Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
File: oIwpap_lpgUVguWt5HVJhfbxGzE.mft (raw, json)
Hash identifier: 1zZ5RbDhxOWp0t1rc6lv7cvsMrshek9s+4yTd21U9X0=
Subject key identifier: 81:86:09:33:B5:61:21:15:A1:C2:42:36:A4:B1:93:A0:69:EF:EF:27
Authority key identifier: A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
Certificate issuer: /CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Certificate serial: 019D28F21D509ED09C58044E58E2D226098D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
Manifest number: B1
Signing time: Thu 26 Mar 2026 07:00:48 +0000
Manifest this update: Thu 26 Mar 2026 07:00:48 +0000
Manifest next update: Fri 27 Mar 2026 07:00:48 +0000
Files and hashes: 1: PZKZVJbLIiC-nyKzbha8Q1plbB0.roa (hash: OGaxQzQU67t4LsOvlqtFqnosSDCkJ4cDH47PaItpnpE=)
2: oIwpap_lpgUVguWt5HVJhfbxGzE.crl (hash: lmt24PJelLjFYbqx9lp2o7cIxIR+zJoBZGzsespT9Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:1d:50:9e:d0:9c:58:04:4e:58:e2:d2:26:09:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Validity
Not Before: Mar 26 07:00:48 2026 GMT
Not After : Mar 27 07:00:48 2026 GMT
Subject: CN=81860933b5612115a1c24236a4b193a069efef27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:e8:2e:81:61:c3:87:35:fe:93:9c:43:c6:
c9:66:e1:b7:57:fb:3b:c5:15:b1:5a:06:3e:25:c0:
f5:de:ec:e4:3e:c4:2c:69:0e:a8:9e:81:1b:9a:1d:
a4:88:2f:ae:d5:1c:04:fa:e5:1c:0e:15:77:a2:70:
22:b0:e1:b2:a7:a3:6f:42:c9:38:5e:dd:13:7e:d4:
49:57:d7:12:f5:60:8a:0b:ec:df:4b:a7:fa:b7:0a:
e4:1e:a0:e4:75:8f:28:cd:a1:0c:67:aa:b3:e5:4e:
da:63:31:29:63:c4:35:c1:71:7a:fc:eb:46:03:cc:
f0:ac:d9:6b:76:48:ae:4a:69:9f:60:ea:e8:67:53:
b8:90:bc:b5:a4:31:ad:c1:ab:8d:8c:dc:27:00:a5:
0e:1b:63:71:ae:e2:fb:00:9d:7a:a3:64:e7:7a:cd:
f9:21:ed:4b:9c:18:13:68:32:fa:9c:77:15:f5:c3:
77:89:e3:ac:db:5e:56:1d:7c:86:9a:ee:db:61:88:
3a:ac:99:76:6d:5b:ae:38:d1:10:46:df:04:ba:2a:
35:f4:69:2b:11:dd:2a:f2:cc:86:53:e9:88:7f:6c:
39:9a:95:fd:84:44:fe:e3:2d:13:4c:48:2e:c5:fd:
50:42:04:70:d1:16:a8:6f:77:e0:49:11:44:06:c2:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:86:09:33:B5:61:21:15:A1:C2:42:36:A4:B1:93:A0:69:EF:EF:27
X509v3 Authority Key Identifier:
keyid:A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3b:52:e0:9d:83:06:e0:00:dd:84:56:9d:91:f2:1b:f4:b7:
87:9a:2e:48:91:86:7e:67:e7:f5:9f:91:57:70:f6:0f:6d:69:
d5:63:95:67:ac:82:65:25:af:71:d2:2d:70:5a:d7:86:5e:f9:
2e:45:d9:8d:80:36:b1:f0:d1:19:4b:45:0b:c7:dd:2b:8c:16:
e5:72:6f:1f:9f:29:d8:50:31:f1:42:65:10:70:52:cc:37:03:
f3:b7:c9:64:9e:38:27:38:1c:10:83:c7:5b:a7:d1:64:83:89:
09:f9:f8:d2:4a:0e:11:5e:e9:46:7b:dc:1d:72:ab:15:03:7b:
f4:5b:84:c5:3c:7e:b9:5b:00:4e:4a:e5:be:38:f0:35:dd:01:
e5:d3:68:6c:05:15:7a:87:c6:f9:75:a0:f8:d2:5c:52:9e:9e:
b9:b6:24:81:81:35:5e:e7:93:4a:d2:b1:61:67:c8:ef:a7:ed:
d0:2b:4e:ed:88:f1:3a:73:47:55:41:b9:4c:36:15:83:7c:eb:
d7:f5:62:b4:4f:2d:fe:76:55:b6:11:86:16:c4:47:45:0c:7f:
a1:97:b9:bc:17:c6:2b:78:de:2d:3b:62:3d:58:27:0b:40:ff:
20:10:94:7e:9b:90:bb:af:ae:cd:fc:92:b4:41:d1:02:e3:57:
2a:45:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:18:30 2026 by rpki-client