Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
File: oKzKnE_pv57fO8blyrxSg42TyxM.mft (raw, json)
Hash identifier: TJp4DxN1xkWKBFlwm2gzXqz+pHd2ItQ7dnH1Khv2hsY=
Subject key identifier: F3:10:1F:28:A3:B2:1C:DF:6E:99:16:CC:68:7C:8E:AC:BC:5C:46:8C
Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
Certificate issuer: /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Certificate serial: 019D265FB745D3D909B343C4409FD54BEB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
Manifest number: 01CC
Signing time: Wed 25 Mar 2026 19:01:40 +0000
Manifest this update: Wed 25 Mar 2026 19:01:40 +0000
Manifest next update: Thu 26 Mar 2026 19:01:40 +0000
Files and hashes: 1: 55KKjKcQLAiKHyLfRXd8THHBm7E.roa (hash: Zdgu4/3X2vJw//wqqWZ/GedlI5kEMUP7EA+P2fQ6mqg=)
2: oKzKnE_pv57fO8blyrxSg42TyxM.crl (hash: aFD7pUBQCTxw7N9Uwa+4ImbB+eseAvewcIpm4y2hK7g=)
3: yxfGyEYWVoZFDcTt4Jv2iRkRwlI.roa (hash: JFc83iGMLXO8EMSMsHPQAAn1PO8Q9NwkH4mV2gRieGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b7:45:d3:d9:09:b3:43:c4:40:9f:d5:4b:eb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Validity
Not Before: Mar 25 19:01:40 2026 GMT
Not After : Mar 26 19:01:40 2026 GMT
Subject: CN=f3101f28a3b21cdf6e9916cc687c8eacbc5c468c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:25:8e:30:04:aa:b8:76:de:97:d2:c6:00:
b5:53:dd:2a:76:92:96:1b:fd:fd:78:1d:ea:35:a6:
22:56:eb:84:1d:bc:39:03:ad:97:37:07:ac:35:68:
b0:d4:a6:2f:83:ba:9d:cd:87:e5:99:33:56:59:ad:
cc:bd:a7:27:7d:34:f1:86:b9:99:0a:4c:c2:c3:5b:
2b:d5:a9:53:be:39:7c:91:fd:19:35:18:94:76:68:
a3:28:3f:bc:1a:80:ba:db:c2:89:2d:b6:07:93:6f:
8d:6f:36:42:cd:d9:47:5d:65:8f:26:07:f6:a2:f1:
9a:2a:87:5f:36:bd:22:f5:0b:64:51:0d:11:12:8c:
23:cf:21:51:93:94:2d:69:9e:62:24:ea:cd:38:93:
14:d8:a0:a7:7b:04:00:fe:a5:fc:19:52:40:ab:2a:
d7:7e:d6:c8:2c:68:14:38:1e:6b:11:7d:c8:5f:2b:
45:78:91:93:2c:81:30:69:6d:49:98:de:72:bc:23:
88:ba:7a:a5:62:58:30:19:ce:b6:bb:fa:a3:1f:aa:
7f:20:48:b5:01:f6:91:89:71:2f:e0:f8:19:ea:c1:
cc:dd:6a:04:44:70:9a:98:3a:14:15:93:e4:fe:5f:
13:9b:6f:46:99:64:cd:fe:bc:ec:e4:88:6c:51:86:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:10:1F:28:A3:B2:1C:DF:6E:99:16:CC:68:7C:8E:AC:BC:5C:46:8C
X509v3 Authority Key Identifier:
keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:71:2a:ba:f7:2f:f3:5b:44:b0:00:8b:c3:78:56:ae:74:94:
9d:bc:39:fd:b1:6e:46:fe:49:9c:65:70:23:fd:db:b1:66:f1:
4c:78:e7:0c:2c:b5:de:c0:35:f9:a0:63:50:76:18:2a:31:70:
ca:25:36:ef:cc:46:a8:58:ae:f6:91:d7:93:76:26:ed:57:7b:
43:b5:c9:4b:fc:33:b1:16:aa:8e:f7:5a:c5:e3:ae:cc:23:59:
8b:bf:41:de:bf:d4:1b:16:ab:e9:80:5b:f1:f7:27:5c:0d:e4:
bc:29:03:e6:0f:ec:14:98:cd:a6:ae:0c:b6:4f:fc:66:ea:5d:
ec:8f:c6:96:74:0f:c0:c1:cf:18:9f:7a:2c:fb:31:18:26:c4:
29:49:72:eb:7c:28:e0:bc:09:28:f5:ba:98:c6:97:60:2d:80:
8a:01:5d:2b:64:29:18:79:85:f1:52:30:e8:c8:f7:4f:8c:16:
38:c8:6d:06:d2:06:51:c4:5c:5f:36:90:76:40:51:cc:f6:c2:
f7:02:d7:9c:69:c3:82:d3:61:49:64:ac:a3:c3:9f:41:8d:39:
a2:3f:ef:1d:cd:3f:67:c4:58:da:cb:6d:58:b7:75:fc:c3:15:
f9:45:d3:1d:95:9c:9a:c1:25:dd:91:67:8f:4c:07:07:53:07:
b7:5d:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:46 2026 by rpki-client