Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: Fp0JfQCHNU7k6tg8oQw8Iwumhica+vrpS2yP7Au7vf8=
Subject key identifier: BA:95:38:93:BC:02:4D:1F:FD:E6:7E:44:62:28:72:91:34:9E:20:14
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 019D2884BE7489BE803E7076E5B67EF4FCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 05:01:21 +0000
Manifest this update: Thu 26 Mar 2026 05:01:21 +0000
Manifest next update: Fri 27 Mar 2026 05:01:21 +0000
Files and hashes: 1: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: iiReLY6BVOWJ7nMrPg/E+yhkYY8qx5Tv0YvtRRbwP44=)
2: WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa (hash: ZvSkcDxGhvi+aJsfbms5jhxFpHcmll85L+dtrGm8zwg=)
3: csloCIt3CTSVgebL58dJpxOdtC0.roa (hash: esH7P1ArdXIQnwu6qXLQUiXFhHbcU/4jPuyvpFcE9cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:be:74:89:be:80:3e:70:76:e5:b6:7e:f4:fc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Mar 26 05:01:21 2026 GMT
Not After : Mar 27 05:01:21 2026 GMT
Subject: CN=ba953893bc024d1ffde67e4462287291349e2014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2b:c5:36:10:d3:4b:e4:2b:1e:79:a1:d6:55:
66:ad:48:1e:4e:24:fc:06:a9:40:e2:5b:de:e8:38:
0f:08:09:a8:1c:d0:71:50:99:04:33:61:81:2e:b9:
31:6f:80:bc:a8:7b:29:de:7b:5c:af:6e:fb:f0:e7:
35:a3:81:e1:94:e1:a3:02:0a:e9:db:8e:3b:70:51:
35:5d:e0:f7:7b:91:5e:f4:ba:0a:53:2d:ea:d4:aa:
7a:7a:e7:7b:29:04:56:af:43:85:08:3f:e8:7e:2d:
07:82:84:63:73:c1:c7:fb:57:00:9f:76:f4:e6:e3:
ae:47:8b:ff:96:06:86:9f:25:7a:89:33:68:46:c3:
b2:d3:bf:40:93:fa:82:3b:09:8c:e2:05:12:dc:9e:
94:4a:d6:c8:75:5b:b8:07:1c:a8:03:2e:1f:c9:dd:
fc:b7:d8:55:64:b0:8f:db:a4:e3:3c:8d:27:97:db:
5b:44:37:02:eb:6a:1e:14:dd:a3:05:16:7d:db:6d:
ce:00:75:55:ad:29:34:6e:8c:83:20:8b:7d:85:f7:
f6:d3:73:d4:0c:d2:db:52:cd:42:4c:8f:96:9c:76:
1f:9c:81:0f:e4:02:45:60:1c:5c:cf:a1:9a:38:96:
63:7a:6d:b0:80:d5:14:e8:87:4d:fb:56:ed:38:09:
2f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:95:38:93:BC:02:4D:1F:FD:E6:7E:44:62:28:72:91:34:9E:20:14
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:69:af:50:30:e4:11:42:f5:ea:b1:cb:fb:f4:43:9b:1b:d3:
bd:bd:81:a0:82:0b:86:70:e2:32:da:3f:1a:eb:96:62:aa:ad:
b5:18:57:84:cb:3c:44:e8:76:14:73:55:06:09:ae:6c:07:d0:
2c:2c:a4:ea:b4:24:64:d6:17:3a:7e:8f:67:40:7b:c4:2b:5a:
bb:ce:08:7d:b2:bd:dd:dd:f9:cd:89:29:4e:2c:2e:f9:b0:bf:
86:bd:c2:2e:7b:0e:53:fb:51:9f:11:d7:e4:59:11:5d:04:a0:
49:2a:0c:b2:9e:73:35:c0:6e:e6:30:92:fa:de:52:0f:2e:c1:
76:02:b5:6e:21:97:0e:f9:9e:9e:f0:ec:d3:76:8f:d2:43:13:
12:c5:83:da:72:b2:14:7a:3c:7f:97:71:e4:00:a5:7e:b9:f8:
a8:23:34:90:35:d1:4f:6e:dd:68:fb:a3:65:3b:fd:d9:53:99:
0b:f5:a3:f6:9e:98:83:40:67:54:ab:b4:d5:65:ce:65:8f:1c:
09:b5:95:9b:69:64:4a:3f:f1:c6:3b:6d:c2:5f:85:ed:d1:dc:
2e:65:2b:7a:24:fb:4a:ed:e0:86:6b:b5:c6:e9:26:32:8a:af:
75:bc:7f:56:c3:75:2c:2f:92:67:50:43:24:93:21:61:24:b8:
f2:44:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:44 2026 by rpki-client