Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: q1aIdJLUcnm1RvmKo/2m2oq0t+f9GmmV6tDhLhV+U4o=
Subject key identifier: 92:E1:DA:51:90:F4:9B:0C:7C:79:D1:34:4D:08:E7:77:8F:96:8C:CC
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 019D265FC486F51A58EB683BAE59B70D66E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 0508
Signing time: Wed 25 Mar 2026 19:01:43 +0000
Manifest this update: Wed 25 Mar 2026 19:01:43 +0000
Manifest next update: Thu 26 Mar 2026 19:01:43 +0000
Files and hashes: 1: 5kdfSFfIXpTRDKj7nU9dTnk_a7Q.roa (hash: Qud0EaTIzAf2oGbBUwUkaVwSjph89PDDdo19BAvVZGk=)
2: IxT2p1USvkgGTKI4jIEAGlYZs-c.roa (hash: RpYym6oxELeUAn+F/Xd8p5iioExynMd0f+38UAxEIvY=)
3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: 2ahH0DDQylmYnr4yMN6Ddeyc2MQAarxO5MVQr1k9n1s=)
4: oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa (hash: myh6PixZ04dXKVpBJ7oXGMj9UcP3arkRwKqy/fuyKlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c4:86:f5:1a:58:eb:68:3b:ae:59:b7:0d:66:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Mar 25 19:01:43 2026 GMT
Not After : Mar 26 19:01:43 2026 GMT
Subject: CN=92e1da5190f49b0c7c79d1344d08e7778f968ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:6a:e2:2a:e2:b0:e0:34:a4:0d:35:98:4f:
c5:f5:35:09:f8:34:fa:43:c4:0a:e0:63:f0:0b:a5:
44:6c:8b:5b:0b:ac:18:c0:be:72:dd:9c:f7:53:fe:
71:64:8a:3d:1a:da:58:c0:81:d9:c7:8a:00:0a:21:
fa:be:a0:a3:d5:3a:10:99:c3:ab:16:a5:b3:20:4f:
5a:d6:a4:28:34:4b:63:21:6b:15:ca:47:f8:94:1d:
67:3d:3b:72:4d:a5:1c:2d:23:78:47:41:33:a9:55:
80:af:ca:5f:20:c2:11:d0:a7:76:f6:e5:a1:7e:d9:
99:df:65:a1:13:f3:04:b7:6e:2e:9d:99:27:df:b9:
54:45:6b:41:ba:dd:37:f3:20:f3:61:c1:05:57:2f:
02:c4:ac:00:45:a2:dd:e0:78:27:d1:6d:8f:79:69:
39:88:84:15:52:86:21:d5:09:8a:16:7e:a3:5e:23:
9d:f0:ec:74:5d:1c:de:94:3e:ad:4b:4f:be:dd:66:
52:ea:3e:32:e6:00:27:dd:af:db:55:ba:ba:13:0b:
10:4a:3c:a7:f5:1b:a3:c0:c5:7b:7d:f5:6f:11:78:
fe:63:e5:86:65:c8:ca:ed:3d:89:07:ec:be:f7:55:
a7:ef:b6:93:f7:a4:fd:84:75:fb:ce:55:38:bf:14:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E1:DA:51:90:F4:9B:0C:7C:79:D1:34:4D:08:E7:77:8F:96:8C:CC
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:28:da:e1:b0:f3:cc:15:58:b3:61:6b:ba:e6:d1:21:99:16:
b1:ce:dc:c8:7c:86:8f:4f:13:21:f6:01:21:e0:09:5c:cf:7a:
4f:25:ad:32:02:80:b2:78:09:2f:c3:d7:e3:b9:ab:2e:38:f9:
6a:2f:1e:b4:c1:12:c5:ff:f2:e3:64:78:67:2a:de:60:14:3b:
a3:73:68:1c:b0:18:d5:f1:20:7c:45:c6:58:59:24:5b:8e:de:
8d:1f:37:b3:ce:57:00:f6:64:59:41:6c:14:c6:91:0a:15:ac:
b5:21:b3:dc:4c:ac:37:67:45:71:d6:b8:7f:75:cc:fd:1f:ea:
29:d1:7e:d4:3d:89:8e:c9:61:7b:8a:6a:a3:e0:8d:74:a7:02:
99:bf:26:26:cb:d3:b9:74:7f:21:c7:39:2b:24:83:eb:0f:ab:
a4:c8:a9:75:a1:ba:0e:d4:a8:ae:3f:0d:4d:44:27:63:ad:85:
3d:1f:f4:11:42:21:f2:d4:08:74:d7:57:a5:3d:ef:69:86:f6:
47:de:68:8e:d5:7d:88:a7:bc:28:dc:88:1a:9a:3a:f5:df:6e:
80:54:bb:f2:e4:d1:42:41:2c:96:7d:73:87:24:22:1c:54:37:
4b:df:c9:d9:78:09:20:9b:ca:ec:23:ca:96:84:d8:98:e1:2f:
9f:dc:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:29 2026 by rpki-client