Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: p6LRpg6wOBTAxGs8ZaVK15Qu+NsbxV/CAiaIButQmmg=
Subject key identifier: 8B:DE:78:6C:6F:96:9D:EE:7C:80:21:E5:16:FD:53:41:4B:1A:07:1B
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 019D2816DD582A7C3331037542CF4712C38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:01:20 +0000
Manifest this update: Thu 26 Mar 2026 03:01:20 +0000
Manifest next update: Fri 27 Mar 2026 03:01:20 +0000
Files and hashes: 1: iwdbfX3VeEC-dJ7spuyrMGzAZEA.roa (hash: rGk72/1YdyFUc4NyU+VKerIA+XWmcskQTcATzTBlTBs=)
2: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: HdH/zHPEAOm+6aY042+iQL//HANU9AhDtax3vRoW8/A=)
3: sLLmkteo_FcFXMtUJhw6fFKVofY.roa (hash: a9XJ/mxkvDOm7bLMm8792DO+WjUzGL25z/Umu2rG3g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:dd:58:2a:7c:33:31:03:75:42:cf:47:12:c3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Mar 26 03:01:20 2026 GMT
Not After : Mar 27 03:01:20 2026 GMT
Subject: CN=8bde786c6f969dee7c8021e516fd53414b1a071b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0a:ca:f8:bc:79:e8:7c:64:c7:6e:89:59:a9:
af:79:72:ff:50:c3:7f:da:ea:1f:ab:12:78:54:21:
5a:2a:67:ff:5c:e2:17:af:8d:b0:f7:79:eb:73:90:
0e:67:fc:39:63:35:3e:9c:e3:27:e8:9d:f6:90:80:
fc:4e:2b:51:0a:fa:15:5c:9b:15:f4:aa:6f:d9:d3:
06:68:94:6a:f0:a3:62:30:55:a7:48:4a:af:7f:23:
5d:b7:3c:b7:37:d0:db:aa:29:d7:34:d7:90:87:15:
9a:b3:14:5b:5c:0f:ee:30:77:05:f3:e6:e2:38:9d:
22:ee:54:a3:07:62:bd:22:82:c9:a0:24:3e:25:37:
53:50:82:ae:ad:bc:56:d3:d0:c9:0a:a9:8a:03:47:
c6:12:cc:6a:0a:af:34:e1:d7:fc:7e:3b:46:49:d4:
5d:3d:a7:09:65:ed:34:92:af:3e:61:6f:4e:9a:ae:
57:3a:58:4a:cb:bd:0e:84:5f:8c:7d:5b:89:4b:81:
aa:cc:3d:21:d3:b1:a3:43:65:f8:c0:a2:54:0a:f9:
34:7b:b0:a2:ef:b7:e6:4c:77:b6:84:3e:8a:5f:e6:
17:35:20:d0:13:aa:47:d4:68:d6:77:95:41:9a:66:
a0:01:99:9a:ce:70:5c:df:be:80:5a:79:81:f5:64:
b6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DE:78:6C:6F:96:9D:EE:7C:80:21:E5:16:FD:53:41:4B:1A:07:1B
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:da:34:f2:7d:a0:dd:42:a3:dd:24:81:92:ae:23:de:9a:10:
77:b7:97:b1:27:fd:4a:fb:9b:c3:5d:ac:05:4b:e5:58:d8:03:
71:e1:07:d8:f4:10:66:7e:13:f1:7c:d5:06:24:56:25:60:95:
35:5a:ac:28:04:1f:38:bc:02:26:5d:17:d1:c9:68:58:21:62:
04:fd:c0:bf:36:ff:22:a7:8f:68:6f:03:cc:6a:81:16:d7:14:
3f:b2:82:f8:dc:40:76:2e:88:c7:51:41:60:05:bd:a6:de:f3:
be:5d:8a:01:38:1c:4e:33:6c:05:7a:65:a6:2e:a4:40:e4:f9:
d1:2f:6a:3c:cb:a9:2e:c8:5b:d7:a5:aa:49:42:f9:d7:e1:7e:
9d:aa:d5:1d:cb:00:b9:3d:9b:c5:c9:16:a9:b2:0f:c6:41:5b:
f9:cf:b1:9e:ca:a9:42:fe:79:b4:58:e7:73:0a:16:05:81:0c:
37:51:3d:a9:af:54:13:a5:54:6b:5d:fa:27:8f:78:f6:81:f4:
a1:ba:05:62:11:46:80:33:f0:4b:33:47:ff:b0:b1:3f:56:d0:
31:1f:aa:c4:15:d2:ed:7c:e0:e4:d2:69:e9:8a:c2:fe:0d:17:
29:ff:ab:9d:df:35:34:5d:7e:6d:95:31:49:3e:f7:68:b1:71:
53:ef:5a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:33 2026 by rpki-client