Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
File: oFZPeYAZBRh04Czu4_0hy86rSuk.mft (raw, json)
Hash identifier: 49J4PvvwMDEitfLN49uOZlpUq+0t3kne7AAC5mQxvV4=
Subject key identifier: 02:6B:40:FC:F4:06:12:37:EF:A9:22:9C:03:A7:4F:E4:E9:9A:2A:D1
Authority key identifier: A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9
Certificate issuer: /CN=a0564f798019051874e02ceee3fd21cbceab4ae9
Certificate serial: 019D27723FFB330C731D441A0612FAEE976A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
Manifest number: 0D8C
Signing time: Thu 26 Mar 2026 00:01:31 +0000
Manifest this update: Thu 26 Mar 2026 00:01:31 +0000
Manifest next update: Fri 27 Mar 2026 00:01:31 +0000
Files and hashes: 1: oFZPeYAZBRh04Czu4_0hy86rSuk.crl (hash: 9Oy2lyo92+Ba6EW6xkQq+mdB74clokv5mNebecBf0DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:3f:fb:33:0c:73:1d:44:1a:06:12:fa:ee:97:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0564f798019051874e02ceee3fd21cbceab4ae9
Validity
Not Before: Mar 26 00:01:31 2026 GMT
Not After : Mar 27 00:01:31 2026 GMT
Subject: CN=026b40fcf4061237efa9229c03a74fe4e99a2ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:3a:78:18:bc:a3:55:4c:20:cc:25:eb:20:
85:6c:fb:2b:03:cc:c0:6f:a1:d5:63:7c:7c:5e:a2:
af:c0:10:7e:a0:fb:d7:88:ed:67:19:52:0a:bf:95:
46:02:ea:41:eb:60:15:1b:ed:87:b2:08:8c:aa:f3:
26:67:a2:9e:e7:3e:db:85:c4:51:e0:cc:c0:4a:b8:
a0:78:f4:65:fb:ef:25:22:c0:bc:c2:fb:0a:7a:62:
d9:74:e7:88:5d:1c:74:d0:7c:8f:d1:14:2c:5f:58:
88:77:7e:dd:2d:07:6d:aa:fd:62:04:0a:d8:cc:62:
b8:b6:e8:ca:32:b5:0d:94:d1:a1:c5:ba:23:6b:f3:
de:1c:2e:05:27:95:ec:15:e1:e7:26:d3:dd:b5:0d:
6e:89:ee:09:1c:6d:ed:52:91:da:4d:2e:df:cc:0a:
d1:df:25:49:0d:0f:f4:72:5b:4d:1f:7d:fb:f8:72:
ba:0f:68:c1:e5:54:42:62:e0:88:f5:6a:37:c2:be:
e5:22:50:e5:b8:e4:42:f0:93:14:31:5f:9e:f5:03:
a2:ac:21:9a:e1:fb:43:90:51:1b:60:b5:f7:ba:77:
7b:4e:ed:ca:38:ea:09:dd:79:c4:bb:13:ca:cc:da:
74:b5:f2:a4:02:92:62:cc:5c:da:27:79:7e:48:88:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6B:40:FC:F4:06:12:37:EF:A9:22:9C:03:A7:4F:E4:E9:9A:2A:D1
X509v3 Authority Key Identifier:
keyid:A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9f:d2:87:5a:1b:4d:be:98:c4:e0:65:f0:3c:c0:3d:d9:ce:
53:8f:05:61:cb:56:58:33:a5:3b:bd:b1:d4:80:01:c6:f2:c9:
b4:92:48:4e:e3:5a:26:7e:12:7f:48:cb:2f:1d:82:32:0c:37:
5c:31:3b:7e:ad:b5:81:9e:ac:59:4e:fa:e2:24:1d:2c:c6:5a:
b6:e7:4c:4e:be:73:5d:68:06:a8:74:4a:be:8c:69:be:e4:92:
50:f7:80:6d:c4:d9:ca:21:b9:9a:c1:4f:e2:5f:f6:ff:5b:fa:
03:de:0b:4e:d1:c2:94:09:b3:8e:dd:3e:6f:24:b3:7c:c8:6b:
37:c9:7e:81:76:e4:ed:eb:c4:3e:ee:7c:b0:57:55:b9:3a:a2:
e0:66:b4:3c:a9:8d:df:85:05:ba:ab:7d:8d:96:63:e6:ec:7d:
04:46:57:fd:a6:9b:e2:96:06:2d:c2:a3:93:db:f8:56:1a:3e:
e2:b0:29:35:8e:7a:59:ec:1e:33:af:bc:96:45:9f:74:18:2e:
7d:93:b8:5a:4c:44:ae:1d:4f:eb:6b:6f:ed:39:01:60:8c:ee:
0e:6a:c7:fb:96:73:10:2d:fc:1b:ca:db:69:11:4e:ec:9c:3d:
8c:41:4b:67:46:a9:22:b6:f6:6d:ec:9e:dc:07:e4:39:20:3f:
2f:f3:db:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:28 2026 by rpki-client