Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
File: oKzKnE_pv57fO8blyrxSg42TyxM.mft (raw, json)
Hash identifier: KmJuHdt601KQE0l+wBKOqJ4dV2xTOe/tMiWH3P4AT+Q=
Subject key identifier: 77:4F:28:A9:AC:B8:39:6F:DF:FC:10:27:85:25:65:A8:2D:98:7C:1B
Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
Certificate issuer: /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Certificate serial: 019D284E3A2ACB0423617C91C8415675B848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
Manifest number: 01CD
Signing time: Thu 26 Mar 2026 04:01:48 +0000
Manifest this update: Thu 26 Mar 2026 04:01:48 +0000
Manifest next update: Fri 27 Mar 2026 04:01:48 +0000
Files and hashes: 1: 55KKjKcQLAiKHyLfRXd8THHBm7E.roa (hash: Zdgu4/3X2vJw//wqqWZ/GedlI5kEMUP7EA+P2fQ6mqg=)
2: oKzKnE_pv57fO8blyrxSg42TyxM.crl (hash: ATszjWys7rPvIzreG567VlRA3F4ERhpJ4xs895fxONA=)
3: yxfGyEYWVoZFDcTt4Jv2iRkRwlI.roa (hash: JFc83iGMLXO8EMSMsHPQAAn1PO8Q9NwkH4mV2gRieGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:3a:2a:cb:04:23:61:7c:91:c8:41:56:75:b8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Validity
Not Before: Mar 26 04:01:48 2026 GMT
Not After : Mar 27 04:01:48 2026 GMT
Subject: CN=774f28a9acb8396fdffc1027852565a82d987c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:e5:43:ec:5a:77:76:39:2d:52:69:6f:a9:
c1:d8:28:ec:02:3f:08:aa:6e:8d:30:9e:ff:29:83:
e2:b3:64:37:ee:8d:00:a3:76:ea:49:95:12:8b:01:
30:f9:99:e4:a5:2e:e1:8f:eb:08:86:cc:be:d8:63:
f9:19:26:82:56:af:fd:20:63:f1:f0:ba:e6:d3:8a:
e8:ce:4b:fe:ca:ac:75:bf:22:8a:b4:53:2f:04:e1:
87:94:b0:95:3b:ab:30:cd:56:d5:1a:25:70:19:c2:
c6:b9:02:f2:aa:12:2a:47:84:b5:ea:63:61:ee:af:
c0:73:60:bc:45:48:51:85:2e:77:4f:f8:70:a9:d0:
1e:6c:83:67:b6:ca:a3:05:85:03:a5:d9:60:1c:6d:
63:06:e7:eb:0c:b9:ec:2d:58:6d:7a:89:51:7e:0c:
de:43:b2:cd:ee:dd:83:0e:e9:cc:50:49:1b:d3:97:
c0:92:b8:f3:b7:5a:bd:97:91:36:da:23:2a:b6:ce:
1e:4e:2e:8a:7a:d1:d4:61:d3:a3:fb:e7:e5:98:2f:
26:97:7f:a0:64:61:f7:c7:ab:49:56:5f:11:e2:5a:
26:c3:d7:e3:21:d9:d6:66:a6:d6:e6:1e:f1:ba:cb:
46:74:b0:18:b0:ec:9d:bd:07:c0:5a:78:f4:7e:b2:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4F:28:A9:AC:B8:39:6F:DF:FC:10:27:85:25:65:A8:2D:98:7C:1B
X509v3 Authority Key Identifier:
keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:96:b4:b8:7d:6b:45:cf:28:dc:6c:98:e6:07:59:6c:eb:22:
87:66:99:e1:0c:b8:19:af:1c:6e:1b:cd:1a:c6:90:51:3e:76:
eb:a9:3f:43:49:ee:86:f4:ad:06:0e:ce:a2:56:24:30:77:98:
d9:c7:a7:ee:b7:fb:e9:98:b1:c0:f8:46:ce:23:30:ce:c0:c9:
51:1e:da:bf:f6:16:cc:ad:ba:0d:9c:4b:f2:60:0c:88:e7:b7:
91:ac:de:84:8c:59:d9:e9:eb:1c:c0:ab:38:40:da:a2:77:fe:
e1:ee:4f:e2:a2:4d:64:e0:0c:54:f0:b4:d9:80:5f:4e:a9:6b:
fe:73:fc:2b:3e:8b:2a:47:0a:de:2e:9f:ff:0c:27:d4:5d:75:
c5:95:19:75:9e:55:3e:bb:8b:bf:44:01:f3:d1:ac:d8:6b:45:
3f:45:f8:16:fb:7e:34:90:b8:bd:83:2f:76:a5:be:95:be:5a:
11:ce:b3:c0:b9:fb:cc:61:2b:60:b9:d2:ae:d9:fa:80:80:69:
12:e5:20:70:e4:e3:82:f4:1d:42:45:9c:ae:e1:48:34:3e:ab:
1a:93:01:6f:7b:86:0a:bf:32:81:be:be:4a:9f:65:63:7d:db:
b3:00:a6:eb:fb:6b:ba:61:bc:a5:fb:6c:a3:05:ff:22:a1:2e:
af:6e:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:03 2026 by rpki-client