Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: e/mCKmlBzCB9doz+yYlPuFx1AyRRvUSKo2rEfSGRs9s=
Subject key identifier: E2:A4:C7:C7:42:82:04:10:35:3B:7A:EE:1C:70:E2:A7:14:D6:38:3A
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 019D27E012AF2356EA63EF2DF27C6D0E0607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 03F6
Signing time: Thu 26 Mar 2026 02:01:29 +0000
Manifest this update: Thu 26 Mar 2026 02:01:29 +0000
Manifest next update: Fri 27 Mar 2026 02:01:29 +0000
Files and hashes: 1: JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa (hash: dzTZZeqoyGDa9h33Vh04zNMf/nJhUIIZZndFjeftfJE=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: Qmsc23ggVB/IXZOdQva0tEaAzGryLjY7hCww9HbFEc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:12:af:23:56:ea:63:ef:2d:f2:7c:6d:0e:06:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Mar 26 02:01:29 2026 GMT
Not After : Mar 27 02:01:29 2026 GMT
Subject: CN=e2a4c7c742820410353b7aee1c70e2a714d6383a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:9b:08:3b:bf:73:1c:68:01:a6:9c:b1:0d:
2a:88:68:2e:54:6f:9d:80:a4:b1:03:2c:70:f2:c3:
b3:0d:ff:64:c1:ed:0a:b2:7f:89:22:d0:a7:dc:ef:
d2:d2:8c:c6:2c:8f:a9:4b:20:8c:99:bb:db:82:cb:
7e:e4:79:53:2e:1c:a2:44:b6:2a:fc:ca:6a:b9:03:
24:af:8b:d5:66:0e:73:e6:ba:f1:8b:35:ef:74:ff:
74:39:15:d3:06:ad:3f:fe:8b:e5:20:fe:e0:bd:2a:
9f:d9:20:06:31:d0:95:f8:38:5e:25:13:ca:89:fb:
83:40:9f:80:cc:47:e2:d8:a8:0c:d9:8d:d1:74:a4:
13:73:3b:80:4b:db:93:70:5a:24:a4:4d:d4:62:72:
cd:ca:8d:b1:f0:0b:a1:78:46:c8:96:e9:91:55:0f:
0b:fd:c7:b5:28:7e:02:5a:2b:1d:45:2a:36:87:73:
92:6c:9a:b0:cb:e8:b1:97:b2:f0:38:63:c2:19:bd:
23:14:d8:84:59:f9:0a:17:45:16:dd:ae:86:d7:d7:
ba:b9:e7:f2:f7:ac:c1:5f:a1:36:3c:2b:d8:fb:8a:
ef:91:e2:f3:a9:e7:76:04:10:a0:aa:ff:19:98:fa:
fb:a9:9f:b0:8d:28:8f:89:57:4a:dc:83:24:4f:eb:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A4:C7:C7:42:82:04:10:35:3B:7A:EE:1C:70:E2:A7:14:D6:38:3A
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:23:2c:16:cf:4d:88:0f:cb:87:06:6f:a0:90:4f:ca:1d:dd:
d9:19:22:a1:4c:b2:57:ee:72:cd:9d:e0:7a:82:70:fd:b1:e2:
08:5b:70:c3:50:68:02:aa:5d:9e:20:74:a2:b6:a6:02:26:de:
9c:93:ca:86:71:6c:2b:f4:a8:ce:7c:0e:b4:fd:34:08:a4:2c:
64:a9:8a:b1:d7:7b:36:b3:b1:26:d4:32:19:98:9b:2d:88:08:
4b:a1:41:46:89:dd:71:f8:c3:1b:8c:94:8e:61:08:15:87:b0:
5f:ea:f0:f5:6a:37:f7:52:63:27:4a:f6:4a:45:d7:6b:a4:ec:
a3:34:18:9b:79:de:57:16:11:40:8c:c2:8a:8f:85:c3:ab:92:
eb:91:8f:e3:56:bd:07:fd:e1:58:26:50:f8:56:ee:ba:48:ea:
10:b2:ce:d5:da:5f:25:58:d4:99:9b:04:f1:cf:f1:04:87:58:
b2:da:4c:8d:cd:24:2d:8d:72:d3:2a:a7:30:f5:47:fd:7a:b6:
36:42:3c:2a:52:4b:30:45:81:26:1a:66:db:5d:b9:36:15:4a:
31:f3:55:ba:83:b3:c9:90:69:5d:23:b0:8f:de:cb:01:be:ee:
65:74:62:3b:7e:07:d4:77:2e:a1:1b:ca:20:91:7a:0e:fa:38:
6c:66:93:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:07 2026 by rpki-client