Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier: fAcM43v/ZEjn0fQMdvjhO+FVG9SMXh1/9Xnmaya2JHk=
Subject key identifier: 3C:EA:E6:A2:B7:1F:52:83:9B:CC:9F:25:79:4E:C4:B2:62:52:88:4A
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 019D265F639407FD6AC39BD2D96A6FD3263C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number: 07BC
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: Z-WbSmra_G1kvyx-Bej3vkhtQis.roa (hash: gk+4vFFmmxKEtInMkLHpcbUkvzWIfqwHSMm2pJIJXSU=)
2: lCTE0e6511lXYUV4jzoQANe1D0c.roa (hash: duBHYLft9CmJTD9gy5FmFbBDQw9Rjhhhi+M/Mn6KU3Y=)
3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: 17xig5RxomuElfZbOcZIHl2QRBj/kGPWD4enSEMUVEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:63:94:07:fd:6a:c3:9b:d2:d9:6a:6f:d3:26:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=3ceae6a2b71f52839bcc9f25794ec4b26252884a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:5b:6f:1b:5d:fc:5f:85:b5:86:26:be:e9:
01:a7:d7:b3:b2:24:3d:b9:e9:18:0f:e8:2f:4f:0f:
2c:cc:a3:d4:8b:44:95:6b:ad:8d:a1:12:2c:ce:8e:
71:ba:77:5f:ed:fc:75:7b:44:60:d6:1b:b7:c4:a0:
d0:1d:97:53:cd:95:d2:69:15:f2:14:26:fa:96:f9:
cf:9c:ce:73:91:b0:a2:2c:fa:85:a9:1f:79:9c:76:
9c:2c:30:90:31:b9:0f:2f:e6:2c:83:ba:9b:cb:2e:
3a:ec:f4:9f:a5:3b:a8:df:5c:cf:df:46:8f:ed:e9:
c3:0d:fc:fe:ef:e6:ed:7c:32:44:73:57:08:da:f3:
db:43:c7:41:5d:71:33:e0:2f:af:33:c6:78:7c:11:
a9:48:af:e1:cd:ba:aa:42:85:3c:4f:f1:12:4e:5b:
db:63:80:5e:c7:e6:00:95:b2:cc:fb:a2:b8:0b:80:
3d:5d:46:54:ac:ed:54:70:f7:18:3f:f7:6e:a1:9b:
01:fa:11:d9:31:86:7c:6f:eb:03:3e:61:dc:c8:43:
4e:ea:57:85:56:cf:57:02:0c:e7:d3:97:4e:6f:8f:
97:9c:91:c2:19:a5:0c:46:22:dd:f7:9f:bc:d0:8e:
f8:72:64:79:33:5c:34:df:29:db:4f:59:3d:1b:f9:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EA:E6:A2:B7:1F:52:83:9B:CC:9F:25:79:4E:C4:B2:62:52:88:4A
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:91:41:bd:c9:ae:bd:a5:37:b8:b8:10:d2:12:74:24:96:69:
8e:eb:59:7c:c8:a4:54:cd:b0:be:1e:65:ce:93:ec:06:5b:9a:
a9:0f:c1:35:6c:a9:47:c9:f2:6c:b2:9a:81:a4:e0:be:a3:de:
e1:54:9a:ce:80:05:75:a5:1a:52:06:59:0a:20:f7:13:f3:d8:
52:02:2a:22:aa:a5:f1:4f:a9:c0:fb:51:44:2d:dd:24:7e:50:
92:b6:4b:36:58:b1:1a:06:fe:c6:40:f7:dc:20:1c:6e:ec:01:
20:a2:b9:51:64:7f:81:35:7a:4a:ca:75:e5:77:ee:59:08:e9:
35:6c:3d:40:e9:1f:4f:7d:d4:1a:01:f3:24:3d:b4:0b:ec:3a:
f3:81:bb:21:26:c0:fa:7a:c6:6f:21:89:05:35:68:ed:d7:4b:
98:ba:7f:11:48:27:71:22:c8:80:e9:08:93:ad:45:54:57:76:
71:37:8a:6c:1f:d3:76:6e:41:51:f6:ab:4f:c7:02:e0:26:36:
ac:5d:b9:c6:70:5a:84:1d:cd:93:23:2a:81:c5:f3:1b:e5:96:
57:8f:5a:f4:83:07:56:94:78:76:a0:3e:fc:c1:10:9f:e5:ad:
6c:eb:ef:2b:ba:f7:be:6f:e8:b7:63:51:68:d5:75:02:17:8b:
07:fd:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:56 2026 by rpki-client