Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: kNcIm5XRUhc9uYVD+qOjjrGm6aW4hSU2vUvD+AyxNk4=
Subject key identifier: BC:8D:21:BC:14:47:DC:39:3C:78:DB:AA:64:22:03:6B:4C:A4:2F:F8
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 019D25840B2F7929F427DDA78721DEDEEDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 15:01:43 +0000
Manifest this update: Wed 25 Mar 2026 15:01:43 +0000
Manifest next update: Thu 26 Mar 2026 15:01:43 +0000
Files and hashes: 1: dz15OcBGpk_cfrn8xhk6BurTsy8.roa (hash: xEr9Xe5b8oihGpA9oK+zCpOpKPeDuBptibdAWRYh0iU=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: VwL96WXHhrwTXVxJBNzzvJiWBja+Zro+WIsr56LJrRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:0b:2f:79:29:f4:27:dd:a7:87:21:de:de:ed:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Mar 25 15:01:43 2026 GMT
Not After : Mar 26 15:01:43 2026 GMT
Subject: CN=bc8d21bc1447dc393c78dbaa6422036b4ca42ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:7c:a6:7c:79:fa:08:d8:72:28:ba:54:eb:
52:e8:67:85:5f:71:b7:0d:4b:ae:1c:60:91:7b:4a:
5c:51:01:88:50:0e:a5:1e:23:40:13:e4:d6:11:d1:
a5:28:b6:c5:56:11:01:82:fb:62:0f:5a:1a:27:54:
c9:6f:84:dd:74:a8:a2:8a:00:7b:78:ca:6a:e9:60:
f1:bd:36:2f:84:66:bf:9c:4d:cd:56:7b:69:9e:20:
b8:00:c1:12:eb:98:64:f2:dd:25:a4:4b:73:c4:e4:
ea:2a:54:27:c5:c9:a2:76:ef:25:92:c0:d7:da:7f:
51:cb:ea:79:01:37:13:df:f9:5d:59:a1:f1:4f:30:
a9:15:da:6e:ac:2e:fc:ef:50:15:7f:2b:fe:28:2b:
e1:f2:5c:b8:b4:f1:c2:3a:73:a4:0d:f1:76:ff:fd:
9e:ac:d9:ea:5f:7a:ad:b3:e8:fe:03:cb:f2:02:7f:
99:36:99:66:67:05:bb:dc:9e:3b:9c:59:e0:70:4d:
9d:04:0e:3f:c5:e0:4c:71:24:8e:34:c9:8e:d4:ff:
bf:93:9b:d9:77:ba:54:fa:c8:07:4a:4f:7b:38:65:
31:20:e5:ea:ea:8c:f7:d2:86:48:2e:18:79:c8:3f:
69:58:a9:ed:6a:64:47:e1:e3:ba:63:73:16:38:a0:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8D:21:BC:14:47:DC:39:3C:78:DB:AA:64:22:03:6B:4C:A4:2F:F8
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d8:ef:1c:38:34:cf:e5:2a:25:6b:66:43:c8:48:d4:33:9b:
b7:68:75:a1:c8:20:ff:e9:84:ad:35:24:bc:e3:10:e4:b4:a4:
25:2e:1d:7e:b6:b5:64:0d:77:a5:fd:55:2c:f3:be:c9:b5:25:
75:2d:6c:23:b6:81:fe:72:64:ab:87:2c:f0:91:6b:52:f9:52:
90:af:07:08:8e:f7:24:53:46:9d:c3:09:b5:44:64:77:42:39:
bf:9f:03:25:68:e6:14:9e:4f:c7:4f:6c:ae:4d:bf:90:26:25:
6f:1e:4e:f0:eb:cf:63:97:be:35:98:22:3f:db:28:61:a7:c4:
6d:9e:19:11:e4:9c:db:58:3b:de:1b:1e:a1:69:0a:0c:a3:cd:
b2:ed:af:eb:2a:6b:9e:56:c8:f8:63:af:ca:8b:29:19:95:40:
da:41:8c:15:e6:26:ae:6c:32:e5:48:d4:99:f8:27:81:65:61:
4d:f8:08:16:2f:a2:33:c4:68:93:fe:36:be:7f:70:11:87:5c:
f5:d2:fc:2e:4a:73:3e:d3:c7:e9:dc:54:c0:59:9b:cb:62:3b:
e5:c4:95:0f:3f:d5:c2:d1:51:43:dd:03:ca:36:6c:18:9e:ca:
17:b0:ee:2c:84:f8:63:af:49:a3:06:42:56:ec:97:de:e5:90:
6a:a7:6a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:29 2026 by rpki-client