Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
File: oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json)
Hash identifier: VKJdRjxrePIVosefmoRxveG8k34Xb0SHOILeBExm6ZM=
Subject key identifier: B0:1E:B8:E5:75:ED:6A:73:A8:6B:A8:A9:18:F7:F7:61:CE:71:37:EC
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial: 019D25F17C9AF08CBCF79510A93DCB1A167A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
Manifest number: 0578
Signing time: Wed 25 Mar 2026 17:01:16 +0000
Manifest this update: Wed 25 Mar 2026 17:01:16 +0000
Manifest next update: Thu 26 Mar 2026 17:01:16 +0000
Files and hashes: 1: G-ttXU6LFqII2ZJb5Ai_tbTpvbE.roa (hash: yEHVYP+lRpz9AqpdBf+LceTLoHvG7cdnnGGEb99aDSo=)
2: o-XODVf1hZc2qeOEskGvrZ916vI.asa (hash: t+rCBxLchg6lnut9oPzJlegb7IG7iCHZF9SoXwZVIuE=)
3: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: aU4ZqnSM+nX8Zv3Jp6rL7remO6WkeZEu3Y9Wa9VsMhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:7c:9a:f0:8c:bc:f7:95:10:a9:3d:cb:1a:16:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
Validity
Not Before: Mar 25 17:01:16 2026 GMT
Not After : Mar 26 17:01:16 2026 GMT
Subject: CN=b01eb8e575ed6a73a86ba8a918f7f761ce7137ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:9e:5b:60:33:4a:c1:73:05:cb:67:d2:b3:
45:3e:bc:7c:7e:c8:76:4f:9f:6d:9f:98:ba:67:17:
33:9e:1a:06:db:8c:de:32:1e:92:c7:a9:fe:43:71:
9b:cb:e2:47:ed:ef:6b:44:63:94:b1:7d:e3:39:f3:
7a:b5:1e:8e:40:fd:56:25:ec:f6:56:8d:bf:c4:ff:
fc:ee:18:91:fe:6c:59:ac:3e:3f:08:8d:de:4f:c8:
b4:3c:a1:09:60:0c:f6:62:a4:37:b3:45:de:e2:66:
27:c1:ee:6d:85:75:27:ba:22:7f:a3:25:c9:e6:3a:
f2:95:ad:6d:f0:b6:37:70:9f:c8:9d:0d:96:8d:2d:
d4:6d:20:cb:79:b6:e7:93:dc:4b:01:ef:19:b3:56:
fd:78:9b:01:ed:37:62:c1:4e:67:16:0e:c9:9c:fb:
ef:ea:13:b3:a2:6a:57:46:1d:bf:1c:10:94:dd:bf:
14:75:0b:1f:3d:1b:61:85:6e:44:f9:49:8f:6b:8c:
68:29:42:e9:93:f1:3b:50:d9:3b:85:8c:10:9f:04:
d5:ae:de:9b:bf:52:41:e6:84:f2:77:c9:fd:95:07:
0d:0c:c8:d6:20:00:0f:cd:07:4e:17:91:7c:55:3c:
17:4f:bc:f7:46:14:4c:55:40:92:39:e0:25:ed:6a:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1E:B8:E5:75:ED:6A:73:A8:6B:A8:A9:18:F7:F7:61:CE:71:37:EC
X509v3 Authority Key Identifier:
keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8a:3a:c2:dd:1e:e4:6a:da:26:5f:35:25:17:ff:bf:16:d4:
65:61:ea:2d:cf:32:2d:71:61:a4:80:82:e2:6f:51:71:fa:17:
a8:35:b6:b8:f9:77:b6:72:05:66:91:5a:65:28:10:18:25:7f:
a7:42:48:66:69:89:30:2e:3b:d7:36:8f:4a:1d:31:39:d2:11:
c9:d1:9d:7e:35:c5:d9:68:ee:00:40:5a:23:45:57:02:e7:89:
3b:3e:10:89:33:8e:08:e7:6b:41:8b:2f:c3:b0:83:a7:e2:01:
a9:1d:0d:14:8d:a8:47:6d:7c:ff:d0:71:e5:39:61:dc:46:3d:
72:1e:56:a7:d7:2d:63:f6:f7:fa:5c:ae:8c:eb:ef:f8:38:bc:
b2:51:5f:69:59:d5:ac:c9:b0:b0:49:64:94:4c:df:8f:c8:bf:
51:11:23:40:1e:f4:67:cb:c3:a0:00:ac:ea:a9:96:09:8b:d4:
4a:cf:28:cc:5e:72:e2:ee:4c:24:71:df:7e:ad:bc:06:bb:6b:
f5:b9:c0:9e:16:a5:88:5f:3c:71:eb:fe:f1:a3:d5:c8:e3:65:
cc:ab:a9:59:fa:6b:3d:98:85:40:ff:58:fb:98:6d:a8:07:d1:
71:9d:08:ec:d6:99:7d:65:c0:7d:83:08:c8:34:e9:36:15:f6:
39:24:d6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:53 2026 by rpki-client