Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
File: oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft (raw, json)
Hash identifier: h90dOZTW+KqbYajqSNDYXdBDPuacZvhoLivqIa0i2V0=
Subject key identifier: 2E:5F:B4:7A:07:72:FB:65:20:A4:00:A4:F8:B1:BB:F6:FF:5E:8A:4E
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial: 019D2771E4B0192E19713926A3F4C2E533A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
Manifest number: 0C9B
Signing time: Thu 26 Mar 2026 00:01:08 +0000
Manifest this update: Thu 26 Mar 2026 00:01:08 +0000
Manifest next update: Fri 27 Mar 2026 00:01:08 +0000
Files and hashes: 1: PAykTqlzIVXa7fwF08Y8fVg3BH8.roa (hash: 2cvx8SwCrzZMQ5UhCJ5LCDN4lqE89NDEgchpM8X0P6c=)
2: SWToFRt_6tmEm6Z8-etXYlP5mtY.roa (hash: 8bPzOcUuusLs1dcrovR1xhzN3lKnr3gbUufI9urpO/s=)
3: oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl (hash: tFT2FCN91/cdfnzexf69G9IWINSeSqc6vcJKjH3vgTA=)
4: rimbVwyo-KT5fQiH-V76SF8eEgM.roa (hash: gWMp6ftXBLmd7FBwaSyLz8QgWLAsVeMGYPnZBH6twvM=)
5: ufROvs79R76pKz3Vd4MoqsPH7FE.roa (hash: ceBVv5+PSaDyQdnhFVj50M1kNdgLsXZLAIeGcsQzNgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e4:b0:19:2e:19:71:39:26:a3:f4:c2:e5:33:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Validity
Not Before: Mar 26 00:01:08 2026 GMT
Not After : Mar 27 00:01:08 2026 GMT
Subject: CN=2e5fb47a0772fb6520a400a4f8b1bbf6ff5e8a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:48:ec:b8:d4:9e:bf:05:57:c6:d2:0a:ed:
15:dc:02:30:be:20:3d:53:6f:45:13:14:dd:51:e5:
14:b8:b7:52:83:2c:e6:c9:c9:83:c3:bf:3d:a4:ac:
c2:20:a8:a4:cb:2d:80:e1:a7:d0:3d:37:da:49:18:
bd:2d:87:2b:e2:4a:3f:22:f8:07:29:19:ca:9e:27:
52:49:d4:17:73:8e:dc:0a:73:7c:dd:4a:e9:38:ad:
a1:d7:76:ec:e5:fe:e8:90:d9:a7:5b:e4:0c:d8:39:
5a:00:18:f9:32:06:f8:f4:49:0d:2a:31:86:4f:29:
d1:8f:36:ab:cb:02:fc:66:36:16:60:a7:20:aa:c2:
d9:bd:08:84:ea:b1:a0:87:72:5d:9c:4c:f6:90:a1:
c8:e6:96:4f:38:07:fc:52:14:c0:38:84:19:48:d1:
2d:53:9a:53:97:7e:f7:89:cd:90:28:39:79:fb:37:
05:d5:23:3a:53:1f:fc:4b:d3:d4:fd:c4:56:67:5b:
29:07:e6:a7:47:57:4d:e0:3e:47:3d:45:70:fd:a2:
a8:d5:ff:39:5e:6a:b5:64:d4:c5:e1:7e:3f:dd:14:
75:2b:a6:1c:0b:69:3d:12:3c:78:af:5f:d9:37:16:
db:af:52:4c:d8:24:db:74:16:a7:6f:c5:0c:86:92:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5F:B4:7A:07:72:FB:65:20:A4:00:A4:F8:B1:BB:F6:FF:5E:8A:4E
X509v3 Authority Key Identifier:
keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c7:16:35:14:73:ef:14:3e:32:56:0a:ad:01:93:22:d1:50:
0f:d2:09:d2:c7:e1:d2:73:67:ce:30:89:5c:fb:04:dd:4d:77:
4b:c9:04:66:85:6f:b4:0f:21:98:8a:7a:da:fe:da:7f:b1:60:
d2:c4:1f:d3:bd:ab:38:da:6d:b0:83:e1:91:6d:04:05:c6:20:
87:7a:e8:8d:ab:a1:3c:66:d7:40:65:67:17:1a:b4:cd:28:83:
ec:45:0a:22:2d:99:07:55:74:70:7c:af:16:55:25:dd:83:9a:
39:41:2d:11:50:84:61:5b:7e:60:95:93:dd:40:84:1e:d4:f0:
c9:72:32:94:34:6f:57:c9:2d:2d:7d:a7:85:9e:c6:83:42:df:
1a:0a:6d:38:22:cf:9d:10:3f:16:f4:8f:e9:da:9a:88:4c:5e:
b5:2f:cd:92:e8:ba:5c:6d:c7:a4:55:22:9b:9f:e5:7f:de:0e:
b5:b4:77:3f:f8:c6:12:96:94:91:fd:a9:7f:58:26:32:5a:99:
d0:bc:76:91:3e:7e:c0:9a:1a:0e:bc:23:5b:0c:28:72:c5:f9:
2c:f8:92:bb:83:80:bf:98:57:b3:a9:f6:85:bb:02:b9:34:47:
aa:80:63:a6:64:d3:89:40:5b:e8:68:9c:42:19:63:39:1c:6d:
71:b5:a2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:31 2026 by rpki-client