Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
File: oL_QbOhVti2baIzYxTXV9JTNOTI.mft (raw, json)
Hash identifier: S7WCfaCI6OXaS+nzQgBcawuxc2KRBlWHejpPNsuuIRY=
Subject key identifier: 35:70:5D:96:43:AF:1D:AA:3A:92:CC:CE:E8:C4:10:9B:A7:C1:35:EE
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 019D2C60AB3171B53CBC47874617015CE4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 23:00:25 +0000
Manifest this update: Thu 26 Mar 2026 23:00:25 +0000
Manifest next update: Fri 27 Mar 2026 23:00:25 +0000
Files and hashes: 1: LKfnJFP3stLPWkjsWhakvnaxplg.roa (hash: 3FNKamFL0cuW1/UK40gTZTnTQ2szlVWiH3Kqp5bB2Jc=)
2: _UAEb8lxXMfLr99B3gLyKpq6SRc.roa (hash: 5fNZHaDxkH+elaL5Caoe2vhcopBQ8ICg8obtjvq1FY0=)
3: oL_QbOhVti2baIzYxTXV9JTNOTI.crl (hash: IxzKqTO77/wWGNPZwtQrr6GjM4KgneVGNYL2CYaJPHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:ab:31:71:b5:3c:bc:47:87:46:17:01:5c:e4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Mar 26 23:00:25 2026 GMT
Not After : Mar 27 23:00:25 2026 GMT
Subject: CN=35705d9643af1daa3a92cccee8c4109ba7c135ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:d7:bd:8b:36:d2:0e:88:de:ea:f9:48:28:
4f:43:31:34:a7:1e:04:46:ca:9a:8e:f1:8d:3d:60:
3b:6d:ef:bc:76:79:ea:d5:fe:e3:ff:a0:a6:8f:2f:
15:c1:f6:1f:9a:22:00:50:59:08:27:d7:ff:7a:bd:
03:66:05:08:4f:b0:e5:5a:ef:73:fa:25:c7:92:69:
5c:cc:46:dd:4e:9d:7f:c7:e1:7b:96:50:ab:db:ce:
f6:47:7c:f7:98:5d:ee:aa:d5:52:03:52:43:38:b7:
32:4b:ec:75:18:1f:3a:c0:54:43:c8:b5:72:87:7e:
d8:5e:0e:8a:cf:0d:54:ae:68:e5:fe:36:75:ab:91:
a5:ac:3c:98:82:e5:d0:3a:fd:da:71:66:00:e3:25:
fb:86:2f:b1:02:b5:1d:49:b2:53:cb:67:8b:56:aa:
34:27:a9:a2:36:ab:4a:a4:2d:6a:85:2e:41:63:2f:
23:66:76:86:44:03:b8:99:5b:06:ec:f3:0e:3f:d1:
64:a1:c7:17:d7:fc:69:45:a4:23:e1:0e:4f:a6:e6:
2e:a2:c0:f9:d9:29:a9:03:3f:7f:2a:d3:8b:d1:20:
8d:92:65:87:8c:5f:e3:e6:5b:34:45:a5:93:b3:78:
cf:e0:2d:0e:b7:5e:bb:a8:12:03:ea:1b:9a:2e:8c:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:70:5D:96:43:AF:1D:AA:3A:92:CC:CE:E8:C4:10:9B:A7:C1:35:EE
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a2:39:31:91:f0:43:eb:b1:d3:f9:ec:31:73:32:37:e1:19:
2a:a3:da:1a:fe:3e:7f:e4:0f:ce:6a:9e:d0:34:ca:8b:d4:d2:
b0:24:00:83:ac:8b:d1:f4:8b:d8:8f:d6:86:74:ce:6e:e9:14:
d5:a4:22:8e:11:a2:5b:6c:14:ef:c6:7e:26:c0:42:dc:f9:d6:
bd:67:b2:2a:c9:5f:ca:65:f1:2f:d3:af:8d:e4:0f:48:52:1c:
43:b1:dc:8d:17:ec:02:3e:3f:7e:26:e5:b3:26:3e:60:26:1e:
ec:e2:3c:c1:28:63:3d:00:41:98:3e:ce:97:45:aa:b2:5f:c6:
99:f5:65:76:2b:53:0a:c7:d0:f3:20:e3:27:7a:1d:35:d0:bb:
1d:d1:45:df:10:49:e1:5f:13:6d:14:34:c6:60:f2:7b:7b:19:
37:6d:49:3f:36:42:ab:06:71:01:be:6d:f8:ba:3d:1b:61:69:
92:c3:db:f5:0d:da:54:cf:6e:d8:2d:18:77:28:e2:33:81:a6:
32:28:04:50:48:c8:b1:b3:a5:75:94:41:ca:78:91:1d:4c:d3:
72:05:72:4d:d8:32:ed:e8:50:1c:bf:9e:76:96:6a:46:1f:ed:
bb:a1:f4:76:0b:13:d7:09:23:c5:8e:6c:a8:6b:a4:e0:d4:9a:
dc:9d:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:46:02 2026 by rpki-client