Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: YH1x1/jHQL5g7LDV6E5mglli5pdCWW9WMmpFk2u1AIc=
Subject key identifier: F0:52:AC:3A:5B:B3:F6:89:EE:57:89:B1:57:AB:2D:29:FA:7B:C6:62
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 019D28BB07C742BF47A3A41E8251859D6488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0F74
Signing time: Thu 26 Mar 2026 06:00:38 +0000
Manifest this update: Thu 26 Mar 2026 06:00:38 +0000
Manifest next update: Fri 27 Mar 2026 06:00:38 +0000
Files and hashes: 1: RF94BnXgi0R9Os57s0wl9sVC1E8.roa (hash: 0fOD15YKqjCsf/vXO4OCMgCmPeLPtrJce5ZO8YGHzXE=)
2: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: +cMjbCtYBfWB5vexPWzRqhFOvKhCSAi8c+N6YNVzmkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:07:c7:42:bf:47:a3:a4:1e:82:51:85:9d:64:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Mar 26 06:00:38 2026 GMT
Not After : Mar 27 06:00:38 2026 GMT
Subject: CN=f052ac3a5bb3f689ee5789b157ab2d29fa7bc662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:7f:7d:28:3c:e7:3a:f0:24:19:73:c7:79:
75:c5:de:78:d8:64:ad:2d:1a:97:41:04:c6:41:b2:
43:02:a1:94:c3:da:33:70:7e:22:09:c9:9d:64:19:
39:e6:6d:a4:d4:81:60:6c:00:60:2a:04:02:81:de:
63:4b:57:a1:cb:6d:43:04:4e:29:09:8d:a1:8d:d4:
95:d9:72:a0:4e:cc:a2:cf:71:8d:65:ce:7d:2e:d6:
b6:bd:9d:94:33:84:94:8c:c9:18:8b:d4:49:1c:ee:
d1:a3:04:3c:a7:26:e6:39:e5:1f:15:76:97:fa:e0:
d3:95:57:26:64:29:07:ac:e4:80:44:79:19:03:40:
05:72:07:e0:67:e3:73:9a:29:dd:a9:0d:ac:91:59:
24:20:b8:1b:71:41:c7:be:42:18:36:ea:07:73:34:
3b:ff:65:e0:12:21:81:ef:5e:65:3c:f3:96:e8:19:
70:d1:47:1a:56:36:32:68:d4:ff:28:4e:34:aa:5d:
06:2d:8e:2a:86:2e:5b:5a:c0:18:85:22:23:90:b0:
e4:48:fd:6d:c6:d7:88:17:cf:3b:98:dc:b4:f2:b6:
c5:b4:78:f6:55:1b:69:0b:9a:39:e0:86:24:34:5c:
a1:39:ce:0d:3c:ac:cc:83:e2:18:e2:88:2d:95:87:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:52:AC:3A:5B:B3:F6:89:EE:57:89:B1:57:AB:2D:29:FA:7B:C6:62
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:93:0d:87:f1:e8:8f:b9:36:93:ba:81:df:a8:46:f9:4d:d7:
b7:ed:cf:18:8f:0d:12:b8:28:07:42:ee:f1:2e:74:8b:7f:a9:
23:17:3f:77:85:bf:cc:bd:bf:21:86:9c:2b:cf:96:15:d6:4f:
24:50:19:2d:e2:3e:d7:48:8a:2a:bd:58:78:66:b0:8c:5e:22:
bd:e6:04:70:e3:e7:67:be:de:ed:61:92:52:b0:24:f8:c0:0c:
ff:36:98:a0:06:37:99:3b:b9:be:b2:c9:3e:2d:23:43:d0:38:
2f:65:d1:3d:b3:6c:fe:c2:0b:e4:11:2e:aa:3b:6c:17:c2:94:
00:b4:0f:07:8a:aa:88:7c:36:30:f7:48:c2:4d:9d:45:df:c1:
5b:78:4b:8a:b1:19:3d:b8:77:92:35:a1:95:be:9d:fd:0a:2f:
d9:eb:4b:4e:02:71:a3:b9:ac:7d:b2:56:55:c7:8c:87:2a:ba:
97:59:82:a6:7c:92:90:07:d3:e2:71:1c:ee:49:cb:94:79:41:
c3:89:44:ad:59:9c:9c:d4:2d:af:36:c2:fb:b6:1e:f8:43:b5:
a0:ad:87:22:5d:ab:c8:40:5f:70:bf:92:c2:19:fc:a1:dd:bc:
d7:29:84:13:8a:76:3b:f6:df:0a:82:80:35:ea:f2:73:34:5d:
1c:75:5b:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouwfHQr9Ho6QeglGFnWSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwN2RjYjZkYjlhNzVjMTAxN2ZlZTY3MmY3M2I5NjE3NzFi
NzdjYTEwHhcNMjYwMzI2MDYwMDM4WhcNMjYwMzI3MDYwMDM4WjAzMTEwLwYDVQQD
EyhmMDUyYWMzYTViYjNmNjg5ZWU1Nzg5YjE1N2FiMmQyOWZhN2JjNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5N/fSg85zrwJBlzx3l1xd542GSt
LRqXQQTGQbJDAqGUw9ozcH4iCcmdZBk55m2k1IFgbABgKgQCgd5jS1ehy21DBE4p
CY2hjdSV2XKgTsyiz3GNZc59Lta2vZ2UM4SUjMkYi9RJHO7RowQ8pybmOeUfFXaX
+uDTlVcmZCkHrOSARHkZA0AFcgfgZ+NzmindqQ2skVkkILgbcUHHvkIYNuoHczQ7
/2XgEiGB715lPPOW6Blw0UcaVjYyaNT/KE40ql0GLY4qhi5bWsAYhSIjkLDkSP1t
xteIF887mNy08rbFtHj2VRtpC5o54IYkNFyhOc4NPKzMg+IY4ogtlYdBMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBSrDpbs/aJ7leJsVerLSn6e8ZiMB8GA1UdIwQY
MBaAFKB9y225p1wQF/7mcvc7lhdxt3yhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMDMxMDUtZTdjOC00YTQ0LWExODEt
Y2I0MGVlMDQ4ZGMwLzEvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zMDMxMDUtZTdjOC00YTQ0LWExODEtY2I0MGVlMDQ4ZGMw
LzEvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5MNh/Ho
j7k2k7qB36hG+U3Xt+3PGI8NErgoB0Lu8S50i3+pIxc/d4W/zL2/IYacK8+WFdZP
JFAZLeI+10iKKr1YeGawjF4iveYEcOPnZ77e7WGSUrAk+MAM/zaYoAY3mTu5vrLJ
Pi0jQ9A4L2XRPbNs/sIL5BEuqjtsF8KUALQPB4qqiHw2MPdIwk2dRd/BW3hLirEZ
Pbh3kjWhlb6d/Qov2etLTgJxo7msfbJWVceMhyq6l1mCpnySkAfT4nEc7knLlHlB
w4lErVmcnNQtrzbC+7Ye+EO1oK2HIl2ryEBfcL+Swhn8od281ymEE4p2O/bfCoKA
NeryczRdHHVb7Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:51:56 2026 by rpki-client