Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier: Ay1rIiy0aKswZ8i9JmSu/X6BxS4S47Iwc3NL9uJWC1c=
Subject key identifier: 0A:4A:17:CB:EF:2A:67:64:4D:20:94:35:5D:34:5F:E7:C1:94:FE:E8
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 019D2772A6E5F3EE2C356BEB570CD115EEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number: 175D
Signing time: Thu 26 Mar 2026 00:01:58 +0000
Manifest this update: Thu 26 Mar 2026 00:01:58 +0000
Manifest next update: Fri 27 Mar 2026 00:01:58 +0000
Files and hashes: 1: 0XVL1DRx75lawy_xFW5mJsQGHSU.roa (hash: BELOWMUZ3k/HbcEYsajsYqC3iV1ihvP6qfT8um9x+wM=)
2: NGPMuWiFeknKXkwM3nxouEoeXyk.roa (hash: /tIDGmKeCM03QTIplLTQuWQW/TuDx6K9okVMkl68do8=)
3: XwluJi7gd_3bLnOhsXiaCK78UGQ.roa (hash: Vg2POX67iN2CB7gqcNW3j2zG6gzZxQs5uZV1T7iRkdU=)
4: dxXzSfG6tk-xq80nFlAI2V6Jabk.roa (hash: 7x8bVi5e937j8BHSzgO3xnPhQaxhg84Gj8bsT5Yzlz8=)
5: e9OVXRSbzNQf13RbQTlh13igYgM.roa (hash: r2tePYmkh+jGXI1UJWjqWc2c/q/1ZOM+w32r5mXWyNE=)
6: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: 2Hup6CGWkxRfmlrSKprcxeoSjSOyPBkyj6cf+sPDoag=)
7: sgQIBkFFp9Zlr_0nrRPVgJN0CEQ.roa (hash: S9CdDbT1ld2vusmvuJyBIT32yXTScPbapiKiAqKYB1k=)
8: tBE2DXCg9mo6HQNSmwQwa4AaEKw.roa (hash: /Uu7Wfq1cKcIhIObzC72sU7ALGmExyntY4syvrkFG/U=)
9: vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa (hash: /W94YDKehwEOG4IGpuPHROQ+73Ocm3mWSD9qbK70W14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a6:e5:f3:ee:2c:35:6b:eb:57:0c:d1:15:ee:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Mar 26 00:01:58 2026 GMT
Not After : Mar 27 00:01:58 2026 GMT
Subject: CN=0a4a17cbef2a67644d2094355d345fe7c194fee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:61:dc:83:ca:3b:bb:45:5d:9d:cf:15:1f:
c7:80:a5:d5:22:d9:da:2f:d8:e8:d2:fb:c0:ec:5a:
f2:04:12:5b:15:7e:91:c2:bf:73:b2:25:6a:d3:d0:
a6:d7:5c:ff:3f:49:5e:ff:97:87:27:86:c0:4c:f8:
11:fe:8e:46:ad:87:ad:7b:4c:da:0e:9a:0a:41:b1:
8b:c9:1e:e1:92:82:b9:fa:b0:86:0b:d2:68:a6:a5:
89:22:fb:49:c1:76:f7:2a:3f:df:64:6c:c6:3c:2e:
ca:78:f3:8f:77:e1:5f:56:04:63:2a:fb:0a:a0:fd:
e3:c2:6f:f5:3d:a8:06:e8:1c:4c:ca:2a:03:f2:74:
fd:49:27:0e:c2:ed:5f:4f:65:38:27:57:63:e7:8a:
02:8d:06:97:f0:7d:67:fb:93:cb:cd:06:a6:68:51:
85:a8:2a:4d:76:42:ca:f5:9a:62:1e:08:06:69:c3:
44:38:53:85:89:10:ec:6a:f5:39:4a:b5:31:42:98:
ec:f2:41:52:62:b2:f2:54:81:f2:b9:ef:ed:e2:41:
54:a8:22:6f:e6:ca:6c:41:2a:ad:b0:86:5c:04:db:
41:e2:cf:7e:e8:cb:4f:46:90:90:3d:51:04:73:5d:
eb:b6:48:44:aa:13:6a:9f:c0:d4:c8:b6:2c:24:b8:
33:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4A:17:CB:EF:2A:67:64:4D:20:94:35:5D:34:5F:E7:C1:94:FE:E8
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f1:4a:a9:68:3e:f9:69:20:07:ab:d3:2a:59:fe:c1:41:e1:
3e:76:85:38:10:e2:05:b2:eb:dc:91:34:d7:9e:c7:b1:75:dd:
f2:2d:37:3f:ff:74:2a:37:39:a5:e9:c1:ff:e7:9c:00:30:18:
f8:88:b8:dc:9f:09:52:65:f9:e3:6e:c2:82:ae:29:78:a1:53:
1f:d6:38:3d:20:4e:7b:c2:30:17:a7:e6:e5:6f:6e:73:46:0f:
01:6e:f2:3f:03:7f:8a:17:35:4a:b1:46:cb:19:61:d0:9a:7c:
a1:f6:2d:d1:68:4b:44:4b:50:2c:53:85:8d:69:52:63:8d:34:
c9:da:a2:fe:2b:25:45:84:ec:9d:b8:f9:9c:09:8d:8a:c0:ea:
37:cc:39:71:36:2f:8f:c0:0c:9b:6a:15:65:b9:8c:f1:40:ba:
d9:a1:c8:98:16:37:2b:60:e0:94:fa:f0:aa:2c:e0:ea:6a:75:
a5:07:f3:ab:78:b3:0b:33:eb:4a:f1:1f:37:72:b0:80:4a:ab:
27:5b:4f:ae:4a:2a:30:17:1f:7a:49:dd:05:fc:99:93:15:ad:
71:6d:db:7a:5f:76:f2:45:80:a7:ad:fa:bb:a2:e6:93:06:ca:
a0:94:a9:e6:96:ac:e3:5f:81:a2:2c:13:8b:3c:bd:42:12:9f:
71:14:86:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:48:23 2026 by rpki-client