg8gR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:15:2a:62:81:29:01:01:96:1c:f8:f3:2d:e0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Mar 26 08:00:51 2026 GMT
Not After : Mar 27 08:00:51 2026 GMT
Subject: CN=61c5944f64a006c123313073292ac2dc51dcaf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:1a:44:44:09:c1:ab:ef:4f:b9:4e:39:61:
85:f7:e4:89:5d:17:a4:d6:60:bc:4e:5a:29:54:94:
57:f9:bd:c2:97:fb:fc:b2:4e:a3:f4:45:42:d1:0f:
d5:e3:b2:67:9e:53:29:37:02:5a:9b:f9:b4:86:6b:
79:a4:a2:74:20:cb:99:e0:5e:df:c3:1a:33:f1:17:
e3:6a:0f:fa:9c:8b:4d:02:74:d8:d0:3d:18:3c:01:
72:48:c1:8e:e5:05:c6:ca:db:00:42:78:e9:34:38:
f2:af:99:14:e1:44:78:f9:5a:44:83:41:c3:a9:24:
ef:40:26:0b:63:75:65:d1:72:d1:78:f9:fb:a1:e2:
c4:bf:1b:dc:62:7b:dc:09:a5:41:d7:57:6c:1e:a7:
5f:d3:0c:ce:58:51:c7:6f:19:53:6b:79:89:d1:b9:
79:a8:e7:34:5c:51:19:b5:aa:76:83:04:fd:df:45:
c7:d5:b8:2e:05:16:e4:d7:34:cd:89:13:b4:ac:50:
f3:13:d9:d1:53:3b:15:ca:52:56:06:8f:a2:ce:f8:
ad:af:39:15:3f:7d:6a:91:93:66:65:f6:99:cc:e3:
4a:50:b4:53:76:93:e4:42:2c:2f:96:e4:54:49:6d:
e2:ea:01:49:ea:99:b7:78:36:4b:d9:cb:e3:bc:3a:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C5:94:4F:64:A0:06:C1:23:31:30:73:29:2A:C2:DC:51:DC:AF:24
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e2:46:45:30:d0:1b:9d:fe:07:22:b2:7f:07:9d:01:7a:c1:
9d:d3:e2:9b:5a:a0:3d:3d:67:82:7b:4f:27:3e:01:46:5b:11:
10:9a:f1:dc:40:b7:44:64:36:fa:d2:53:31:d5:9d:48:19:99:
c1:aa:f1:61:5c:08:ca:ad:ad:71:a9:78:33:eb:13:2c:1c:c0:
fa:ca:63:f6:cb:42:36:47:25:68:bd:c7:73:b0:f1:58:11:82:
70:65:f6:9f:2a:cd:fb:4a:39:df:01:12:28:0e:70:dc:41:d2:
c7:f8:c0:e9:b5:85:7a:5e:32:4c:26:79:5f:2f:6e:70:eb:9c:
17:92:7c:5d:92:e2:80:5f:50:8f:04:cd:70:29:f5:e5:9c:87:
0f:55:fb:82:31:bd:f6:e1:89:21:3e:88:d9:05:f3:03:dd:18:
6d:3b:5d:5c:a1:49:a2:77:6f:06:0e:1c:cf:57:f6:57:25:3f:
2b:b7:a0:d6:05:73:21:a6:2e:f3:ef:af:6d:df:ab:f6:ef:c3:
ed:d5:aa:76:74:9f:e6:70:9a:31:14:ba:ee:f6:3d:f7:00:22:
e6:31:54:f8:bf:16:33:ce:5d:aa:f2:12:5d:78:73:70:4e:e7:
c5:10:60:38:b5:96:76:48:31:9a:cb:a5:42:4d:91:ab:a4:88:
41:60:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:49:15 2026 by rpki-client