Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.mft
File: oXYKUBSDGdYXKjgg2IipJMCdel8.mft (raw, json)
Hash identifier: Y4WlA0hI/6ibK25WOuQVDBoyJmW0kAfV4Y8lumwXWZY=
Subject key identifier: 11:F2:BC:DB:FA:1E:C7:CC:54:35:EC:0B:B9:29:4B:FA:3E:41:32:EB
Authority key identifier: A1:76:0A:50:14:83:19:D6:17:2A:38:20:D8:88:A9:24:C0:9D:7A:5F
Certificate issuer: /CN=a1760a50148319d6172a3820d888a924c09d7a5f
Certificate serial: 019D273AA4C55EC1AE502397B8C831BC9081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oXYKUBSDGdYXKjgg2IipJMCdel8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.mft
Manifest number: 013F
Signing time: Wed 25 Mar 2026 23:00:47 +0000
Manifest this update: Wed 25 Mar 2026 23:00:47 +0000
Manifest next update: Thu 26 Mar 2026 23:00:47 +0000
Files and hashes: 1: eW52yqvF1GGAE0TXCYsOxEow5Yw.roa (hash: jVx5InVbyJfQ/V5eXsNQ8OqW7VIt2V6pyzq79PNouiw=)
2: oXYKUBSDGdYXKjgg2IipJMCdel8.crl (hash: CXwydEizY/3kYmKIswKpLqeUcA2WyEpnAAvSF8nXu+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oXYKUBSDGdYXKjgg2IipJMCdel8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a4:c5:5e:c1:ae:50:23:97:b8:c8:31:bc:90:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1760a50148319d6172a3820d888a924c09d7a5f
Validity
Not Before: Mar 25 23:00:47 2026 GMT
Not After : Mar 26 23:00:47 2026 GMT
Subject: CN=11f2bcdbfa1ec7cc5435ec0bb9294bfa3e4132eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:71:a7:14:18:ce:0c:74:d7:23:7d:f7:d9:
1c:c9:43:e7:3e:45:66:58:45:07:cd:70:e2:ca:4c:
fb:ec:f7:8b:0e:81:a0:b2:49:dd:37:05:ba:9d:ad:
02:e3:3a:4b:18:8a:b7:13:91:e9:f3:91:79:7e:6c:
e9:44:78:9c:27:c7:4e:b2:6d:1b:df:a5:f5:fd:72:
78:46:e3:52:6e:00:b1:9a:a0:bb:de:e7:d3:b5:25:
5c:80:28:da:4b:ee:c0:15:15:03:e6:c7:6b:33:4d:
1f:bb:b6:ac:63:9f:76:71:b4:ae:b4:22:d2:b5:f9:
ef:e5:e9:60:9a:0e:b7:90:77:b2:b0:e8:62:10:3f:
8a:a3:89:bb:b1:a0:ad:eb:e2:27:ab:4a:e7:f2:c0:
d8:42:25:5a:bd:fb:fe:b3:81:a8:ac:92:64:55:3d:
ee:51:09:f4:3a:48:cf:7e:b4:5a:1b:fb:47:9b:ee:
e4:38:8f:27:a3:86:0a:1f:d1:3b:6e:54:a5:03:be:
46:ac:ea:9f:56:68:e1:6b:14:36:1d:94:55:c6:be:
1f:43:2c:ef:81:c9:4d:07:10:e5:4a:cb:b5:cc:38:
32:19:16:de:b2:bd:2e:27:7c:4c:d6:f8:bd:1a:0b:
1a:45:20:6d:30:08:49:c8:da:41:9c:1b:0b:34:4f:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F2:BC:DB:FA:1E:C7:CC:54:35:EC:0B:B9:29:4B:FA:3E:41:32:EB
X509v3 Authority Key Identifier:
keyid:A1:76:0A:50:14:83:19:D6:17:2A:38:20:D8:88:A9:24:C0:9D:7A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oXYKUBSDGdYXKjgg2IipJMCdel8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8d:b7:7c:72:c2:0c:a1:d6:7d:8d:9b:6a:33:00:1a:1b:de:
cd:d4:b7:08:1e:68:d1:b3:d4:f9:a9:78:45:bd:86:bf:d7:2e:
7a:1a:77:56:cc:a9:4d:e5:ab:a8:ff:20:13:85:42:2e:fb:32:
bd:9a:ea:8f:c8:6f:6c:5d:97:51:92:66:0e:62:ad:7a:53:b4:
51:06:52:d1:0a:54:76:c6:f5:93:4d:05:eb:c4:7a:5e:ce:b4:
9d:e5:a3:e9:81:7e:57:2b:52:e1:22:42:ec:f6:d4:36:9d:96:
7f:e1:13:54:e8:fe:be:5b:97:a0:b6:65:52:0c:e2:e1:db:bf:
86:fc:e1:20:29:45:fd:aa:19:44:f5:63:4b:23:c3:28:9b:07:
d3:bd:26:7c:e1:7c:02:94:17:77:5e:13:2a:26:da:a4:d0:0b:
8b:90:a5:d0:af:a2:9f:db:fc:f5:b2:c7:7a:8d:9e:9a:fc:79:
6c:ec:fe:c3:ab:54:b7:09:5a:27:f6:e7:2b:40:cf:97:07:1f:
d3:b6:c4:2f:e5:32:6f:41:b4:0a:0d:05:52:96:44:f7:ac:22:
ea:b8:f3:32:cf:3f:1a:1f:61:80:a2:f8:4f:4c:ba:2a:f7:c9:
d5:4e:be:3f:55:0d:bc:13:3a:2b:54:ad:c3:6b:98:65:3e:26:
49:f2:fc:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOqTFXsGuUCOXuMgxvJCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNzYwYTUwMTQ4MzE5ZDYxNzJhMzgyMGQ4ODhhOTI0YzA5
ZDdhNWYwHhcNMjYwMzI1MjMwMDQ3WhcNMjYwMzI2MjMwMDQ3WjAzMTEwLwYDVQQD
EygxMWYyYmNkYmZhMWVjN2NjNTQzNWVjMGJiOTI5NGJmYTNlNDEzMmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzlxpxQYzgx01yN999kcyUPnPkVm
WEUHzXDiykz77PeLDoGgskndNwW6na0C4zpLGIq3E5Hp85F5fmzpRHicJ8dOsm0b
36X1/XJ4RuNSbgCxmqC73ufTtSVcgCjaS+7AFRUD5sdrM00fu7asY592cbSutCLS
tfnv5elgmg63kHeysOhiED+Ko4m7saCt6+Inq0rn8sDYQiVavfv+s4GorJJkVT3u
UQn0OkjPfrRaG/tHm+7kOI8no4YKH9E7blSlA75GrOqfVmjhaxQ2HZRVxr4fQyzv
gclNBxDlSsu1zDgyGRbesr0uJ3xM1vi9GgsaRSBtMAhJyNpBnBsLNE/SQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHyvNv6HsfMVDXsC7kpS/o+QTLrMB8GA1UdIwQY
MBaAFKF2ClAUgxnWFyo4INiIqSTAnXpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1hZS1VCU0RHZFlYS2pnZzJJaXBKTUNkZWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZmJlMTctYjU4Yy00ZWEyLThiMzIt
OTFmNzE5YjViMDQ2LzEvb1hZS1VCU0RHZFlYS2pnZzJJaXBKTUNkZWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZmJlMTctYjU4Yy00ZWEyLThiMzItOTFmNzE5YjViMDQ2
LzEvb1hZS1VCU0RHZFlYS2pnZzJJaXBKTUNkZWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMY23fHLC
DKHWfY2bajMAGhvezdS3CB5o0bPU+al4Rb2Gv9cuehp3VsypTeWrqP8gE4VCLvsy
vZrqj8hvbF2XUZJmDmKtelO0UQZS0QpUdsb1k00F68R6Xs60neWj6YF+VytS4SJC
7PbUNp2Wf+ETVOj+vluXoLZlUgzi4du/hvzhIClF/aoZRPVjSyPDKJsH070mfOF8
ApQXd14TKibapNALi5Cl0K+in9v89bLHeo2emvx5bOz+w6tUtwlaJ/bnK0DPlwcf
07bEL+Uyb0G0Cg0FUpZE96wi6rjzMs8/Gh9hgKL4T0y6KvfJ1U6+P1UNvBM6K1St
w2uYZT4mSfL8AA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:54 2026 by rpki-client