Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json)
Hash identifier: gKfvJjy2Uq4pPBSgwwsKV2xM0+9Jm7BjdJ5GtcrSVz0=
Subject key identifier: 1A:9A:B7:2F:17:C3:B7:03:2D:B5:0C:4F:D9:6B:1E:B7:A6:C8:C4:A6
Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Certificate serial: 019E1FB56370F172051EF847DF3BA07A833A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
Manifest number: 012C
Signing time: Wed 13 May 2026 05:00:41 +0000
Manifest this update: Wed 13 May 2026 05:00:41 +0000
Manifest next update: Thu 14 May 2026 05:00:41 +0000
Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: m+T2fNeEdqEcNZISY4gWP8hn22nUZZm2OPNVR00ZCR0=)
2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:63:70:f1:72:05:1e:f8:47:df:3b:a0:7a:83:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Validity
Not Before: May 13 05:00:41 2026 GMT
Not After : May 14 05:00:41 2026 GMT
Subject: CN=1a9ab72f17c3b7032db50c4fd96b1eb7a6c8c4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:13:a7:fd:02:7f:f5:73:4e:84:6a:d7:49:
f7:7d:61:05:46:67:cb:dc:bf:ca:7e:a8:91:eb:c6:
88:74:a9:d4:58:8b:0e:05:b0:b1:37:f9:01:12:c0:
b5:fd:31:8b:00:1b:55:7a:fa:8f:dd:ab:23:33:1d:
9f:fa:5f:6d:53:07:f4:b5:90:c9:ed:e8:c9:47:bb:
4b:40:9b:8e:30:89:a2:ff:31:7c:b2:4f:1e:e6:4c:
f7:f8:20:4a:bf:97:d2:d1:c3:bb:9a:b6:d6:6a:9f:
58:7a:8c:a4:7a:1e:45:6b:e3:bf:d1:93:7b:e7:b7:
27:e2:6e:3d:e0:ff:ed:1f:d5:f1:ab:9c:1b:5b:89:
8d:0c:5f:5d:81:09:55:f7:d5:51:4e:6d:f8:80:03:
a3:6d:07:ec:16:6a:e0:28:7c:e3:a2:5f:3a:c1:cd:
79:9a:21:e7:e6:4d:27:12:43:f4:60:17:e4:27:0f:
90:de:dd:9e:c4:5c:75:59:a6:7e:91:33:05:6e:7d:
fc:99:fd:cd:3e:c3:91:5b:eb:75:a6:a8:10:6c:12:
9d:4b:2c:dd:bc:96:ef:11:9a:a2:68:c5:2b:70:1f:
7d:25:67:ad:89:44:1a:76:05:2c:46:bd:af:2c:9f:
33:66:52:de:1c:64:7e:ce:85:02:dd:15:01:c6:ef:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9A:B7:2F:17:C3:B7:03:2D:B5:0C:4F:D9:6B:1E:B7:A6:C8:C4:A6
X509v3 Authority Key Identifier:
keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:95:9f:79:8e:f4:4d:b5:71:79:87:45:a7:cb:18:49:c8:87:
c6:c0:60:bb:17:60:7f:9b:23:0d:c3:27:e1:07:9f:3b:d3:fd:
e9:22:1f:37:08:e2:14:0e:b4:a8:e4:de:d7:5b:00:11:74:02:
37:2d:07:c3:be:ee:73:4d:01:91:c4:d6:ba:12:16:4b:08:b3:
9f:56:f8:4d:ff:ba:69:1c:c3:2d:81:e8:d2:ce:b4:22:df:b8:
2d:15:aa:40:cc:78:9e:e5:b8:da:1d:b0:20:1c:58:e2:71:d6:
fc:f6:5d:50:db:39:f0:49:e0:ef:f9:c7:58:25:08:7f:f9:5f:
c3:e4:65:37:b9:bb:ac:72:b1:47:9d:e4:28:de:2f:f5:63:73:
75:b5:0b:07:03:4f:e6:45:b1:b6:d0:79:a7:0b:9e:af:b3:f9:
9f:eb:31:60:85:24:af:f3:13:7f:7e:e1:51:36:83:f8:f7:29:
9d:4d:3e:8b:b3:82:7f:73:3a:b0:85:2e:5d:5e:56:64:07:78:
37:6d:a9:96:43:b5:61:59:09:90:a4:fe:fe:c8:27:f3:70:ce:
7b:b6:72:3a:82:c6:f2:d8:2b:fe:f8:17:34:f5:4c:82:fb:5e:
b7:76:dd:8a:1d:f0:5c:ba:12:e7:fb:82:e8:40:5f:9a:cf:74:
91:e0:3d:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftWNw8XIFHvhH3zugeoM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhOGUwNzk0MGRjZDYzNDRlMWE4MTYyMGJkNzhhMjY4YmU5
YzM3OTgwHhcNMjYwNTEzMDUwMDQxWhcNMjYwNTE0MDUwMDQxWjAzMTEwLwYDVQQD
EygxYTlhYjcyZjE3YzNiNzAzMmRiNTBjNGZkOTZiMWViN2E2YzhjNGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFcTp/0Cf/VzToRq10n3fWEFRmfL
3L/KfqiR68aIdKnUWIsOBbCxN/kBEsC1/TGLABtVevqP3asjMx2f+l9tUwf0tZDJ
7ejJR7tLQJuOMImi/zF8sk8e5kz3+CBKv5fS0cO7mrbWap9Yeoykeh5Fa+O/0ZN7
57cn4m494P/tH9Xxq5wbW4mNDF9dgQlV99VRTm34gAOjbQfsFmrgKHzjol86wc15
miHn5k0nEkP0YBfkJw+Q3t2exFx1WaZ+kTMFbn38mf3NPsORW+t1pqgQbBKdSyzd
vJbvEZqiaMUrcB99JWetiUQadgUsRr2vLJ8zZlLeHGR+zoUC3RUBxu//0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqaty8Xw7cDLbUMT9lrHremyMSmMB8GA1UdIwQY
MBaAFDqOB5QNzWNE4agWIL14omi+nDeYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jOGUyMGEtNTg5Zi00NGZjLTk2NGEt
NWE2OTQ2MDc0MzVlLzEvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jOGUyMGEtNTg5Zi00NGZjLTk2NGEtNWE2OTQ2MDc0MzVl
LzEvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJWfeY70
TbVxeYdFp8sYSciHxsBguxdgf5sjDcMn4QefO9P96SIfNwjiFA60qOTe11sAEXQC
Ny0Hw77uc00BkcTWuhIWSwizn1b4Tf+6aRzDLYHo0s60It+4LRWqQMx4nuW42h2w
IBxY4nHW/PZdUNs58Eng7/nHWCUIf/lfw+RlN7m7rHKxR53kKN4v9WNzdbULBwNP
5kWxttB5pwuer7P5n+sxYIUkr/MTf37hUTaD+PcpnU0+i7OCf3M6sIUuXV5WZAd4
N22plkO1YVkJkKT+/sgn83DOe7ZyOoLG8tgr/vgXNPVMgvtet3bdih3wXLoS5/uC
6EBfms90keA99g==
-----END CERTIFICATE-----
Generated at Wed May 13 12:26:29 2026 by rpki-client