Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier: zUBHRSJzIrShI/t+13iBJ9P2XRPNJ9Weid7GwYIKxb0=
Subject key identifier: BC:32:90:A4:64:73:DE:EF:1F:23:EA:84:A6:40:B6:CB:E6:57:2F:5E
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 019D2816E90EB648802FC6622F21E6856609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number: 0D47
Signing time: Thu 26 Mar 2026 03:01:23 +0000
Manifest this update: Thu 26 Mar 2026 03:01:23 +0000
Manifest next update: Fri 27 Mar 2026 03:01:23 +0000
Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: SduNIOsSYrmixxwur76j1suesVUcSQaqDvkXnfZZ494=)
2: ReyUn6tKBOELp3PqtRdTiZN56xc.roa (hash: o1NTV7KD/4RS51aQo1dWC0QW0kteepHZMeaZiAB8YZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e9:0e:b6:48:80:2f:c6:62:2f:21:e6:85:66:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: Mar 26 03:01:23 2026 GMT
Not After : Mar 27 03:01:23 2026 GMT
Subject: CN=bc3290a46473deef1f23ea84a640b6cbe6572f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:08:c1:35:f1:ad:7b:82:f1:8f:13:94:42:
a9:85:a8:34:7a:51:5c:91:d0:21:c7:0f:e7:59:66:
12:a3:e4:9c:50:a8:ba:89:63:89:b1:b3:09:e7:ea:
ec:b0:25:c2:95:88:1f:b3:06:a0:dd:d0:40:ff:7d:
80:e7:96:a9:1b:a3:3c:69:b6:e6:23:ef:e0:a8:35:
f3:8b:f2:ac:c8:61:ce:4a:68:e6:75:52:b0:47:45:
b6:16:64:b4:13:d8:21:e0:e0:51:76:88:99:66:f9:
00:a9:a2:12:d5:96:80:de:ac:30:0b:f7:8d:dd:26:
dc:f2:b9:c4:fb:e8:52:31:22:f4:b2:b6:cd:4a:4f:
ed:0d:6b:6c:c0:6f:ff:d5:5d:ee:20:cc:0c:0e:e8:
64:ea:25:4e:65:3b:6b:47:87:1d:3b:9c:68:48:63:
59:ef:19:33:67:0c:9b:4f:77:07:26:e5:fd:cb:5d:
bc:74:d5:31:17:3f:56:53:97:a1:92:7e:98:51:bb:
60:c2:d0:41:0a:5c:75:db:9d:b5:83:76:a1:43:29:
8b:4a:89:57:b0:8d:54:f2:a8:fd:dc:e3:10:74:05:
4c:db:79:b0:03:95:a1:dc:f4:05:2f:ef:0a:02:23:
bc:83:ec:ec:b6:2b:80:74:18:2a:71:33:1f:f1:94:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:32:90:A4:64:73:DE:EF:1F:23:EA:84:A6:40:B6:CB:E6:57:2F:5E
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:9b:aa:04:92:5f:77:86:c0:de:0a:ca:0b:72:8d:0a:6c:2d:
28:54:f7:5e:57:84:c9:c2:f4:d4:cc:2e:52:5a:a0:df:3f:f0:
9c:0a:c6:88:16:c2:75:53:59:f3:7f:47:4c:d0:bc:2c:3d:8b:
5c:88:55:da:91:7e:14:3d:1d:8b:48:0b:03:0b:ce:8f:95:08:
fd:b4:ca:15:6d:31:b5:a4:03:02:51:fb:a6:03:cf:7e:0b:bb:
04:a2:0a:e4:80:09:33:ae:37:b0:2e:3a:ee:88:18:b0:5f:b6:
bc:ab:13:76:bd:f1:4c:25:e5:89:38:79:93:d0:ea:9c:01:7a:
16:85:cb:00:d1:19:bb:6f:75:b5:73:75:e5:60:7b:78:57:f1:
52:e6:0d:cc:3c:77:2a:1d:5b:d1:f1:52:bb:98:68:7d:b3:34:
07:8e:50:c3:aa:98:2d:92:5c:35:4f:46:66:6a:95:40:f3:87:
ca:00:31:45:94:e4:ca:1f:d9:70:ad:9a:60:ce:53:90:a3:3d:
c6:32:f7:82:04:f7:5a:82:aa:de:ec:32:36:c6:9e:cf:a6:41:
76:e7:7c:49:0a:08:33:8d:57:61:ae:26:8a:57:cd:0b:d2:b6:
69:2c:d0:62:8a:bc:7f:10:47:2f:ca:51:33:6d:91:be:01:fe:
85:c4:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:30 2026 by rpki-client