Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.mft
File: Oh7rvRjfqoBV4TVRugJBZV2qo1I.mft (raw, json)
Hash identifier: +S8DefENt0tAn0aMXkiHtdp3UzTXT5LuWqlq4CQHrng=
Subject key identifier: BC:D3:D3:42:42:8A:F2:85:93:B1:A1:C3:F1:15:20:1C:CA:8A:98:4D
Authority key identifier: 3A:1E:EB:BD:18:DF:AA:80:55:E1:35:51:BA:02:41:65:5D:AA:A3:52
Certificate issuer: /CN=3a1eebbd18dfaa8055e13551ba0241655daaa352
Certificate serial: 019D27722EE934D2B687EDD502AB5CCD5F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh7rvRjfqoBV4TVRugJBZV2qo1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.mft
Manifest number: 013C
Signing time: Thu 26 Mar 2026 00:01:27 +0000
Manifest this update: Thu 26 Mar 2026 00:01:27 +0000
Manifest next update: Fri 27 Mar 2026 00:01:27 +0000
Files and hashes: 1: 0pB9NxgzSPZHGLSwp4FwUaK9fJM.roa (hash: 6Y/maM1irsBi0a5dABbmBVzfEeCT3zKCr4y+VxDWzpI=)
2: Oh7rvRjfqoBV4TVRugJBZV2qo1I.crl (hash: BK9mN5g3XfDL4iOKK3DXYqat8FCfTTkdJ1Eze5s/dP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oh7rvRjfqoBV4TVRugJBZV2qo1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:2e:e9:34:d2:b6:87:ed:d5:02:ab:5c:cd:5f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1eebbd18dfaa8055e13551ba0241655daaa352
Validity
Not Before: Mar 26 00:01:27 2026 GMT
Not After : Mar 27 00:01:27 2026 GMT
Subject: CN=bcd3d342428af28593b1a1c3f115201cca8a984d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:51:1d:8f:ca:f2:22:3a:d8:03:2e:22:e2:
b1:01:e0:9e:3c:e7:20:bb:44:d1:3c:99:17:ca:39:
92:86:28:5f:18:23:4d:a5:ee:6a:ad:09:cd:85:11:
67:f6:d3:76:1a:e3:98:04:5e:0a:f2:2c:e7:49:72:
c3:c2:09:d2:56:e5:57:b0:a0:7e:02:63:5a:36:1a:
a0:c5:2b:77:ed:2c:83:77:3b:e8:62:c8:ca:44:3b:
e6:9b:45:5c:11:c1:47:51:ce:e8:75:cb:fb:b7:4a:
cb:77:f0:dc:28:69:e6:23:62:6f:9c:a5:ad:56:f7:
07:4a:e5:25:da:cd:9f:2f:e4:7c:a0:9f:ef:c8:53:
11:46:df:a1:79:6e:b6:46:7d:a6:52:a5:85:c4:54:
7b:01:49:f6:38:2d:f7:e5:35:95:0c:e2:de:06:85:
88:86:bc:72:df:39:8a:7a:5f:cd:8c:10:88:8d:92:
f5:7e:85:03:da:4a:bf:4b:f6:95:be:7b:57:0a:97:
e5:a5:07:83:d6:59:3e:c3:3a:90:38:ee:97:32:d2:
7b:82:e1:bb:93:b7:10:fe:46:51:8b:36:4a:12:8c:
83:f7:98:e1:79:25:8f:d9:eb:67:d1:db:e2:f4:e0:
ed:f9:ae:2e:c1:25:fe:f0:d1:5c:ac:a9:ac:2c:0a:
5f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:D3:42:42:8A:F2:85:93:B1:A1:C3:F1:15:20:1C:CA:8A:98:4D
X509v3 Authority Key Identifier:
keyid:3A:1E:EB:BD:18:DF:AA:80:55:E1:35:51:BA:02:41:65:5D:AA:A3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh7rvRjfqoBV4TVRugJBZV2qo1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:87:25:75:4c:a9:de:35:de:36:17:fa:4d:71:9a:b9:8b:6c:
f3:e4:95:f3:22:c2:95:35:cd:7d:32:b9:4a:dd:22:9b:ad:0c:
dc:2b:00:86:aa:c1:68:77:37:47:d8:3a:27:42:8a:73:6c:2c:
ab:c9:49:09:40:49:2f:7d:3b:e0:16:85:a3:51:59:08:cf:42:
e6:c7:ca:83:24:f6:aa:97:83:e6:53:e4:63:15:62:b1:9d:99:
f4:6c:dd:c1:59:ba:3d:f2:93:d2:51:c7:6d:c7:6a:7b:4c:77:
11:3f:28:7a:7e:d1:39:b8:1e:f1:e0:e8:d6:2c:6b:38:3c:84:
35:d8:29:bd:c2:99:3e:fc:24:1e:35:69:16:9c:14:20:9b:fd:
24:76:a3:20:af:f5:f5:1c:da:2f:c9:4c:4f:f7:dd:ba:4f:79:
a3:ef:d4:be:f9:db:23:db:db:25:15:34:b3:5f:7c:cb:de:d7:
0c:16:27:fc:36:25:0d:f6:8a:f0:7f:3e:ce:2d:32:00:5d:a2:
79:65:a5:c6:4d:a0:32:5b:eb:a1:bd:fd:f1:e7:1a:77:f7:f6:
dd:b0:be:b3:cc:1c:8a:8a:4d:c9:f6:d2:e5:de:a4:9d:97:7d:
1e:f1:35:dd:b8:75:11:a4:33:1d:79:44:3f:1b:a4:7a:de:2f:
86:ca:a4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:57 2026 by rpki-client